Privacy policy

This policy explains what personal data Hoops Nightly collects, why, and what your rights are. We wrote it to be read. It applies to hoopsnightly.com and to the newsletters, alerts and community features we may add; when one of those launches, this page is updated first.

Who is responsible

The data controller is CR OU OÜ, registry code 16778262, Nõmme tee 64-3, 11311 Tallinn, Estonia (the "publisher", "we"). Privacy questions: [email protected].

What we collect today

• Server logs. When you load a page, our servers and our content delivery network (Cloudflare) record your IP address, the page requested, the time, and your browser's user-agent string. We keep server logs for up to 30 days to run and secure the site. Legal basis: our legitimate interest in operating a secure service (GDPR art. 6(1)(f)).
• Preferences stored in your browser. Your theme choice (light or dark) is stored in your browser's local storage under the key hn-theme. It never leaves your device. We plan to store your chosen team the same way.
• Nothing else. There are no accounts, no tracking pixels and no advertising cookies on the site at this time. We do not sell personal data.

Third parties

• Cloudflare delivers and protects the site; it may set a strictly necessary security cookie (see the cookie policy) and processes your IP address to do so.
• Google Fonts. Our display typeface is loaded from Google Fonts, so your browser requests it from Google's servers, which see your IP address. Google's privacy policy applies to that request.
• YouTube embeds. Where we embed an official video we use YouTube's privacy-enhanced player (youtube-nocookie.com); YouTube only sets cookies when you press play.

What we will collect when features launch

A newsletter needs your email address (legal basis: your consent, which you can withdraw with the unsubscribe link in every email). Push alerts need a browser subscription token, stored until you turn alerts off. Community features need a username and an email address to run your account, and keep what you post. Audience measurement, if we add it, will use a privacy-respecting tool or ask your consent first. Each of these will be described here before it goes live.

Your rights (GDPR)

If you are in the European Economic Area, the UK or Switzerland you may ask us to access, correct, delete or export your personal data, to restrict or object to processing, and you may withdraw consent at any time. Write to [email protected]. You can also complain to a supervisory authority; ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Your rights (California and other US states)

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use it (described above), to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined in the CPRA, and we do not use it for cross-context behavioral advertising. Because of that, there is nothing to opt out of today; this section, and a "Do Not Sell or Share" control, will be updated if that changes. To exercise any right, email [email protected]; we will not discriminate against you for doing so. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with privacy laws have similar rights and may use the same address.

International transfers

We are based in Estonia (EU) and our servers are in the EU. Cloudflare and Google may process data in the United States under the EU-US Data Privacy Framework and standard contractual clauses.

Children

The site is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Changes

We will change this policy when the site changes. The date at the top tells you when. Material changes to how we handle data will be announced on the site before they take effect.