Last Updated: September 22, 2026
This Privacy Policy describes how FIRST UP L.L.C. ("FirstUp," "we," "us," or "our") collects, uses, and protects your information when you use the FirstUp website and mobile application (collectively, the "Service").
FirstUp is operated by FIRST UP L.L.C., a Florida limited liability company located at 2125 Biscayne Blvd, Ste 204 #27656, Miami, FL 33137. You can contact us at support@firstupfantasy.com with any questions about this Privacy Policy.
When you create a FirstUp account, we collect your email address and a securely hashed password (via our authentication provider, Supabase Auth). We do not store your plaintext password.
To provide our core service — automatically submitting waiver claims on your behalf — we need to connect to your fantasy sports platform accounts. Depending on which platforms you connect, we collect and store:
espn_s2 and SWID session cookies from your logged-in ESPN session, which you provide to us. ESPN does not offer an authorization system for third-party applications, so these session cookies are the only way to act on your behalf. We do not see or store your ESPN password. Please note that these cookies are broader than a scoped authorization token: they identify your ESPN session generally rather than granting access to one specific function. They remain valid until they expire or until you log out of ESPN, which invalidates them. Because ESPN's own responses are broader than what FirstUp needs, a routine league read may also return your SWID identifier and your ESPN notification preferences. We use this data only to operate the Service and do not use your notification preferences for any purpose.We also store league, team, and roster data pulled from these platforms — such as team names, league names, rosters, and available free agents — necessary to build and manage your waiver priority queue.
We collect information about your waiver queue entries, claim history, and notification preferences within the Service.
Payments made through our website are processed by Stripe. Stripe collects your payment card details directly; we never receive or store your full card number, expiration date, or security code. We store a record of your purchase — including the plan purchased, the date, and an identifier issued by Stripe — so we can confirm your access to paid features.
Stripe also collects an email address at checkout for your receipt. Stripe's handling of your information is governed by Stripe's own privacy policy.
If you purchase through the Apple App Store or Google Play, that transaction is handled by Apple or Google under their own privacy policies, and we receive only confirmation that a purchase occurred.
We use the information above to:
We do not sell your personal information to third parties.
We share information only as necessary to operate the Service:
We do not share your fantasy platform credentials with any party other than the platform they belong to, and only for the purpose of submitting claims or retrieving data on your behalf.
We retain your account and platform credential data for as long as your account is active. You may delete your account and all associated data at any time from the Account page in the Service, or by contacting us at support@firstupfantasy.com.
We use industry-standard measures to protect your data, including encrypted storage and access controls. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
In the event of a data breach affecting your information, we will notify you in accordance with Florida law (Fla. Stat. § 501.171). ESPN session cookies and Yahoo OAuth tokens are additionally protected by database-level access controls limiting each user's data to that user alone.
You may disconnect a fantasy platform account from FirstUp at any time within the app, which stops us from accessing that platform going forward. Disconnecting a platform does not automatically delete previously stored data; you may delete your account and all associated data separately.
If you have connected an ESPN account, logging out of ESPN in your own browser invalidates the session cookies you gave us, which prevents any further access to your ESPN account regardless of what we have stored.
You may delete your FirstUp account entirely from the Account page in the Service. This permanently removes your account, your connected platforms, your leagues, and your queued pickups, and cannot be undone.
FirstUp is not directed to children under 13 (or the relevant minimum age in your jurisdiction), and we do not knowingly collect information from children.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy with a new "Last Updated" date.
If you have questions about this Privacy Policy, contact us at support@firstupfantasy.com.