Last updated September 19, 2026
Privacy policy
Scrimmage (scrimmage.football) is run by iSimplifyMe LLC, 1150 N Hoyne, Chicago, IL 60622 ("we", "us"). This page says what the site collects, why, who else handles it, and what you can ask us to do about it.
The short version
- No ads, no third-party analytics, no tracking cookies, and we don't sell your information.
- When you load a salary file, the optimizer reads it inside your browser, and your file never leaves your machine.
- Our server does learn which optimizer steps you reach, such as a build starting or finishing, but the requests that tell it never carry what was in your file.
What you give us
- Your account: Your email address. You sign in on a page run by Amazon Cognito, which keeps your password (we never see it) and may email you, for example to confirm your address.
- A Season Pass purchase: Stripe takes your payment on its own checkout page, so we never see your card number, and we give Stripe your email address and account ID with the order. We keep a record of the purchase (Stripe's reference numbers, the amount and when it happened) and of any refund.
- Optimizer presets: When you save a preset we store its name and your settings: the site, the mode, how many lineups, your rules, and the players you locked, excluded, boosted or capped (including caps from a Max Exposure column in your file). We store those players by our player ID, or, in advanced mode and for players you add by hand, by the name, position and team in your file, never the file itself or its salaries.
If you connect a Sleeper league
Your browser uses the Sleeper username you enter to load your leagues and roster straight from Sleeper. We don't store your league data.
The page also asks our server for this week's projections in your league's scoring format, and for the names of any of your players our board doesn't list, by player ID. Our request logs record those requests.
Your browser remembers the last username you entered, so you don't have to type it again. It stays in your browser and isn't sent to us.
What the site collects on its own
Our servers receive your IP address, your browser and device type, the page or file you asked for (including anything after the ? in its address), the page you came from, and the time. Amazon CloudFront, which delivers the site, records these in logs we keep for up to 60 days, and the servers that run the site keep their own logs for up to 30 days.
Optimizer steps
The site sends our server a small request when you:
- open the file picker, or load a file that is accepted or rejected (with the kind of problem, such as missing columns);
- start a lineup build, and when it finishes, fails or is stopped (with rough ranges for how many lineups and how long it took);
- switch modes or export your lineups;
- reach the free lineup limit;
- follow a link to the Season Pass or to sign in, on any page of the site.
Build, salary-file and export requests say which site (DraftKings or FanDuel) you chose; build requests also say the mode and whether you have a Season Pass. Link requests say which part of the site you were on and where the link sat on the page.
None of these requests carries a cookie or anything from your file: no players, salaries, projections or file names. Your IP address and browser details come with each one, as with every request, and our request logs record them.
Cookies
The site sets two cookies, both for signing in:
- scrimmage_auth_state: set when you start to sign in, a one-time check that protects that step. It expires after 10 minutes.
- scrimmage_session: keeps you signed in. It holds the sign-in token Amazon Cognito issues, which includes your email address and account ID, and it expires when that token does.
Amazon Cognito's sign-in page sets its own cookies on its own site. There are no advertising or analytics cookies.
The site doesn't track you across other sites, so it works the same whether or not your browser sends Do Not Track or Global Privacy Control.
How we use it
- To run the site, and your account if you have one.
- To take payments for the Season Pass and handle refunds.
- To see which parts of the optimizer people use and where they get stuck, so we can improve it.
- To keep the site secure and working, and to meet our legal obligations.
Who else handles it
Companies that run parts of the site for us, and only for that purpose:
- Amazon Web Services: hosting and delivering the site (CloudFront, the servers and the database) and sign-in (Amazon Cognito).
- Stripe: payments for the Season Pass. What you enter on Stripe's checkout page is covered by Stripe's own privacy policy.
Sleeper is not one of them. When you connect a league, your browser contacts Sleeper directly, so Sleeper receives your IP address and browser details with the request, and Sleeper's own privacy policy applies.
We may also disclose information when the law requires it, to protect people's rights and safety, or as part of a sale or reorganization of our business, in which case this policy keeps applying to it.
We don't sell your personal information, and we don't share it for advertising.
How long we keep it
- Your account and presets: until you ask us to delete them.
- Purchase and refund records: for as long as we need them for our accounts and taxes.
- Request logs: up to 60 days; the servers' own logs, up to 30 days.
What you can ask us
You can ask what personal information we hold about you, and ask us to correct it, delete it, or send you a copy, by emailing ai@isimplifyme.com. We may need to confirm the request comes from you; we'll answer within the time the law allows, and you won't be treated differently for asking.
Deleting your account deletes your sign-in, with its email address, and your presets. If you bought a Season Pass, we keep the purchase records we need for our accounts, and the Stripe order still has your email address.
Children
Scrimmage isn't meant for children under 13, and we don't knowingly collect their information. If you think a child has given us personal information, email ai@isimplifyme.com and we'll delete it.
Security
The site is served over HTTPS, the sign-in cookie can't be read by the page's scripts, and access to our systems is restricted. No way of sending or storing data is completely secure.
Changes to this policy
If we change this policy, we'll post the new version on this page and update the date at the top.
Contact
iSimplifyMe LLC1150 N Hoyne, Chicago, IL 60622
ai@isimplifyme.com