Privacy
We collect close to nothing, because we need close to nothing.
No accounts, no email
There is no sign-up. A cookie called bp_sid holds a random identifier so that your own bids can be tied together. It is not shared and it is not sold.
Your IP is stored as a hash, never in the clear
We keep a salted SHA-256 of your IP address to count things — how many players have been added from one network today, for example. It works for counting and not for identifying, and we cannot turn it back into an address.
Payments
Card data never touches this server. Our payment provider handles it and tells us only whether a payment succeeded. We store the amount, the moment, the language of the purchase and the withdrawal waiver you accepted, because we are the ones who have to be able to prove that.
What is public
Bids are public: the amount, the player and the time. Who placed them is not — there is nothing to publish, since there are no names or accounts. The live feed says "someone" and means it.
The football database
When you search for a player to add, the text you type is sent to TheSportsDB to look the name up. We do not send them anything else. We store the name, team, position, nationality and their identifier — never their images.
Analytics
None. No third-party scripts, no pixels, no ad network.
Your rights
Write to hola@bestplayer.lol and we will tell you what is tied to your session or delete it. Bids already on the board stay on the board — they are a public record of a paid transaction — but nothing in them identifies you.