PRIVACY POLICY
Short version: we collect the minimum needed to run your subscription and the free tools, we don't run ad trackers or sell your data, and payment card details never touch our servers — Stripe handles those, inside Ghost. Long version below.
This policy covers cheddarheadanalytics.com and the tools it links to (Drive Tracker, Player Card, Team Performance, Franchise Performance, the Bankroll, and Beat the Professor). "We," "us," and "the Professor" mean Cheddarhead Analytics.
WHAT WE COLLECT
If you sign up for the newsletter or a paid membership: your email address and, if you provide one, your name. This is handled by our membership platform, Ghost, not stored in a database we run ourselves.
If you subscribe to Cheddarhead+: billing is handled entirely by Stripe, invoked through Ghost's checkout. We never see, receive, or store your card number — Ghost and Stripe are the only parties that touch it.
If you play Beat the Professor without an account: a randomly generated ID and the nickname you type in, both stored in your browser and on our server, so your weekly picks stay attached to you instead of colliding with another anonymous player's picks. No email or personal information is required to play.
Standard hosting logs: our host (Vercel) and our rate-limiting layer briefly record IP addresses and request timestamps for every request, purely to keep the free tools from being scraped or abused. These logs are not linked to your membership identity and are not used for tracking or advertising.
WHAT WE DON'T DO
- No Google Analytics, no ad pixels, no cross-site tracking.
- No selling or renting your email address or usage data to anyone.
- No behavioral advertising of any kind.
COOKIES
The only cookie the site sets is a first-party session cookie from Ghost, created when you log in, so the site can tell you're a member and show the right tier badge. There are no advertising or cross-site tracking cookies.
THIRD PARTIES WE USE
- Ghost(Pro) — membership records, email delivery, and billing checkout.
- Stripe — payment processing, invoked through Ghost. We don't touch card data directly.
- Supabase — stores Bankroll pick history and Beat the Professor leaderboard data.
- Google Fonts — your browser loads webfont files directly from Google's font CDN when you load a page.
- nflverse — the open-source play-by-play data our tools are built on. No personal data is involved in this pipeline.
HOW WE USE IT
To run your subscription, send the emails you actually signed up for (welcome sequence, receipts, product updates), operate the Beat the Professor leaderboard, and keep the tools working and abuse-free. That's the whole list.
HOW LONG WE KEEP IT
Membership data is kept as long as your Ghost account is active, plus a reasonable window after cancellation for billing records. Anonymous Beat the Professor data is kept for the season it was collected in, to settle the leaderboard.
YOUR RIGHTS
You can request a copy of what we hold on you, ask us to correct it, or ask us to delete it, by emailing privacy@cheddarheadanalytics.com. Canceling your membership in Ghost's account portal stops billing immediately; tell us in the same email if you also want your account record deleted rather than just deactivated. If data-protection law where you live (e.g. GDPR in the EU/UK, or CCPA in California) gives you additional rights, those apply too — reach out and we'll sort it out directly rather than making you fill out a form.
CHILDREN
Cheddarhead Analytics isn't directed at children and we don't knowingly collect information from anyone under 13.
CHANGES TO THIS POLICY
If this changes in a way that matters, we'll update the date at the top and, for anything material, email active members before it takes effect.
CONTACT
Questions about this policy: privacy@cheddarheadanalytics.com.