Privacy Policy
CFB Dynasty Tracker ("we," "us," "our") operates https://www.dynastytracker.com (the "Service"). This Privacy Policy explains what we collect, how we use it, and your choices.
1. Information we collect
- You provide: account data (username, email, password stored only as a salted hash); optional profile data (Twitch URL, YouTube channel, availability summary + sharing preference, dynasty defaults); content you create (leagues, dynasties, seasons, games, scores, ratings, uploaded screenshots/images, imported dynasty history).
-
From linked third-party accounts (only if you connect them):
-
Google / YouTube — via Google OAuth scope
youtube.readonly, we read basic channel info (channel ID, title, snippet) to associate and display your channel. We do not modify your YouTube account, post on your behalf, or access private content beyond this read-only channel info. - Twitch — read-only channel/VOD info to display your streams.
- Discord — your Discord username/ID for account linking and sign-in.
-
Google / YouTube — via Google OAuth scope
- Automatically: server logs (IP, user-agent, timestamps, requests) and session cookies/auth tokens to keep you signed in, for security and abuse prevention.
- When you submit an in-app feedback report (bug/feature request): in addition to your description and any screenshots you attach, we automatically include a fixed diagnostic bundle to help us reproduce the issue without a back-and-forth: the app page/section/tab and league/season/week you were in (when applicable), the page URL, a short list of your recent in-app navigation steps, your browser/OS/device type, screen viewport size, locale and timezone, the app version, and a small buffer of your most recent client-side JavaScript errors (error message, code location, and timestamp — no page content). This bundle is not shown to you before submitting and there is no opt-out; it never includes passwords, auth tokens, cookies, or a dump of your local browser storage, and it is only sent when you submit a report — nothing is ever sent automatically.
2. How we use information
To create/secure your account; provide features (leagues, scheduling, ratings, media linking); display linked Twitch/YouTube content; send transactional emails (verification, security, service notices); prevent fraud/abuse; and meet legal obligations. We do not sell your data or use it for advertising.
3. Google/YouTube API disclosure (Limited Use)
CFB Dynasty Tracker's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. The Service uses YouTube API Services; by linking your YouTube account you also agree to the YouTube Terms of Service and acknowledge the Google Privacy Policy. We access read-only YouTube channel data solely to provide channel linking; we do not transfer it except as needed to provide that feature or as required by law, and we do not use it for advertising or to train generalized AI/ML models. Review or revoke access anytime at Google security settings.
4. How we share information
Only with:
- service providers that host/operate the Service (our cloud host Render, and our email-delivery provider), bound to protect it;
- other users, to the extent you publish content or share availability in a league; and
- authorities when required by law or to protect the Service and its users.
We do not sell personal data.
5. Data retention
We keep your account and content while your account is active. On deletion, we delete or anonymize personal data within a reasonable period, except where retention is legally required or needed for security/backups.
6. Third-party services
The Service links to third-party platforms; their handling of your data is governed by their own policies:
- Google / YouTube — https://policies.google.com/privacy
- Twitch — https://www.twitch.tv/p/legal/privacy-notice/
- Discord — https://discord.com/privacy
7. Your choices and rights
View/edit your profile; disconnect any linked account (Google/YouTube, Twitch, Discord) anytime; request access, correction, export, or deletion by emailing pbales20@gmail.com. Depending on your location you may have GDPR or CCPA/CPRA rights; contact us to exercise them.
8. Security
Hashed passwords, HTTPS transport, scoped access tokens. No method is 100% secure, but we work to protect your data.
9. Children's privacy
Not directed to children under 13; we do not knowingly collect their data.
10. International users
Operated from the United States; by using the Service you consent to processing in the U.S.
11. Changes
We may update this Policy; material changes posted here with a new "Last updated" date.