Privacy
We collect almost nothing, because we need almost nothing.
No accounts, no email
There's no sign-up. A cookie called bp_sid stores a random identifier so we can count your free-vote allowance and link your own purchases together. It isn't shared and isn't sold.
Your IP is stored hashed, never in the clear
We store a salted SHA-256 of your IP address to count things — how many free votes came from one network today, for example. It's for counting, not identifying, and we can't turn it back into an address.
The browser fingerprint
To count the free allowance we also use a technical fingerprint: a hash of half a dozen browser properties (language, screen, timezone). It's stored salted and hashed, includes no canvas or advertising identifiers, and is used for nothing but counting the allowance. Without accounts, it's the least invasive alternative we know.
Payments
Card details never touch this server. Our payment provider handles them and only tells us whether the payment went through. We keep the amount, the time, the purchase language and the withdrawal waiver you accepted, because we're the ones who must be able to prove that. If you pay for a boost, we store a HASH of the email you gave the payment gateway (SHA-256 with a private salt), never the email itself. It does one thing: tell us that two boosts came from the same person so their total adds up on the supporters' wall. It isn't shown, it can't be reversed and we don't cross it with anything.
What's public
Votes are public: how many, for whom, when, and whether they were free or paid. Who cast them is not — there's nothing to publish, because there are no names or accounts. The live feed says “someone” and means it literally. And if you put an alias or a message on a boost, they are public next to the amount: whoever writes them chooses to publish them, which is why the form says so before charging and not after. You can ask us to take them down; the boost, which is the payment, still counts.
The football database
When you search for a player to add, the text you type is sent to TheSportsDB to look up the name. We send them nothing else. We keep the name, team, position, nationality and their identifier — never their images.
Analytics
None. No third-party scripts, no pixels, no ad network.
Your rights
Write to hola@bestplayer.lol and we'll tell you what's tied to your session, or delete it. Votes already on the boards stay — they're the public record of the game — but nothing in them identifies you.