Fantasy Football Cockpit

Privacy policy

Last updated: October 7, 2026

1. In short

2. Controller

Thorsten Mann
Friedrich-Ebert-Anlage 36, 60325 Frankfurt am Main, Germany
Email: contact@ffcockpit.com

3. Hosting and server log files

This website is hosted by IONOS SE, Elgendorfer Str. 57, 56410 Montabaur, Germany, on servers in the European Union. The host processes data on our behalf under a data processing agreement (Art. 28 GDPR).

When you open a page, the server records the IP address, date and time, the page requested, the referring page, the browser type and the HTTP status. Our application log also records technical events, which can include the league ID you entered. We use this to run the site, to find errors and to defend against attacks. Legal basis: our legitimate interest in a secure, working website (Art. 6 (1) (f) GDPR). Log files are deleted automatically after 7 days. From these log files we count anonymous daily totals (for example page views, analyses and the referring website's domain) before the logs are deleted. These totals contain no IP addresses.

To protect the service against overload and misuse, the IP address of anyone who starts an analysis is kept in memory for up to one hour to limit the number of analyses per visitor. It is not written to disk. Legal basis: Art. 6 (1) (f) GDPR.

4. Analyzing your league

You enter a Sleeper league link, a league ID or a Sleeper username. To answer your request, our server queries the public Sleeper API, operated by Blitz Studios, Inc. (USA). Only the league ID or username you entered is sent; your IP address is not passed on, because the request comes from our server. Sleeper already holds this information as part of your Sleeper account.

From Sleeper we read the league settings, rosters, matchups and transactions, and the team and display names shown in the league. These names are only used to let you pick your team. Legal basis: providing the service you request (Art. 6 (1) (b) GDPR) and our legitimate interest in providing it (Art. 6 (1) (f) GDPR).

Results are kept in memory for up to one hour, so reloading the page does not start a new calculation, and are then discarded. League settings and calculated tables are cached on the server under the league ID and deleted after 7 days without use. A calibration for a league type (team count, lineup, scoring) is stored without any league or user reference.

5. Anonymous league statistics

After an analysis, our server reads that league and other leagues of its managers on Sleeper. From them we build statistics on waiver bids, lineups and roster moves. These statistics improve our models, for example how much to bid and when a move pays off. We store no names, user IDs or team names. League and transaction IDs are only stored as hashes, keyed with a secret value. Legal basis: our legitimate interest in accurate recommendations (Art. 6 (1) (f) GDPR). The statistics are kept as long as they are needed for the models.

You can object at any time (Art. 21 GDPR). Send us the league ID by email and we will remove that league and its previous seasons from the statistics and exclude it in the future.

6. Storage in your browser

If you switch between light and dark mode, your choice is saved in your browser's local storage (key ffc-theme). It never leaves your device. This storage is strictly necessary for the function you asked for (§ 25 (2) no. 2 TDDDG), so no consent is needed. You can delete it in your browser settings at any time.

7. Contact by email

If you email us, we use your address and message to answer your request (Art. 6 (1) (b) and (f) GDPR) and delete them once the matter is closed, unless we are required to keep them by law.

8. Automated decisions

Our lineup and waiver recommendations are calculated automatically, but they are only suggestions. They have no legal or similarly significant effect on you (Art. 22 GDPR does not apply).

9. Your rights

You have the right to access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object (Art. 21). To exercise them, email us. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state where you live or work (Art. 77 GDPR).

10. Changes

We update this policy when the website changes, for example before we add donations or advertising.

Back to start