Privacy
Last updated October 10, 2026
The short version: no ads, no tracking cookies, and we don’t sell anything. Your lineups and settings stay on your own device. The server only keeps what a few features need: your X profile basics if you sign in for the leaderboard, leaderboard entries, and Fantasy Draft leagues, which delete themselves.
On your device
Your saved lineups, settings, challenge progress and your seat in a Fantasy Draft league are kept in your browser’s local storage. They never leave your device unless you share a link or an image yourself. Clearing this site’s data in your browser deletes them.
Sign in with X (optional)
Signing in is only needed for the leaderboard. It happens on x.com; we never see your X password. From X we receive your user ID, your @handle, your display name and a link to your profile picture. We check how old your X account is (it has to be at least 30 days old to sign in), but we don’t keep that date. We never get your email address, messages or followers.
Signing in starts a session that lasts up to 180 days. It uses two cookies: a22s, the session ID (HttpOnly and Secure, so page scripts can’t read it), and a22in, which only tells the page that you’re signed in. Signing out deletes the session from our server and clears both cookies.
Leaderboard and challenge runs
When you finish a challenge season while signed in, the leaderboard shows your @handle, display name and profile picture with your record, score, formation and the date. Daily boards are deleted after 4 days; all-time boards are kept. While you play a challenge signed in, the run itself (your picks and results) is kept on the server for one day.
Fantasy Draft
A league’s settings, team names, picks and its most recent 100 chat lines are stored on the server so everyone in the league sees the same draft. Leagues delete themselves: a lobby or a draft a few hours after it goes quiet (3 and 8 hours), and a finished season 7 days after its last update. No sign-in is needed. Please don’t put personal information in team names or chat.
Stopping abuse
To stop spam and abuse, the server counts requests per IP address per hour (for example, how many leagues one connection creates). Those counters expire within the hour.
Services the site uses
- Vercel hosts the site and runs its server code. Like any web host, it handles your IP address and browser details to deliver pages, and it keeps short-lived request logs.
- Vercel Web Analytics counts page views without cookies. The site also sends a few anonymous events (for example “a challenge season finished” with its record, or “a Fantasy Draft league was created”) to see which features get used. None of this identifies you.
- Upstash is the database for the server data above (sessions, leaderboards, runs and leagues).
- Google Fonts supplies the fonts, so your browser downloads them from Google’s servers.
- X serves the profile pictures shown on the leaderboard (from pbs.twimg.com).
Children
The site is for Pokémon and football fans of any age and doesn’t ask anyone for a name, an email address or other personal information. Signing in with X is optional and follows X’s own age rules.
Your choices
- Clear this site’s data in your browser to delete everything stored on your device.
- Sign out to end your session and delete it from the server.
- To have your leaderboard entries or a league’s chat removed, or with any other privacy question, message @ColeThereum on X (see Contact).
Changes
If what the site stores changes, this page will be updated and its date above will change.