Privacy Policy

Last updated: [DATE]

My CFB Big Board (mycfbbigboard.com, “the board”, “we”, “us”) is run by [BUSINESS OR OWNER NAME]. This policy explains what we collect when you use the board, why, and what you can ask us to do with it. The short version: we collect as little as we can, we never sell it, and we don't use advertising or tracking cookies.

What we collect

Your account

The username you choose. It appears on your board (“SAM'S CFB BIG BOARD”) and is how we tell accounts apart — for example on feedback you send. You can change it at any time.
If you sign in with Apple or Google: only the account identifier they give us. We don't keep the email address they share.
If you sign in with an emailed code: we use your email address once, to send the code, and don't keep it. We keep only a one-way scrambled fingerprint of it, so the same address reaches the same account next time; the address can't be recovered from it. The code is also stored scrambled and expires after 10 minutes.
If you were given a username and password: your username.

We don't ask for your name, birthday, phone number or address, and we don't keep your email address.

Your signed-in devices

For each device you sign in on, we keep a short description (for example “iPhone · Safari”), when you signed in and when it was last used. This is what lets you see and sign out your devices, and what lets plans limit how many devices can be signed in at once. We don't fingerprint devices or track you between sites.

What you create on the board

Players you star, your notes, scout grades, your board order, your answers in the fantasy trade finder (👍, × and “Bad trade”, with the kind of deal each was about), and any feedback or bug reports you send. Feedback includes the page, season and player you had open, your screen size and device type, so we can reproduce the problem.

Error reports

If the board hits an error on your device, it sends us the error message and the same page details as above (at most a few per visit). They're deleted after 30 days.

Security records

When a sign-in attempt fails, we record the network address it came from so repeated guessing can be blocked. These records are deleted within 24 hours.

Payments

Payments are handled entirely by Stripe, including Apple Pay and Google Pay. Your card or wallet details go straight to Stripe — we never see or store them. Stripe tells us your customer and subscription reference, which plan you're on, how many seats (for teams), and whether the subscription is active. Stripe keeps the email you give it for receipts; we don't copy it.

Storage on your device

The board stores your sign-in, your display preferences (filters, tabs) and a copy of the football data in your browser's local storage so it loads quickly. This isn't used for advertising or tracking and isn't shared with anyone. Clearing your browser's site data removes it; you'll just need to sign in again.

How we use it

to sign you in and keep your account secure;
to sync your stars, notes and scout grades across your devices (where your plan includes it);
to apply your plan, including its device limit;
to fix bugs and improve the board, using feedback and error reports;
to improve the trade finder’s suggestions, by reviewing trade-finder answers in aggregate across accounts: counts by kind of deal (for example, how often two-for-one deals are marked “Bad trade”), never who answered what;
to send a sign-in code you ask for. Because we don't keep email addresses, we don't send newsletters or marketing; billing receipts come from Stripe.

Who else handles it

We don't sell or rent personal information, and we don't share it for advertising. A few service providers process it on our behalf, only to run the board:

Cloudflare — hosting, database and security;
Stripe — payments and subscriptions;
Apple / Google — only if you choose to sign in with them;
[EMAIL PROVIDER] — to deliver sign-in codes and account emails;
GitHub — runs the job that updates football data (it handles no personal information).

We may also disclose information if the law requires it, or to protect the board and its users from fraud or abuse.

Football data

Player statistics, recruiting, draft and testing data come from public and licensed third-party sources, which are credited on the board. That data is about public athletic performance and is not collected from you.

How long we keep it

Account and board data are kept while your account is open. Signed-in device records are removed shortly after they expire or are signed out; error reports after 30 days; failed sign-in records within 24 hours. If you close your account, we delete your account data within 30 days, except billing records Stripe and we must keep for tax and accounting.

Your choices and rights

You can see and sign out your devices, and change your username, at any time. You can ask us to send you a copy of your data, correct it, or delete your account (tell us your username) by emailing [CONTACT EMAIL]. Depending on where you live (for example California, Colorado, Virginia, the UK or the EU), you may have further rights under local law; we honor those requests the same way, and we won't treat you differently for making one.

Security

Everything travels over encrypted connections. Keys and passwords are stored encrypted by our hosting provider, sign-in codes are stored scrambled, and repeated wrong passwords are blocked. No system is perfectly secure, but we keep what we hold to a minimum so there's little to lose.

Children

The board is not directed at children under 13, and we don't knowingly collect information from them. If you believe a child has signed up, contact us and we'll delete the account.

Changes

If we change this policy, we'll update the date at the top, and for significant changes we'll tell you on the board or by email before they take effect.

Contact

[BUSINESS OR OWNER NAME] · [CONTACT EMAIL] · [MAILING ADDRESS — CITY, STATE]