You stay in control

Private by default

Wingman is built local-first. Your league setup, your draft state, your targets and your notes stay on your machine unless you ask it to read your league from ESPN. No telemetry, no crash reports, no usage counts, no licence check, no update check.

This is the page the rest of the site links to when it says see exactly how Wingman handles your data, so what follows is the whole list rather than a summary of it — and it is short enough to read.

What Wingman sends

One destination, and it is ESPN. Wingman reads a league from ESPN when you add one and when you press Refresh. Both are things you do.

The one thing you did not press

One exception, and it is on this page: once a league exists, a dot in the corner asks ESPN's host every 20 seconds whether a refresh would reach them. It asks only whether that host answers: it carries no league, no name, no player and no sign-in. Before you add a league it does not ask at all. That it repeats on a timer rather than when somebody asks is a decision nobody has ruled on, and it is written down here, on the first-run statement, and in the About box.

Your ESPN sign-in

If you save an ESPN sign-in it is written to one file in your own AppData folder, sent to ESPN and to nothing else, and never drawn on a screen. Your leagues, your sign-in and your whole draft record are kept in your own AppData folder, not in the program folder. Uninstalling Wingman leaves them where they are.

Starting and stopping it

Wingman has no window. It runs in the background with an icon by the clock — Windows tucks a new one under the ^ arrow until you drag it out — and right-clicking it gives Open Wingman and Quit Wingman. Closing the browser tab does not stop it, so a draft survives a tab you close by accident. It stops when you say so and not when a window gets closed, which is the point: the one evening this matters is the one where a browser tab is the least deliberate thing on screen.

Updates

Nothing here updates itself, or checks whether it should. When there is a new version you come and get it. There is no version check, no update service and no notification: the software does not know a new build exists and will not find out.

This website

These pages load no scripts from anywhere else, embed no fonts from anywhere else, set no cookies and run no analytics. Everything they need came from the same folder they did. The one thing kept in your browser is a count of wrong access codes, so three of them can pause the box for a quarter of an hour; it is written only once you get one wrong, and it is cleared the moment you get it right. Your browser still tells the host serving this page that it asked for it, which is how the web works and is not something a page can opt out of.