Last updated October 17, 2026. This policy explains what SportsAnalysis collects, why, who else touches it, and the choices you have. It is written to be read, not skimmed past.
In short
- SportsAnalysis is free, has no ads and does not sell or rent personal information.
- You can use every page without an account. An account is optional and only stores what you choose to save: picks, followed teams, an email address and a display name.
- We use Google Analytics to see which pages are useful, keep ordinary server logs to run the site, and send the questions typed into Ask to OpenAI so they can be answered.
- Emails from us are only about something you asked for: the newsletter you joined, or your account (confirmations, sign-in links, password resets). Every newsletter has a one-click unsubscribe.
- Questions, corrections or deletion requests: [email protected].
Who we are
SportsAnalysis (sportsanalysis.info) is a free NFL and college football research site: game cards with betting lines, line movement, against-the-spread and over/under records, model projections, short game-preview videos and a plain-English question box (Ask). It is run by a small independent team in the United States. It is for information and entertainment only; it is not a sportsbook and does not take bets. This policy covers the website, its newsletter, accounts and our YouTube channel.
What we collect and why
| What | When | Why | Kept |
|---|---|---|---|
| Usage analytics | Every page view, unless blocked | Google Analytics records pages viewed, approximate location (country or region), device and browser type and how you arrived. We look at it in aggregate to see which pages help and which are ignored. | Google retains event data for 14 months; we never see individual identities. |
| Server and security logs | Every request | Cloudflare and our web server log IP address, user agent, page and time to keep the site up and to stop abuse (rate limiting, blocking scrapers). | Rotated; typically under 30 days. |
| Ask questions | When you use Ask | The question text is sent to OpenAI to turn it into a database query, then stored with the date, the result count and a one-way salted hash of your IP (not the IP) so we can improve answers. | Up to 12 months. |
| Newsletter | When you sign up | Your email address, the leagues you chose, when you joined and an unsubscribe token. | Until you unsubscribe; then the address is marked unsubscribed so we do not email it again. |
| Account | When you create one | Email address, optional display name, a one-way scrypt hash of your password (never the password itself, and none at all if you only use sign-in links), your saved picks and notes, the teams you follow, and for each signed-in device its browser type and last-seen date. | Until you delete the account; deletion removes everything at once. |
| Browser storage | As you use the site | Your theme, last-used league and tabs, dismissed prompts and, when signed out, your picks and followed teams are kept in your own browser’s local storage. They never leave your device except that the My picks page asks our server for the current lines and scores of the games you picked. | Until you clear your browser data. |
| Support email | When you write to us | Your message and address, so we can reply. | Deleted once the matter is closed, usually within a few months. |
We do not collect payment details (donations go directly through Buy Me a Coffee under its own policy), precise location, contacts or anything from your device beyond what a normal web page can see.
Cookies and local storage
We set as little as we can. Nothing here is used for advertising.
| Name | Type | Purpose | Lifetime |
|---|---|---|---|
_ga, _ga_* | Cookie (Google Analytics) | Tells repeat visits from new ones in aggregate statistics. | 13 months |
sa_sess | Cookie (HttpOnly, Secure, SameSite) | Keeps you signed in to your account. Only a hash of it is stored on our side. | 90 days, or until you sign out |
bettrack_theme, sa_league | Local storage | Light or dark theme and the league you looked at last. | Until cleared |
sa_picks, sa_myteams | Local storage | Your picks and followed teams while signed out; moved into your account if you create one. | Until cleared |
sa_nl_*, sa_signup_snooze, bt_collapse:* | Local storage | Remembers that you dismissed the newsletter or account prompt, and which panels you collapsed. | Until cleared |
You can block or delete cookies in your browser; the site keeps working, you will just be asked about the newsletter again and will need to sign in again. We honour the Google Analytics opt-out add-on. We do not currently respond to Do Not Track or Global Privacy Control signals beyond this.
Accounts
An account is optional. It exists so your picks and followed teams follow you between devices and get graded when games end.
- Signing in. With a password, or with a one-time link we email you (valid 15 minutes, used once). Accounts created from a sign-in link have no password until you set one.
- Passwords are stored only as scrypt hashes. Changing or resetting a password signs out every other device and we email you a notice.
