Privacy Policy

This policy explains what information BreakSheet (“we”, “us”) collects when you visit https://www.breaksheet.co, how it is used and what choices you have. The Site is run by an individual. We do not ask you to create an account, and we do not sell your personal information for money.

1. Information we collect

Information you send us. If you email us, we receive your email address, your name if you give it, and your message. We use it to answer you and keep it only as long as needed for that. The Site has no contact forms.

New-checklist emails (optional). If you sign up for alerts, we collect only your email address. We use it to email you when a new checklist is published, and for nothing else. Signing up is optional and needs no account or password. Our email provider, Buttondown (buttondown.com), stores the address, sends a confirmation email first, and sends the alerts for us. Every email has an unsubscribe link; once you unsubscribe, you get no more emails. You can also email us to be removed. To keep bots out, the form may use Cloudflare Turnstile, a quick check that you are a person; Cloudflare receives your IP address and basic browser information for that check and its own privacy policy applies. We never sell or share the list with advertisers or sponsors. Please don't sign up if you are under 13.

Mistake reports (optional). If you use “Report a mistake” on a checklist, we keep what you type, which checklist it's about, the kind of mistake you picked and when you sent it, so we can check and fix the sheet. We don't ask for your name or email, and we don't store your IP address with it (to stop floods of reports we keep a scrambled, short-lived count per visitor). Please don't include personal details. Reports are deleted once they've been dealt with. The form may use the same Cloudflare Turnstile check as the email signup.

Information collected automatically. Like most websites, our hosting provider receives technical data when you load a page, such as your IP address, browser type, device type, pages requested, date and time and the page that sent you. This is used to deliver the Site, keep it secure and fix problems.

Aggregate visit statistics. We count page views, visits, which checklists, teams, players and card types are opened, searches typed on a checklist, which box types are picked, which website sent you (such as google.com), whether your screen is phone, tablet or desktop sized, and the websites of links you click to leave the Site. Each event only adds one to a daily total. These counts are cookie-free and are kept as totals, not as profiles of individual people. Searches that look like email addresses are never counted.

Images from the leagues and ESPN. Team logos and player headshots load directly from the servers of Major League Baseball (mlbstatic.com), the NBA (cdn.nba.com), the NFL (nfl.com) and ESPN (espncdn.com), so whichever of them serves an image receives your IP address and browser information when you view a page that shows it, as with any image on the web. Their own privacy policies apply to that data. Some player photos come from NBA.com (cdn.nba.com) or Wikimedia Commons (upload.wikimedia.org), in the same way. A few photos added by hand are served from the Site itself, so no one else receives anything when they load.

Advertising information. The Site shows ads from Google AdSense. Google and its partners may use cookies, device identifiers, IP address and similar technology to show and measure ads, and may personalise them using your browsing activity across sites. Section 5 explains your choices. We do not receive your personal profile from Google.

Settings in your browser. Your theme, card size and ad choice are saved in your browser's local storage so the Site remembers them. So does a small note for the email alerts pop-up: the last few checklists you opened (so it only appears on your second one) and whether you closed it or signed up (so it doesn't keep asking). None of this is sent to a server. The Cookie Policy lists them.

2. What we do not collect

We do not collect payment information, because we do not take payments from visitors. We do not require accounts or passwords from visitors. The visit counter does not use cookies and does not store your IP address or build a profile of you. We do not knowingly collect personal information from children under 13. Fonts are served from our own Site, not from a third party.

3. How we use information

• to run, secure and improve the Site
• to understand which checklists and features are useful
• to answer messages you send us
• to send new-checklist emails, only if you sign up for them
• to show ads and measure how they perform
• to meet legal obligations and enforce our Terms of Use
• to share aggregate, non-identifying statistics with advertisers and sponsors, such as total monthly visits or the most viewed checklists

4. Who we share it with

We do not sell your personal information for money. We share information only with:

• Service providers that help us run the Site, including our hosting provider, our database provider for aggregate counts, and our email provider (Buttondown, for new-checklist emails). They may only use the data to provide services to us.
• Advertising partners, including Google AdSense, as described in sections 1 and 5.
• The image servers of MLB, the NBA, the NFL and ESPN, as described in section 1, while logos and photos are shown.
• Affiliate and sponsor sites you choose to click through to. Once you leave the Site, their own privacy policies apply. If a link is an affiliate link, the other site may tell us that a purchase followed your click, but not who you are.
• Authorities or other parties when the law requires it, to protect rights, safety or the Site, or in a sale or transfer of the business.
• Anyone, in aggregate form, as described in section 3.

5. Ads and your choices

Google uses cookies and similar technology to serve ads based on your visits to this and other sites. You can opt out of personalised ads at Google Ads Settings, and learn how Google uses information from sites that use its services at policies.google.com/technologies/partner-sites. You can also opt out of many third-party advertising networks through aboutads.info/choices and, in the EU and UK, youronlinechoices.eu. Your browser settings let you block or delete cookies.

On your first visit we ask whether you allow personalised ads or prefer non-personalised ads, and no ads load until you choose. Change your answer at any time with “Cookie settings” at the bottom of every page. Opting out does not remove ads. It makes them less tailored to you, although Google still uses cookies for frequency capping, reporting and fraud prevention.

6. Cookies

See the Cookie Policy for the cookies and similar technology on the Site and how to manage them.

7. How long we keep information

Messages you send are kept as long as needed to respond and for a reasonable time after, then deleted. An alert signup is kept until you unsubscribe, then removed from the mailing list. Server logs are kept by our hosting provider for a short period under its own schedule. Aggregate statistics, which do not identify you, are kept for about 400 days and then deleted.

8. Security

We use reasonable measures to protect information, such as encrypted connections and a private, protected admin area. No website can be completely secure, and we cannot guarantee that information will never be accessed without permission.

9. Children

The Site is not directed to children under 13 and we do not knowingly collect their personal information. If you are a parent and believe a child sent us personal information, email info.breaksheet@gmail.com and we will delete it.

10. Your rights

Depending on where you live, including California and some other US states, you may have the right to know what personal information we hold about you, ask for a copy, ask us to correct or delete it, and opt out of the sale or sharing of personal information for targeted advertising. We do not discriminate against you for using these rights. To use them, email info.breaksheet@gmail.com from the address you wrote to us with, and tell us what you are asking. We may need to confirm it is you. We will respond within the time your state's law requires, usually 45 days. You can also use an authorised agent.

Global Privacy Control. Because the Site shows interest-based ads, we treat a Global Privacy Control signal from your browser as an opt-out of the sale or sharing of your personal information: when your browser sends it, only non-personalised ads are requested.

If you are in the European Economic Area, the United Kingdom or Switzerland, you may also have the right to object to or restrict processing, to data portability and to complain to your local data protection authority. Where the law requires a legal basis, ours is your consent for ad personalisation cookies, and our legitimate interest in running and securing the Site and understanding how it is used for everything else. Information is processed in the United States, which may not have the same data protection laws as your country.

11. Do Not Track

There is no common standard for Do Not Track browser signals, so the Site does not change its behaviour for them. We respond to Global Privacy Control signals as described above.

12. Links to other sites

The Site links to sites we do not control. We are not responsible for their privacy practices.

13. Changes

We may update this policy. The date at the top shows the latest version, and we will make clear changes visible on the Site.

14. Contact

BreakSheet, run by an individual, info.breaksheet@gmail.com.