Privacy

Dr. Commish is owned and operated by Savage Vibe LLC, which holds the data described on this page and answers for it. Write to support@drcommish.com about any of it.

For a commissioner: the name and email address you sign in with, and when you accepted the terms. For a league: what ESPN shows its members (team and manager names, rosters, scores, the draft and transactions), what its commissioners add (nicknames, running jokes, off-limits notes, dues, fines, trophies and the constitution) and a record of every read from ESPN.

What The Doc writes is kept with what it was written from: recaps and previews with the brief assembled for them, answers with the question asked and who asked it, and rulings with the dispute, its replies and the constitution they cite. That is so a commissioner, or Savage Vibe LLC, can check a complaint about what The Doc said against what it was given.

Two cookies on espn.com, named SWID and espn_s2. They are the session your browser already holds with ESPN. The extension reads nothing on any other site, injects nothing into pages other than its own panel on espn.com, and shows no advertising.

A copy of your encrypted ESPN session cookie is stored on Dr. Commish’s servers, solely to read the fantasy leagues you chose. It is encrypted with AES-256-GCM under a key that exists only for your league, decrypted only inside the ESPN client at the moment of a request, never logged and never shown again. Every read is listed on your Settings page.

The extension also keeps a hash of the last pair it sent, so it can tell when ESPN has issued new ones, and a short-lived link while a connection is in progress. It never stores the cookie values themselves.

A commissioner can enter a manager’s email address on the Managers page. Dr. Commish uses it only to send that manager their personal link and to tell them when a dispute they filed has been ruled on. It is not used for marketing and is not shown to other managers.

The link, and the session it starts on a device, are stored only as one-way hashes. The session sits in a cookie on that device for up to 400 days and stops working after ninety days without use, or at once when the commissioner resets that manager’s access. A manager’s questions, challenge flags and replies are kept with the league under their name, and the commissioner can see them.

A few services run parts of Dr. Commish for Savage Vibe LLC and handle data only to do that: Vercel hosts it; Neon holds the database; Clerk handles commissioners’ sign-in; Anthropic’s Claude writes the recaps, previews, answers and rulings, and so receives the brief for a recap or preview, and the question or dispute, its replies and the league’s constitution for an answer or ruling; Resend sends the email. When payment is switched on, Stripe takes it, and card details go to Stripe without reaching Dr. Commish.

Clerk’s cookies keep a commissioner signed in. Dr. Commish sets two of its own: one remembering which of your leagues you last opened, and one holding a manager’s session. There are no analytics or advertising cookies.

An answer from The Doc or a ruling can be given its own link to share. Anyone with that link can read that one answer or ruling without signing in. Nothing else about the league is reachable from it.

Settings, then Disconnect and delete credentials, removes the ciphertext and the key within a minute. Deleting your account removes everything only you could reach. Changing your ESPN password invalidates the cookies at the source; Dr. Commish notices on its next read and stops.

A commissioner can clear a manager’s email address, which also cancels their link, and can reset a manager’s access, which ends every session. When the last commissioner leaves a league or deletes their account, the league is deleted, and its managers, their questions and disputes and everything else held for it go with it. A manager who wants something removed can ask their commissioner, or write to support@drcommish.com.

It never writes to your league: no trades, no lineup changes, no messages sent on your behalf. It does not sell the cookies, your league data or anyone’s email address, and shares them with no one beyond the services listed above, which handle them only to run Dr. Commish. Nothing here is used for advertising. Dr. Commish is not affiliated with ESPN.