/ PRIVACY & DEVICE DATA

LOCAL-FIRST.
BOUNDARIES SHOWN.

Reviewed August 6, 2026. This notice describes the current production build and its known service boundaries. No public mailbox, form or privacy-request intake channel is currently published.

CODE-AUDITED SUMMARY

The current build has no account, advertising integration, newsletter form, cloud sync, or application database. Production builds include Google Analytics 4 for site-usage measurement. The three tools use browser local storage. Gameplan, Slider, and search URLs can include information you enter, so treat those URLs as shareable data.

01 / LOCAL STORAGE

What the tools save

The site uses browser local storage for saved gameplans, slider presets, and game-log entries. These records can include labels, game results, notes, platform, build, mode, and settings that you enter.

The current client code contains no application API or cloud database path that uploads those saved records. It may also create short-lived local write-lock records while coordinating saves between tabs. Other people who can use the same browser profile may be able to view local records.

02 / URL DATA

Share links leave the tool

Gameplan and Slider share links encode selected values in the URL. Search terms also appear in URLs such as /search?q=…. A URL can be stored in browser history, copied to another person, included in a screenshot, or sent to the network that serves the page.

Do not place private information in a preset name, matchup label, build label, search query, or any value you plan to share. The site cannot retract a URL after someone else receives it.

03 / HOSTING

Vercel serves the production build

Production pages are deployed on Vercel. Vercel necessarily receives the requested URL and network information needed to return a page, and may process request and diagnostic logs for delivery, reliability, abuse prevention, and support. This site does not maintain a separate application database of those requests. Vercel describes its processing and user choices in its Privacy Notice.

Cloudflare manages authoritative DNS for the domain. Depending on whether a web record is in proxied or DNS-only mode, Cloudflare may also handle a web request before it reaches Vercel. Cloudflare describes its service data practices in its Privacy Policy. Provider-side retention follows the active account plan and provider settings; no longer retention period is claimed here.

04 / ANALYTICS

Google Analytics measures site use

On the exact production host, Google Analytics 4 remains off until you choose “Allow analytics.” If allowed, the site loads measurement ID G-53GFTKJ5G5. Google Analytics can receive the page URL and title, referrer, approximate location, browser and device information, interactions, and diagnostic data. It may set or read Analytics cookies such as _ga.

An “Analytics choices” control remains available after either choice. You can use it to allow Analytics later or withdraw consent just as easily. Withdrawing sends an analytics_storage: denied update, disables the Google tag, and removes this site’s accessible _ga and _ga_* cookies. It does not erase information Google already processed. Your choice is stored only in this browser profile.

The GA4 property is configured to retain user-level and event-level data for 14 months, with user retention reset on new activity. Google notes that retention-setting changes can take up to 24 hours to apply and do not control most aggregated standard reports. See Google’s Data retention documentation.

Local game-log entries, slider presets, and saved gameplans are not intentionally sent to Analytics. Page URLs can still contain search terms or shared settings, so do not place private information in them. The current Content Security Policy permits the core Analytics endpoints but not Google Ads or DoubleClick endpoints. Google processes Analytics data under its Privacy Policy.

05 / VIDEO

YouTube loads only after play

The official video players use YouTube’s privacy-enhanced embed domain. An iframe is not created until you press a play control. Starting it connects your browser to YouTube, which can process the resulting request under Google’s policies.

If you prefer not to load the embedded player, do not press play; the rest of the guide remains usable.

06 / EXTERNAL LINKS

Local media, deliberate exits

Authorized official media is served from site-owned paths in the current build. Merely displaying that media does not contact an EA image host. Choosing an EA, YouTube, store, community, or other external link sends a request to that destination.

The destination controls its own content and data practices. Review its notice before providing information there.

07 / CLEARING & EXPORT

How to remove your records

Use your browser’s site-data controls for madden27.wiki to remove local tool records. Private browsing modes may discard them automatically and can also block saves.

The Game Log can export JSON or CSV, and Slider Lab can export saved presets as JSON. Because the current build has no tool-data account or restore service, cleared records cannot be recovered by the application.

08 / CONTACT

No public intake channel

The current application has no published mailbox, contact form, submission API, ticket system or automated receipt.

Do not send personal or sensitive information to an address found outside this site and assume it reaches the operator. The site cannot promise access, deletion, correction or a response time without a documented working channel and confirmed production responsibilities.

09 / OPERATIONAL STATUS

Known gaps stay visible

Vercel hosting and the GA4 retention and consent configuration are identified above. The operator responsible for requests, applicable rights process, and provider-side request-log retention still need a verified public record.

The current code includes Google Analytics 4 but no advertising, account, or upload path for local tool records. Any new data feature requires a code review and an updated notice before it is enabled. Read the Terms and operating notice for the matching use boundaries.

NOTICE STATUSDEPLOYED · NO PUBLIC INTAKE CHANNEL

Hosting and Analytics settings are documented; operator responsibility, provider-side log retention, and request handling remain open.

Check contact status →