Privacy Policy
CFB Dynasty Tracker ("we," "us," "our") operates https://cfb-dynasty-tracker.onrender.com (the "Service"). This Privacy Policy explains what we collect, how we use it, and your choices.
1. Information we collect
- You provide: account data (username, email, password stored only as a salted hash); optional profile data (Twitch URL, YouTube channel, availability summary + sharing preference, dynasty defaults); content you create (leagues, dynasties, seasons, games, scores, ratings, uploaded screenshots/images, imported dynasty history).
-
From linked third-party accounts (only if you connect them):
-
Google / YouTube — via Google OAuth scope
youtube.readonly, we read basic channel info (channel ID, title, snippet) to associate and display your channel. We do not modify your YouTube account, post on your behalf, or access private content beyond this read-only channel info. - Twitch — read-only channel/VOD info to display your streams.
- Discord — your Discord username/ID for account linking and sign-in.
-
Google / YouTube — via Google OAuth scope
- Automatically: server logs (IP, user-agent, timestamps, requests) and session cookies/auth tokens to keep you signed in, for security and abuse prevention.
2. How we use information
To create/secure your account; provide features (leagues, scheduling, ratings, media linking); display linked Twitch/YouTube content; send transactional emails (verification, security, service notices); prevent fraud/abuse; and meet legal obligations. We do not sell your data or use it for advertising.
3. Google/YouTube API disclosure (Limited Use)
CFB Dynasty Tracker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The Service uses YouTube API Services; by linking your YouTube account you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy. We access read-only YouTube channel data solely to provide channel linking; we do not transfer it except as needed to provide that feature or as required by law, and we do not use it for advertising or to train generalized AI/ML models. Review or revoke access anytime at Google security settings.
4. How we share information
Only with:
- service providers that host/operate the Service (our cloud host Render, and our email-delivery provider), bound to protect it;
- other users, to the extent you publish content or share availability in a league; and
- authorities when required by law or to protect the Service and its users.
We do not sell personal data.
5. Data retention
We keep your account and content while your account is active. On deletion, we delete or anonymize personal data within a reasonable period, except where retention is legally required or needed for security/backups.
6. Third-party services
The Service links to third-party platforms; their handling of your data is governed by their own policies:
- Google / YouTube — https://policies.google.com/privacy
- Twitch — https://www.twitch.tv/p/legal/privacy-notice/
- Discord — https://discord.com/privacy
7. Your choices and rights
View/edit your profile; disconnect any linked account (Google/YouTube, Twitch, Discord) anytime; request access, correction, export, or deletion by emailing pbales20@gmail.com. Depending on your location you may have GDPR or CCPA/CPRA rights; contact us to exercise them.
8. Security
Hashed passwords, HTTPS transport, scoped access tokens. No method is 100% secure, but we work to protect your data.
9. Children's privacy
Not directed to children under 13; we do not knowingly collect their data.
10. International users
Operated from the United States; by using the Service you consent to processing in the U.S.
11. Changes
We may update this Policy; material changes posted here with a new "Last updated" date.