Privacy notice
Last updated October 25, 2026.
The short version
GHBL Online asks for no personal information. There are no accounts, no email addresses, no names and no free-text fields, so children can play without giving anything away. Like every website, the server sees each visitor's internet address; it is used only to run and secure the site (abuse limits and server logs), and some public pages show one banner ad that sets no cookie and tracks no one (see Advertising).
Who runs the site
GHBL Online (ghbl.us) is run by WeldonPC (WeldonPC.com). Questions about this notice can be sent through WeldonPC.com's contact page.
What is stored, and why
- Teams: a made-up name from fixed word lists, a number, a jersey colour, a home diamond, when the team was made and last opened, and a SHA-256 hash of its private link (the database does not store the link itself; like every page address, it does appear in the server logs until they rotate).
- Games: for each league game, the random seed, the swing times your browser sent, the resulting score and line score, and when it was started and finished. Practice games are not sent or stored.
- Abuse limits: daily counters keyed by a salted hash of the visitor's internet address (IPv6 by /64, and the network it belongs to), deleted after two days.
- Cookie: one cookie,
__Host-ff_csrf, protects the forms from cross-site forgery. It is not used for anything else. - Server logs: the hosting server keeps standard web access logs (internet address, time, page, browser) for security and to count visits. They are the host's own logs, not an analytics service, and are not shared.
- Backups: the database (teams and games, never the abuse counters) is backed up every night; nightly copies are kept for 14 days, and a few restore points are kept from each site update.
Advertising
The home page, schedule, standings, diamond, history, rules, pricing and about pages show one banner ad below the page, from AdEngine (adengine.us), the small ad network run by WeldonPC, the company behind this site. For now the ads are for WeldonPC's own services. There is no ad in the game, on practice or league game pages, on team pages, on the grown-ups pages, or on this page.
To show the ad, your browser loads a script from adengine.us, asks it for one banner, loads the banner image, and reports once that the page was viewed and once that the banner was shown. Like any website, adengine.us receives your internet address, your browser type and the address of this site with those requests.
- No cookies, no profile, no behavioural advertising. AdEngine sets no cookies, gives you no ID, does not track you from site to site and does not choose ads based on who you are or what you did before. The banner depends only on the site it appears on.
- How the internet address is used. adengine.us looks up the approximate city for the address in a location database kept on its own server (nothing is sent to anyone else); it does this for every site it serves. No ad on GHBL is chosen by location, so on GHBL the city is not used for anything. It also uses the address to count each ad view or click only once, and leaves out robots and WeldonPC's own office traffic. The address is not stored with the counts; the temporary entries made from it expire within six hours and are cleared from the server within two days.
- What is kept. Daily totals only: page views for this site, and views and clicks for each ad. The adengine.us web server also keeps a standard access log (internet address, time, address requested, referring site, browser) for security; it is deleted on a rolling schedule.
- Clicking an ad first shows a "You are leaving GHBL" page. Going on passes through adengine.us, which counts the click, and then opens the advertiser's site, which has its own privacy policy.
- Nothing about you is sold or shared.
What is never done
No analytics services, no tracking pixels other than the ad's own view count described above, no behavioural advertising, no fonts, game code or embeds from other companies (the 3-D engine and fonts are served from ghbl.us), no selling or sharing of data, and no contact with players. The site sends no email.
Children
Children play GHBL. It asks for no personal information, from them or from anyone: nothing to type, no accounts, no chat. The internet address that every website receives is used only for the purposes above (security, abuse limits, and serving and counting the house ad), never to build a profile or to advertise to a particular child.
How long things are kept
Leagues and their games are deleted 400 days after the league ends. A team that is deleted, or not opened for 400 days, is removed once it is no longer in any kept league. Abuse counters last two days. Server logs follow the host's normal rotation. Nightly backups are kept for 14 days; restore points from site updates are kept until newer ones replace them.
Deleting a team
Use Delete on the team page. The link stops working at once; results already played stay in their league tables under the made-up name until that league is deleted.
Payments
Payments are not switched on (the site is in preview). When they are, the Clubhouse Pass will be bought by an adult through PayPal, behind a grown-ups question; PayPal handles the payment details, and this site will keep only a pass record (plan, status, paid-until date and PayPal's reference).