Privacy
Best Ball Domain reads a best ball entry export and works out exposure, builds, stacks and ADP value. This page sets out what it does with data, why, who else is involved, how long anything is kept and how to get it back or delete it. The site is run by its operator, reachable at admin@bestball-domain.com, who is the controller of the data described here.
Without signing in
The CSV you drop on the page is read inside your browser and is never sent anywhere. You can see your teams and players without an account. There are no analytics, no tracking scripts, no advertising and no cookies set by this site. The page keeps two short-lived notes in your browser's session storage while it is open (whether to reopen your last save, and a message to show after clearing teams); they are gone when the tab closes.
Signing in
Signing in with Google creates your Best Ball Domain account, which unlocks the tools (experimental estimates, live scoring, pod importing) and saved portfolios. When you sign in:
- Your account, on the server: the identifier Google issues for your account, the date you joined and the date you last signed in. That is the whole account.
- Saved portfolios, on the server: only when you press Save: the portfolio's name, the export files you dropped in and your settings, compressed. If you have loaded pods, the portfolio's pod standings are saved with it: each entry's weekly points and each pod's draft picks, with other entrants' Underdog usernames removed first.
- Not stored anywhere: your email address, name and photo. The email is shown in the page so you can see which account you are on, and comes from the sign-in itself.
- Stored on your device: one flag in local storage recording that you chose to sign in, so you stay signed in after a reload. Your sign-in token is kept in memory only. Google sets its own cookies on its own domain as part of sign-in.
What the tools send
- Every tool sends your Google sign-in token so the server can check it. The token is checked and discarded, not stored.
- Experimental estimates send, per roster, its position counts, ADP value and whether its quarterbacks are stacked. No player names. The answer is computed and returned; nothing is kept.
- Live scoring asks this site for public NFL statistics, which it fetches from Sleeper on your behalf. Nothing about you or your rosters is sent, and Sleeper sees this site's server rather than you.
- Pod importing uses the Best Ball Domain browser extension, which makes requests to Underdog from your own Underdog session, in your browser. The scores and draft boards it receives, including other entrants' Underdog usernames and picks, go to this page. If you save the portfolio, the standings and picks are saved with it so they open on your other devices; usernames are removed before that and are never stored on this site's server. The extension keeps your Underdog session in memory, sends it to Underdog and nowhere else, and asks this site only whether your sign-in is valid.
Why, and on what basis
- Your account and saved portfolios: to provide the service you asked for, on the basis of your consent given by signing in and saving, and to perform that service.
- Security: like any website, requests carry your IP address. It is used, briefly and automatically, to limit how fast any one address can call the site's API, so abuse cannot take the service down. This is our legitimate interest in keeping the service running. IP addresses are not written to the database or logged by this site.
No decision with legal or similar effects is made about you automatically. Estimates are numbers about rosters, not about people.
How long it is kept
Your account and saved portfolios are kept until you delete them, or until you ask us to. When you delete, the rows are removed at once. Cloudflare keeps a rolling 30-day recovery history of the database, so a deleted row can exist in that history for up to 30 days before it is gone for good; it is never restored except to recover from a failure, and a restore would be followed by deleting it again. Rate limiting counters last about a minute.
Your rights
Wherever you live, you can:
- Get a copy of everything held against your account: Download my data in the Saved portfolios panel gives it as a JSON file.
- Delete any portfolio from the same panel, or close your account with Delete my account, which removes the account and every portfolio saved under it.
- Correct a portfolio by saving over it, or ask us to.
- Withdraw consent at any time by signing out and deleting your data, and object to any processing by emailing us.
Requests by email are answered within 30 days, and you will not be treated differently for making one. If you are in the EU, the UK or a similar jurisdiction, you can also complain to your data protection authority.
California and other US states: in the last 12 months the only personal information collected is an account identifier and, for security, IP addresses as described above. It is not sold or shared for cross-context advertising, and no sensitive personal information is collected. Because nothing is sold or shared, a Global Privacy Control signal needs no further action.
Who else is involved
- Cloudflare hosts the site and its database, under its data processing terms. As the host it processes requests, including IP addresses, to serve and protect the site.
- Google provides sign-in, under its own privacy policy. It knows you signed in to this site.
- Sleeper is asked for public NFL statistics by this site's server. It receives nothing about you.
- Underdog is contacted only by the optional extension, from your own browser.
Data is not sold, rented or shared with anyone else, and nothing is used for advertising or profiling.
Where it is stored
Saved portfolios are held in a Cloudflare database in the United States. If you are outside the US, saving a portfolio transfers it there, under Cloudflare's standard contractual safeguards.
Security
All traffic is encrypted. Every API request is checked against Google's signing keys, and an account can only ever read, change or delete its own rows. Files you load are treated as text and never run. Requests are rate limited. No system is perfect; if you find a problem, please email us.
Children
This tool is about entries in real money contests and is not for anyone under 18. We do not knowingly collect data from anyone under 18; if you believe we have, email us and it will be deleted.
Changes
If what is collected changes, this page changes with it and the date at the top moves. The in-page changelog records what changed and when.
Contact
Questions, requests or complaints: admin@bestball-domain.com