Privacy policy
Last updated {{legalUpdated}}
{{name}} shows you scores, prices, headlines and flights. To do that it needs very little about you, and this page says exactly what. It covers the {{name}} website, the web app, the Android app and {{name}} LED panels.
Who we are
{{name}} is run by {{company}}, organized in {{companyState}} ("we", "us"). You can write to us at {{supportEmail}} or at {{companyAddress}}.
What we collect
Your account
- Your username (which may be an email address) and display name.
- Your password, stored only as a one-way hash. We can't read it.
- When you last signed in.
- A recovery email address, if you add one, so a forgotten password can be reset by email. It only counts once you follow the confirmation link we send to it, and we use it for nothing else.
- The links we email you to confirm that address or reset your password, and the address each was sent to, while each link can still be used.
If you join the launch list
While accounts are closed, the front page offers to tell you when they open. If you leave
an address there, we keep that address and nothing else — no name, no IP address, no
record of which pages you looked at. We write to it once, when accounts open, and you can ask
us to remove it at any time by replying to that message or writing to
{{supportEmail}}.
Your settings
- The leagues, teams, feeds and outlets you follow, and how and when each ticker appears.
- Stock symbols on your watchlist, and any aircraft you choose to follow.
- Your home location, if you give one, so the flights ticker can show the planes over you. It comes from an airport you pick, or from your device's location if you press "use my location" (your device asks you first). It is stored to about 11 meters, which is precise enough to find a house.
- If you connect a fantasy sports service: your Sleeper username and the leagues you pick, or, for Yahoo, the permission Yahoo gives us to read your leagues. We store Yahoo's access tokens encrypted, with the key kept apart from the database.
Your LED panels
- Each panel's name, time zone, software version and how its display is wired.
- What a panel reports when it is set up: its device name, model and address on your home network.
- Hardware readings, stored about once a minute: temperature, memory, storage, processor load, Wi-Fi signal strength, time since it started, and power warnings.
- If you ask us for help, we may ask a panel for its recent log or a network diagnostic. The diagnostic includes the name of the Wi-Fi network it is on, the addresses of your router and of other devices your panel can see on your network, and connection timings.
Technical records
- Our servers log each request: your IP address, the address requested, your browser or device type, and the time. A phone widget's address includes its access code, so that ends up in these logs too.
- To slow down password guessing, we count sign-in attempts by username and by IP address for 15 minutes.
- If you were invited, the invitation has a private note from the person who sent it, which may include your name or email address.
We don't use advertising or analytics, we don't track you across other sites, and we don't collect anything we haven't listed here.
How we use it
Only to run {{name}} for you: to show your ticker, sign you in, keep your panels working and updated, protect the service from abuse, and fix problems, including the ones you ask us to look into. We don't sell your information, and we don't use it for advertising or share it for anyone else's.
Who else receives it
The companies that run our infrastructure
- Akamai (Linode) hosts our servers and database.
- Cloudflare carries all traffic between you and our servers, hosts this website, and forwards mail sent to our support address.
- Zoho sends our email. If you add a recovery address or ask for a password reset, Zoho receives the address and the message we send to it.
Services our servers ask on your behalf
These see a request from our servers, not from you, but some requests include your information:
- adsb.lol receives the area around your home location, if you set one, and the aircraft you follow.
- hexdb.io and adsbdb.com receive airport codes you look up, and the flight numbers of planes near your home location, so we can find their routes.
- Sleeper receives your Sleeper username and league numbers, if you connect Sleeper.
- Yahoo: if you connect Yahoo Fantasy, you sign in to Yahoo yourself and grant read access; we then use that access to read your leagues.
- ESPN, Yahoo Finance, NASCAR and news outlets supply scores, standings, prices and headlines. What we ask them isn't about you, but the stock symbols on our watchlists are sent to Yahoo Finance.
Images and fonts your browser loads directly
When you use the web app, your browser fetches some images and fonts from other companies, which then see your IP address:
- ESPN: team and league logos, and player photos.
- flagcdn.com: country flags.
- Google: the web app's fonts (Google Fonts), and the small icons of news outlets (Google's icon service, which learns which outlets appear on your ticker).
- parqet.com: company logos beside stock prices.
- YouTube, using its no-cookie player, for a setup video where one is shown.
What your panel contacts
A panel talks to our servers. While it is being set up it checks it's online using Google's connectivity check. If it can't reach our servers, it gets scores straight from ESPN until it can, and ESPN then sees your home's IP address. Panels also set their clocks from public time servers.
When the law requires it
We may disclose information if the law requires it, or to protect people from harm. We'll tell you if we're allowed to.
Cookies and storage on your device
- One cookie, which keeps you signed in. It lasts 30 days and renews while you use {{name}}. Scripts can't read it, and it is only sent to {{name}}.
- The web app keeps a copy of your last ticker on your device so it still works offline. Signing out removes it.
- While you link a new panel, a note about it is kept in that browser tab until the tab closes.
This website sets no cookies and loads nothing from anyone else.
How long we keep it
| Information | Kept |
|---|
| Your account, settings and panels | Until you delete your account. |
| An address left on the launch list | Until we write to say accounts are open, or until you ask us to remove it — whichever comes first. |
| Your recovery email address | Until you remove it or delete your account. |
| Links we email you, and the address each went to | Until the link is used. An expired link is deleted the next time any link is sent. |
| Panel hardware readings | 7 days. |
| A panel's diagnostic or log | Until the next one replaces it, or you delete your account. |
| Server request logs | Replaced as they fill up: usually about two weeks, and less when we're busier. |
| Sign-in attempt counts | 15 minutes. |
| Database backups | 30 days, then deleted. |
When you delete your account, it is removed from {{name}} straight away. Copies in our backups are deleted as those backups reach 30 days old, and entries in our server logs as the logs are replaced.
Your choices and rights
- See and change your information in Settings, including removing your home location and disconnecting fantasy services.
- Delete your account under Settings → Account, or see other ways.
- Ask us for a copy of your information, to correct something, or anything else about your data, at {{supportEmail}}. We answer everyone, wherever you live, within 30 days.
Depending on where you live, you may have legal rights to access, correct, delete or move your information, to object to how we use it, and to complain to your data protection authority.
Children
{{name}} isn't meant for children, and we don't knowingly collect information from anyone under 13. If you think a child has an account, write to us and we'll delete it.
Security
Everything between you and our servers is encrypted. Passwords and access codes are stored only as one-way hashes, and fantasy service tokens are encrypted. Only the people who run {{name}} can get into its servers. No system is perfectly secure, but we work to keep yours safe, and we'll tell you if something happens to your information.
The Android app
The {{name}} Android app shows the same web app as a browser does, so everything on this page applies to it. It keeps you signed in by storing the same cookie inside the app. It asks for no access to your location, contacts, photos or files: to give the flights ticker a home location from the app, pick an airport.
Changes to this policy
If we change this policy, we'll update this page and the date at the top. If a change affects how we use information we already have, we'll tell you in {{name}} before it takes effect.
Write to {{supportEmail}}, or to {{company}}, {{companyAddress}}.