Effective: July 12, 2026
BakaBois Draft Assistant is designed so ESPN account data stays in the customer's browser and local machine.
The Chrome extension observes ESPN fantasy draft bootstrap responses and live draft protocol messages needed to identify league settings, teams, players, rankings, picks, nominations, and bids. It sends sanitized draft data only to the BakaBois bridge on `127.0.0.1`.
The extension does not intentionally collect or transmit ESPN passwords, cookies, browser storage, account tokens, raw `memberId` URLs, or `TOKEN` protocol messages.
When a customer activates paid BakaBois access, the extension stores the customer's BakaBois API URL and access key in Chrome's local extension storage. The key is sent through the bridge on the same computer only when requesting a recommendation, is forwarded to the customer-configured HTTPS BakaBois API, and is never included in extension status, diagnostics, screenshots, or ESPN traffic. Removing the key in Connection & Paid Access disables hosted requests.
Local draft state and imported rankings are stored on the customer's device. The default location is `~/.codex/bakabois-draft-assistant/`, unless `BAKABOIS_DATA_DIR` is configured.
When premium recommendations are enabled, BakaBois may send structured draft state to the configured BakaBois API: league format, roster slots, drafted players, available-player order, team names, manager tendencies supplied by the customer, and ranking data. It does not require ESPN authentication material.
AI-assisted recommendations send that same bounded, structured draft context to OpenAI for candidate re-ranking and explanation. BakaBois configures these requests not to be stored by the model provider and supplies no ESPN passwords, cookies, account tokens, or payment-card information. If the AI request is unavailable or times out, the deterministic BakaBois engine remains active.
API keys are stored by the service as SHA-256 hashes. Request logs should be configured not to store authorization headers or full request bodies.
Payments and subscription management are handled by Stripe. Stripe processes billing details under Stripe's own privacy terms. BakaBois stores Stripe customer and subscription identifiers, subscription status, and the purchaser email needed to provision and manage access. BakaBois does not receive full payment-card numbers.
Customers can delete local draft state by removing their configured BakaBois data directory. Subscription access records are retained while an account is active and as reasonably required for security, fraud prevention, accounting, and legal obligations.
BakaBois uses data received through Chrome extension APIs only to provide or improve its disclosed single purpose: live ESPN fantasy draft tracking and recommendations. BakaBois does not sell this data, use it for personalized advertising, or permit humans to read it except with the customer's specific consent for support, when required for security or law, or after aggregation and anonymization for internal operations.
BakaBois's use of information received through Chrome extension APIs adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.
Privacy questions and deletion requests can be sent to contact@operatorzero.ai.