Privacy Policy

Superfantasy · last updated 26 August 2026

Superfantasy is a small Streamlit app that shows statistics for one private Yahoo Fantasy Basketball league. It is not a public service, is not sold, and has no sign-up. This page describes what it touches and what it does not.

1. Who this covers

The members of one private Yahoo Fantasy Basketball league — at most 16 people, the managers of the teams in it.

The app authenticates with a single Yahoo account, the author's. It reads only that league's own data, which is shared data about all its teams: weekly category results, standings and rosters. It never reads data from any league the author does not belong to, and it holds no Yahoo credentials but the author's own.

2. What data is accessed

With the author's own Yahoo authorization, and read-only:

• League settings, scoring categories, and roster positions
• League standings and weekly matchup results
• Player statistics for recent seasons
• Team rosters within that one league

No personal information about other league members is collected, extracted, or analysed beyond the team names and public league standings that Yahoo returns as part of ordinary league data.

3. What is stored, and where

• An OAuth token is stored on the author's computer so the tool does not have to re-authenticate on every run.
• API responses are cached in a local folder purely to keep request volume low.

Both live only on the author's machine. There is no server, no database, and no cloud storage. Nothing is transmitted anywhere except to Yahoo's own API.

4. What is not done

• No data is sold, shared, published, or redistributed.
• No analytics, tracking, advertising, or third-party services.
• No writes to Yahoo — no roster moves, add/drops, trades, or lineup changes.
• No access to leagues the author does not play in.
• No accounts, logins, or data collection from visitors to this website.
• No personal data about league members beyond the team names and results Yahoo already shows everyone in the league.

5. This website

These pages are static and served by GitHub Pages. They set no cookies and run no analytics or tracking scripts. Standard web server logs may be kept by GitHub as the host; see GitHub's privacy statement.

6. Retention and deletion

The cached data and stored token can be deleted at any time by removing the tool's local cache folder, and Yahoo authorization can be revoked at any time from Yahoo Account Security. Doing so immediately ends the tool's access.

7. Contact

Questions about this policy can be raised via the project's GitHub account, @Rhinoffensive.