PAPoints Against

Privacy Policy

Effective October 21, 2026

The short version

This policy explains how Points Against (pointsagainst.com), operated by an individual under the name Points Against ("we," "us"), handles information.

1. What you enter

To load a league you enter a username, league ID or league link from the fantasy platform that hosts your league (Sleeper or ESPN). Your browser sends a username straight to that platform to find your leagues; we don't receive or keep it. The league ID appears in the page's web address so links can be shared, which means anyone you share a link with can see that league on the site.

When you load a league, your browser gets that league's information from the platform, including members' usernames, team names, rosters and results, and the site displays it. That happens in your browser, and we don't store it. The example league on the home page is a real league with every member's name replaced by a made-up one.

2. What's stored in your browser

The site uses your browser's local storage, not cookies, to remember a few things on your device:

This information stays on your device and isn't sent to us. You can clear it at any time through your browser's settings for this site.

3. Our servers

The site runs on Cloudflare. Our server passes along some requests for public data (such as player lists, stats and trade values) and keeps a database of public NFL information, such as injury statuses, game scores and player trade values. Apart from notes sent through the feedback form (section 11), that database contains nothing about visitors.

To deliver the site and protect it from abuse, Cloudflare processes technical information about each request, such as your IP address, browser type and the page requested. We use your IP address only to apply short-term rate limits to our data endpoints and feedback form and to count visits (section 5), and we don't keep it. We don't keep server logs. Cloudflare may keep request logs for a limited time under its own policies. Cloudflare's handling of this information is described in its privacy policy.

4. Services your browser contacts directly

To build the pages, your browser also contacts these services directly. Each receives your IP address and standard browser information under its own privacy policy. We update this list as the site adds platforms and features:

5. Analytics and advertising

We don't use cookies, advertising, tracking pixels or outside analytics services. The site counts its own visits: when you open a page, your browser tells our server which one, and on the first page of a visit, the domain of the site that linked you here (not the full address). When you use a Share button, your browser tells our server which tab you shared, and we add it to a running total; nothing else is sent. Our server adds your device type (phone, tablet or desktop) and country, read from the request, to running totals. To count people rather than page views, it turns your IP address and browser information into a scrambled code using a random value that changes every month. The code is kept only until the end of that day or month, so each visitor counts once, and is then deleted, as is the random value, leaving only totals. We never store your IP address, and the code can't be traced back to you. Leagues are counted the same way, from a scrambled code of the league ID. We use these totals to understand how the site is used and to stay within our data providers' usage limits. If we change any of this, we'll update this policy first.

6. Sharing and sale

We don't sell personal information, share it for targeted advertising, or use it to profile anyone. We would disclose information only if the law required it, and in practice we hold almost none. If the site is transferred to another person or a company, including one we form to run it, the little information we hold would go with it, and this policy would keep applying until it's changed.

7. Your rights

Depending on where you live, you may have rights to access, correct, delete or object to the use of your personal information. Apart from donation records and feedback (sections 10 and 11), we don’t keep personal information about visitors, so there's usually nothing for us to provide or delete. You control what's in your browser's local storage. You can still contact us with any request and we'll respond. For visitors in the EU and UK: to the extent we process personal data at all (your IP address, briefly, for delivery, security and counting visits), we rely on our legitimate interest in running a secure, working website. If you donate, we keep a record of the donation to process it and to meet our legal obligations. If you send feedback, we rely on our legitimate interest in fixing and improving the site, and on your consent for any email address you give us. You may complain to your local data protection authority.

8. Children

The site isn't directed to children under 13, and we don't knowingly collect their personal information.

9. Where processing happens

We're based in the United States. Cloudflare and the other services above may process requests in the US and in other countries.

10. Donations

You can choose to support the site with a donation through Ko-fi. It collects your payment details and contact information under its own privacy policy; we never receive your card details. We receive what it shares with us, such as your name or display name, email address, the amount and any message you add, and use it only to thank you, answer questions about your donation and keep the records the law requires.

11. Feedback

If you use the feedback form, we keep what you write, the type of note (bug, idea or other), the page you came from, your device type (phone, tablet or desktop) and, unless you untick the box, the league you were viewing. Your email address is optional, and we use it only to reply to you. We don't keep your IP address with your note; we use it only briefly, to limit how many notes can be sent at once. Each note is also emailed to us, through Cloudflare, so a copy is kept by our email provider. Please don't include personal or sensitive information in your note. We delete notes, including the emailed copies, after 12 months, and sooner if you ask.

12. Do Not Track and Global Privacy Control

We don't track visitors across websites or sell or share personal information, so there's nothing for a Do Not Track or Global Privacy Control signal to turn off. The site works the same whether or not your browser sends one.

13. Changes

If we change this policy, we'll post the new version here with a new effective date.

14. Contact

Privacy questions or requests: contact@pointsagainst.com.

See also our Terms of Use.