Privacy.

Plain English, short version: we keep what we need to send you the show, and that's it.

What we collect

When you sign up, we store your email address. That's the only required field. If you build a personalized weekly show, you can also give us your fantasy roster (the players you've added or imported), your Sleeper username (if you import from Sleeper), and the NFL teams you follow. All of that is optional — you can listen to every team and every top-100 player without giving us anything.

What we do with it

Two things, and only two: (1) we email you your weekly Muffed episode, and (2) we use your roster and followed teams to personalize the episode. That's the full list. We don't sell your data, we don't share it for advertising, and we don't run third-party ad trackers or build advertising profiles. We use a small set of service providers to run Muffed — Supabase (database), Resend (email delivery), Vercel (hosting), Anthropic (the AI that writes the scripts), and PostHog (product analytics — see below). They process data on our behalf to deliver the service and don't get to do anything else with it.

Analytics

To learn what's working — which episodes get played, where new listeners land, and where people drop off — we use PostHog, a product-analytics tool. It records pageviews, clicks, and anonymized session replays. Two things worth knowing: session replays mask everything you type (search boxes, usernames, anything in a form), and you stay anonymous to us until you sign in — at which point analytics is tied to your account so we can see the signup-to-first-episode journey. It's never used for advertising and never sold, it runs only in your browser, and if you block it the site works exactly the same.

The MCP server

We run a public MCP server at muffed.ai/api/mcp that lets an AI assistant call our verified NFL data. It needs no account and no key, and it can return nothing about any Muffed user — it has no access to accounts, email addresses, or saved rosters.

For each tool call we record the time, which tool ran, whether it succeeded, how long it took, which client software called it, and low-cardinality arguments such as a metric name or a player name. We also store a salted one-way hash of the calling IP address, and of a Sleeper league id where one was used. The salt rotates daily and those hashes are deleted after 30 days. This is to prevent abuse, keep the service up, and count roughly how many distinct people use it.

Through the MCP server we do not store raw IP addresses, raw league ids, or Sleeper usernames in any form. We do not receive the text of your conversation — only the arguments your assistant sends with a tool call. A league id you give your assistant answers that request and is cached briefly to be polite to Sleeper's API; it is never written to our database and never linked to you.

Questions you ask

When you use muffed.ai/ask, we log the question you typed, what it resolved to, and how long it took. We do this to improve coverage: the questions Muffed can't answer are how we decide what to publish next.

Questions are not linked to any account, even if you're signed in. Alongside each one we store a salted one-way hash of the calling IP address and of a per-tab session id — never the raw values — which lets us apply rate limits and tell one person asking ten questions from ten people asking one. The salt rotates daily and both hashes are deleted after 30 days. Please don't type anything personal into the box; it is a stats query tool, and it has no reason to know anything about you.

How long we keep it

Until you ask us to delete it, or you delete your account. Whichever comes first. MCP and /ask hashed identifiers are deleted after 30 days by a daily job; the question text and the aggregate counts derived from them are kept.

Your rights

• See your data. Everything we have on you is visible on your dashboard.
• Delete it. Email us and we'll wipe your account.
• Stop the emails instantly. Every email has a one-click unsubscribe link in the footer.

California residents

Same as above. We don't sell or share personal information for advertising, so CCPA's “Do Not Sell or Share” right doesn't apply — we never started.

Contact

Questions, deletion requests, anything else: hello@muffed.ai