What we keep
- Your email address, if you give it to us.
- Your roster: player IDs, the platform you picked, and league settings you enter (such as superflex or team count). If the Sleeper import is ever on, the Sleeper league ID and name.
- Reports you send when a take starts in the wrong place.
- Which email links you click.
- What you play and follow, and what you buy.
- Our own usage events, such as "played a take". They hold no IP address and no free text.
When you paste roster text, we read it once to match players. We do not keep the text.
We do not keep other people's data, such as your league mates, even if their names are in the text you paste.
What we never ask for
Banter never asks for your ESPN, Yahoo or Sleeper login, password or cookies. [Open: should this name the ESPN cookies (espn_s2 and SWID) too? Question 2.]
Other companies your browser contacts
Your browser talks to these hosts directly, so they see your IP address and browser details.
| Host | Why |
|---|---|
challenges.cloudflare.com | Cloudflare Turnstile, the check that you are a person. It runs on the page where you paste a roster, and will run on sign-in once accounts launch. Cloudflare sees your IP address and browser details to decide, and may store its own data in your browser. |
static.cloudflareinsights.com | Cloudflare Web Analytics, which counts page views. It loads on some pages (never on your private digest page, the roster pages or these legal pages). It sets no cookies. |
cloudflareinsights.com | Where the Web Analytics script sends its page-view counts. |
api.sleeper.app | Sleeper. Only if the Sleeper roster import is switched on, which it is not today. Your browser would ask Sleeper for your own roster. Banter's servers do not contact Sleeper. [Needs Sleeper's written permission first.] |
| The host in a show's audio address | When you press Play, your browser loads the audio from the publisher's own host. The address can pass through measurement or ad services (for example Podtrac or Megaphone), and some can be plain http, which anyone on your network can see. They see your IP address, your browser and that the request came from Banter. They may count the play or insert ads. |
| Hosts that serve show artwork | Some pages may load a show's artwork from the host named in the show's feed. |
| Show websites | If you click a link to a show or an episode, you leave Banter. That site's own policy applies. |
Companies that handle data for us
- Cloudflare: hosting, our database, the person check, page-view counts and email sending. It sees your IP address to serve and rate-limit requests; we do not store it.
- Resend: email sending if Cloudflare's email fails.
- Stripe: payments. Your card details go to Stripe, not to us.
- Sentry: error reports, planned for v1. [Open: scrubbing details to be confirmed. Question 13.]
- Anthropic (Claude) and Cloudflare Workers AI process podcast audio and transcripts to find takes. No personal data is sent. [Open: the exact route. Question 13.]
[Open: which of these are live on launch day, and the final list. Question 13.]
Podcasters who opt out
When a podcaster asks to opt out, our database stores only hashes of the contact email and the confirmation code, not the address itself. The address still passes through our email sender when we send the code. [Open: question 16.]
How long we keep it
- Our plan: you can ask us to delete your data, and we do it within 30 days. In the app, "delete my data" will remove your account, roster, plays and follows and strip the ID from our usage events.
- Planned with accounts: guest records with no activity for 90 days are deleted.
- Planned: detailed usage events older than 13 months are turned into totals and then deleted.
- Test-phase data is deleted at the end of the test unless you choose to keep an account. Test-phase digest links stop working on 31 January 2027.
- Database backups can hold deleted data for up to 30 days.
[Open: these numbers come from our retention plan and need a lawyer's check. Question 7.]
Your choices
- Delete your data, or change email settings: ask us at the address below. [No request address exists yet. Question 4.] In-app controls are planned.
- Ask for a copy of your data: same address. An in-app export is planned.
- Unsubscribe from any email with the link in it.
Age
Banter is for people 13 and older. We do not knowingly collect data from children under 13. If you think we have, tell us and we will delete it. [Question 5.]
Contact
[Contact email and postal address to be added.]
Change log
- 2026-10-26: first draft.