Sign in with your BuzzerBeater account.
Create an access key in BuzzerBeater under Preferences → Access Keys. bbSuite verifies it against the BB API and never sees your BuzzerBeater password.
Your BuzzerBeater access key is used to call the game's API as you, so every scan you trigger runs on your own account and nobody else's.
By default the key is never stored. It lives in your session, encrypted even there — session files outlive the logout that should have ended it — and is gone when you sign out.
Storing it is opt-in, one tick box at sign-in, and buys one thing: the weekly job that refreshes your squad after training so you do not have to. It is sealed with a key that is not in the database, dropped the moment BuzzerBeater rejects it or after 30 days without a sign-in, and you can delete it yourself at any time from your account page.
Each tracked team keeps its own players, plans and history, and accounts cannot see each other's. That separation is enforced by the database itself, not only by the application.
Exact scouted skills are restricted. As per my decision, exact values are not displayed to users.