Extension Privacy
Single purpose
The YUNO Sports ESPN Connector extension does exactly one thing: it connects your ESPN Fantasy league to your YUNO Sports account so YUNO can sync your roster and show analytics. It does nothing else. Everything else about the site is covered by our main privacy policy.
What it accesses
ESPN's fantasy API requires two session cookies to read your private league data: SWID and espn_s2. When you press the connect button, either in the extension popup or in the banner it adds to ESPN, it reads only those two cookies, only from espn.com, using Chrome's cookies API. Nothing is read until you press it.
It does not read any other cookies, your browsing history, your ESPN password, or data from any site other than espn.com and yunosports.com.
How it's used
First it asks yunosports.com whether you are signed in, so it can tell you to log in rather than sending cookies that would be turned away. The two cookies are then sent over HTTPS to YUNO Sports and stored encrypted, tied to your YUNO account. YUNO uses them server-side to read your ESPN league roster and matchups on your behalf. The cookies are never shown to other users, never sold, and never used for advertising.
Permissions
- Cookies: to read your ESPN session cookies on
espn.com, and to attach your YUNO session when sending them toyunosports.com. - Storage: to remember a development server override, which is used in testing only. Separately, dismissing the banner on ESPN leaves a flag in that page's own session storage so it stays dismissed until you close the tab.
- Site access to espn.com and yunosports.com: to show the connect button on ESPN and to detect that the extension is installed on YUNO. The copy you can download directly from YUNO also lists
localhost, which we use to test against a local build of the site. The Chrome Web Store version does not include it.
There is no access to all sites, no tabs permission, and no remote code execution. It can open a YUNO Sports page for you, such as the sign-in page or the welcome page shown once after you install it, but it cannot see the other tabs you have open.
Removing your data
To delete the ESPN cookies stored on your YUNO Sports account, open Connected accounts in your account and press Disconnect. That erases them from our database straight away, along with the leagues that sync through them, and it tells you which leagues those are before you confirm. Deleting your YUNO account removes them too, along with the rest of your data.
Removing the extension at chrome://extensions stops it reading anything further, though it does not by itself delete what is already stored, so do both if you want a clean break. ESPN session cookies also expire on their own over time.
Contact
Questions about the extension and your data? Reach us via the contact page.