Privacy Policy

• Your email address, when you buy, when you put yourself on a league’s list from that league’s page, when you confirm that you want the rankings sent to you, and when you ask for one board to be emailed to you while it is being written. That last one is held only until the email goes out, then deleted. It is stored because we have to send to it. Nobody can put you on a list but you.
• The Sleeper username you type and the leagues it returns. All of that is already public on Sleeper.
• A payment record from Stripe: the amount, the currency and Stripe’s own reference ids. Never a card number.
• Which leagues you asked us to rank, and the rankings we generated for them.
• Anything you type into a feedback form. Those reports are stored with the ranking they are about and with no identity attached.

• Your Sleeper password. We never ask for one and could not use one. Sleeper’s public API needs no login.
• Your card details. Payment happens on Stripe’s own checkout page. They never reach us.
• Anything about you on other sites. There is no ad network here, no third-party analytics and no tracking pixel.

Nothing is sold, rented or shared for advertising. Not now and not later.

yourteamiscooked.com sets a single cookie, cooked_sid. It holds a random value, it expires after 30 days, and it identifies nobody.

Its only job is to stop one visitor generating an unlimited number of free rankings, which costs real money each time. It is scoped to this domain and is never read anywhere else, which is why there is no cookie banner: there is nothing here to consent to.

Team names, records, rosters and draft picks come from Sleeper’s public API. Anyone can read them without an account, and we do not make them any more public than they already are.

We store what we generated, not a copy of your league. The board and the writing are kept so that everyone in the league can open the same link, and so that the archive of earlier weeks exists. The league itself stays on Sleeper.

Six services, each doing one job:

• Stripe takes the payment and holds the card details we never see.
• Anthropic writes the rankings. It receives your league’s public data and the scores we computed from it. It never receives an email address.
• Resend delivers the email. It receives the address and the message.
• Neon hosts the database, in the United States.
• Vercel hosts the site, in the United States.
• Cloudflare sits in front of it and routes mail sent to our contact address.

That is the whole list. We will otherwise hand your data to somebody else only if the law requires it.

• Rankings and league pages: indefinitely. The archive is part of what you bought, and it is what makes a link you posted in March still work.
• Order records: seven years, because tax rules require it.
• Your email address: until you unsubscribe or ask us to delete it. An address that was asked and never said yes keeps a record we do not send to. An address that asked for a single board comes off the queue the moment that email is sent, and what remains is the record of the send. Email us and it is gone.
• The cookie: 30 days, or until you clear it.

Recurring mail starts only after somebody confirms the address it goes to, from that address. Every recurring email carries a one-click unsubscribe, and unsubscribing stops the sending immediately.

Two single messages are the exception, and both are things you ask for by typing your address yourself: the message that asks whether you want the weekly rankings, and a one-time copy of a board you requested while it was being written. Neither starts anything, and the one-time board arrives once with nothing after it.

There is one way an address reaches a league’s list, and it is that person entering it on the league’s own page. Nobody can add somebody else, including the manager who paid. That address then gets one message asking whether it meant it, and ignoring that message is an answer: the rankings never start. An address that unsubscribes twice cannot be put back on by anyone.

The only things we send are the weekly rankings for leagues you asked about, a board you asked to have emailed once, the receipt for a payment, and a notice if something changes that affects a season you have paid for. There is no marketing list.

Email hello@yourteamiscooked.com and ask for a copy of what we hold about you, a correction, or deletion. There is no form and no account to log into. We answer from the same address.

Cooked is run from the United States. If you are in the UK, the EU or California, the rights your law gives you are exercised through that same address, and we do not ask for a reason.

Deleting your data ends the sending and removes your address and your order contact details. The rankings themselves stay up, because they belong to a league rather than to one manager, and they name teams rather than people.

Traffic to the site is encrypted. The link that manages a subscription is stored only as a hash, so a copy of the database hands out no way into your subscription. Card details never reach us at all.

Cooked is not for children. You must be 18 to buy, and we do not knowingly collect anything from anyone under 13. If a child’s address ended up on our list, email us and it is gone.

If this policy changes, the date at the top changes with it. A change that affects what we collect or who we share it with is emailed to everyone on the list before it takes effect.

Privacy questions go to hello@yourteamiscooked.com, the same address as everything else. The Terms cover what the product promises.