- Email changes are confirmed from the new address and announced to the old one.
- Devices. The account page lists where you are signed in and lets you sign out everywhere else.
- Export. My picks can download everything you saved as a CSV at any time.
- Delete. “Delete account” on the account page removes the account, picks, notes, teams and sessions immediately and permanently. We keep no backup copy of deleted accounts beyond our rolling database backups, which expire within 30 days.
- Email we send. Confirmations, sign-in links, resets and security notices only. Account emails are never used for marketing, and the newsletter is a separate opt-in.
Google and YouTube data
We publish our own game-preview videos to the SportsAnalysis YouTube channel. To do that, the site owner signs in to Google once through Google’s OAuth consent screen and grants the youtube.upload permission. This is used only to upload our own videos and set their titles, descriptions and privacy. We never access, store or share any visitor’s Google or YouTube data: the site has no “Sign in with Google” and does not read anyone’s channel, subscriptions or watch history.
The only Google data we keep is the access token for our own channel, stored on our server with restricted access, plus a record of which videos we uploaded. It can be revoked at any time from Google Account permissions.
This site uses YouTube API Services. By watching our videos on YouTube you are also subject to the YouTube Terms of Service and the Google Privacy Policy.
SportsAnalysis’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Service providers
These companies process data on our behalf, each under its own privacy terms and only for the purpose listed:
| Provider | Used for | Data involved |
|---|---|---|
| Cloudflare | Content delivery, caching and security in front of the site | Request logs (IP, user agent, URL) |
| Microsoft Azure | Hosting, the database, video storage and text-to-speech narration for previews | Everything the site stores; narration scripts contain no personal data |
| Google Analytics | Usage statistics | Page views, device and approximate location, in aggregate |
| OpenAI | Turning Ask questions into database queries | The question text only, no account or contact data |
| SendGrid (Twilio) | Sending newsletter and account emails | Email address, message content, delivery status |
| Google / YouTube | Publishing our own videos | Our channel’s upload token; nothing about visitors |
| Buy Me a Coffee | Donations | Handled entirely on their site; we only see the name and message you choose to leave |
| ESPN, CollegeFootballData, National Weather Service | Scores, lines, box scores, weather | Public sports data; nothing about visitors |
Our servers are in the United States. If you visit from elsewhere, your data is processed there.
How we protect it
- All traffic is encrypted (HTTPS, HSTS).
- Passwords are hashed with scrypt; session and email tokens are random and stored only as hashes; email links expire and work once.
- Sign-in and email endpoints are rate limited; failed attempts are throttled per address and per network.
- Access to the server and database is limited to the people who run the site, with key-based authentication.
- No security is perfect. If we ever learn of a breach affecting your data we will tell you by email and on this page without undue delay.
Your choices and rights
- See or export what we hold: your account page shows everything stored for your account, and My picks exports it as a CSV; for anything else, email us.
- Correct your name or email on the account page, or ask us to fix anything else.
- Delete: use “Delete account” on the account page, unsubscribe from the newsletter with the link in any email, clear your browser storage for anything kept locally, or email us to remove a newsletter address, Ask history tied to your network, or support emails.
- Object or restrict: block analytics cookies, or email us about any other processing.
- Complain to your local data-protection authority if you think we have handled your data badly; we would rather hear from you first.
If you are in the EU/EEA, the UK, California or another place with a privacy law, these are the rights those laws give you, and we extend the same ones to everybody. Where a legal basis is needed: running the site and answering your questions is our legitimate interest; the newsletter and accounts rest on your consent, which you can withdraw at any time; analytics cookies rest on consent where that is required and legitimate interest elsewhere. We reply to requests within 30 days and may ask you to confirm the email address a request concerns.
Children
The site is about sports betting data and is not directed to anyone under 18 (or the legal betting age where you live). We do not knowingly collect information from children; if you believe a child has given us personal information, email us and we will delete it.
Links to other sites
Game cards link to team pages, YouTube, Buy Me a Coffee and public data sources. Those sites have their own privacy policies; this one stops at our domain.
Changes to this policy
If this policy changes in a way that matters, we will update this page and the date at the top, and email account holders about significant changes. Last updated: October 17, 2026.
Contact
Email [email protected] for anything in this policy. A person reads it.