PLAYER INFORMATION · UPDATED OCTOBER 25, 2026

Your league.
Your information.

This notice describes the current version of Gridiron Foundry at giproleague.com.

What the game stores

Your username, password verification data, recovery-key hash, account and team ownership, league activity, rosters, game results and active games are stored on the game server. Passwords are salted and derived using scrypt. Recovery keys are stored as hashes. Avoid putting personal information in usernames or league names.

Cookies and this browser

The first-party foundry_session cookie authenticates your account. It is HttpOnly, SameSite=Strict and Secure on HTTPS, is scoped to /api, and has a maximum lifetime of seven days. The server also expires inactive sessions after 24 hours. Signing out removes the session cookie.

Browser local storage remembers your selected league, game presentation settings and pending commands for reconnect recovery. Older local playtest sessions may also contain an owner token. These records remain until cleared; pending commands are removed after success or a definitive rejection, and remain available to retry after a connection or temporary server failure. Session storage remembers dismissal of this information notice for the current tab session.

No advertising pixels, third-party analytics, social tracking or external fonts are included in the game. This notice is informational; there are no advertising or analytics cookies to accept.

Who can see league information

League members can view game and franchise information shared by the multiplayer game, including usernames, teams, rosters, results and league activity. Keep invitation and recovery codes private. Account credentials are not included in other members’ league views.

Hosting, security and retention

The game is hosted on an IONOS VPS. The server receives network addresses and request information to provide the service and prevent abuse. League and account records currently remain until an account or league is removed through a support request. Private server backups rotate daily with a 14-day retention window. Deleted or corrected records may remain in those backups until rotation.

Your controls

Use “Sign out all devices” to end account sessions. You can clear this site’s browser data through your browser settings; doing so does not delete your server account or league. Keep your recovery key safe before clearing browser data. For account access, correction or deletion requests, email gridironfoundry@giproleague.com.