Privacy Policy

Last updated: 2026-10-07

yafsb.com is a fantasy football data site run by one person in the United States. This page explains what the site collects, why, and how to turn the optional parts off. Questions: yafsb.web@gmail.com.

1. Analytics (Google Analytics 4)

We use Google Analytics to count visits and see which pages and tools get used and how they're set (for example, which scoring format you pick), so we know what to build next. It records the page, the referring site, your device and browser type, and your approximate location (country, region and city), which Google works out from your IP address. Google Analytics 4 does not store IP addresses.

It sets two cookies, _ga and _ga_2YZP3QRMWN, which last up to 2 years. Google acts as our service provider. We have turned off Google Signals and data sharing with Google's other products, we don't link Google Analytics to any advertising account, and Google Analytics keeps visit-level data for 2 months (only aggregate counts are kept longer).

Where it is on by default: in the United States, Canada (outside Québec) and Australia, analytics is on unless you turn it off. Everywhere else, including the EU, the UK, Switzerland and Québec, it stays off until you choose "OK". Google determines your region from your IP address. In regions that need consent first, no analytics data is sent to Google Analytics before you agree (Google Tag Manager still loads; see section 7).

2. Your choices

• Turn analytics off or on on the Privacy choices page (linked in every page footer), or with the "Turn off analytics" button on the notice bar. Turning it off deletes the Google Analytics cookies, and the choice is saved in your browser.
• Global Privacy Control: if your browser sends a Global Privacy Control signal, we treat it as an opt-out and analytics stays off.
• Do Not Track: there is no common standard for Do Not Track, so we do not respond to it separately. Global Privacy Control is the signal we honour.
• Google also offers a browser add-on that blocks Google Analytics on every site.

3. Server logs

Like most websites, our web server records each request: your IP address, the page, the referring site and your browser's user-agent. We use these logs for security and to measure traffic, and they are deleted after about 14 days.

4. What you type into tools

Season Recap asks for a Sleeper league ID. We use it to fetch that league's public data from Sleeper. The league ID appears in the page address, so it also appears in server logs and analytics. We don't ask for your name, email or Sleeper password anywhere on the site.

5. Public Sleeper data

Our tools are built from public league, draft and transaction data from Sleeper's public API. That data includes Sleeper user IDs, display names and team names. We use it to calculate aggregate figures such as average draft position, auction values and waiver bid prices, and the tools publish only those aggregates, and Team Names pages show popular team names without saying who used them. Season Recap shows the team names of the league you look up, as Sleeper already shows them.

6. Cookies the site needs

• csrftoken: security for the site's forms.
• cookie_consent: remembers your analytics choice for 1 year.
• messages: shows a one-time notice after a Season Recap form error, then is deleted.
• sessionid: only set if you sign in to the site admin.

7. Who else receives data

We do not sell or share personal information, and we do not use it for advertising. These providers receive data as part of running the site:

• Google Analytics (analytics, as described above).
• Google Tag Manager: loads our analytics setup on every page, in every region; Google receives your IP address when it loads, even where analytics is off.
• Google Fonts: the site's font is loaded from Google's servers, which receive your IP address when a page loads.
• cdn.bokeh.org: pages with interactive charts load the chart library from this content network, which receives your IP address.
• DigitalOcean: hosts the site and its server logs.
• Sentry: receives technical details when the site has an error. It is set not to collect personal information.

8. Your rights and requests

• Email us to ask what we hold about you, or to correct or delete it.
• Email us your Sleeper username and we'll delete the records we hold for it.
• In the EU, the UK and Switzerland, the legal basis for analytics is your consent, which you can withdraw at any time on the Privacy choices page.

9. Children

The site is not directed to children under 13, and we do not knowingly collect personal information from them.

10. Changes

When this policy changes, we update the date at the top of this page.