Privacy policy

This policy explains what personal data Hoops Nightly collects, why, and what your rights are. We wrote it to be read. It applies to hoopsnightly.com and to the newsletters, alerts and community features we may add; when one of those launches, this page is updated first.

Who is responsible

The data controller is CR OU OÜ, registry code 16778262, Nõmme tee 64-3, 11311 Tallinn, Estonia (the "publisher", "we"). Privacy questions: [email protected].

What we collect today

• Server logs. When you load a page, our servers and our content delivery network (Cloudflare) record your IP address, the page requested, the time, and your browser's user-agent string. We keep server logs for up to 30 days to run and secure the site. Legal basis: our legitimate interest in operating a secure service (GDPR art. 6(1)(f)).
• Preferences stored in your browser. Your theme choice (light or dark) is stored in your browser's local storage under the key hn-theme. It never leaves your device. We plan to store your chosen team the same way.
• Visitor statistics. Each page view is counted without cookies: we record the page, the referring site or campaign tag, the country (from our content delivery network) and a daily hash of IP address and browser that cannot be reversed. To count returning readers, your browser keeps a random first-party identifier (hn_vid, see the cookie policy) for 13 months from its creation; we store only a salted hash of it. It is used only for our own audience statistics, never for advertising, never shared or combined with other sites. Legal basis: our legitimate interest in measuring our audience (GDPR art. 6(1)(f)); it is not created if your browser sends Global Privacy Control or Do Not Track, and you can switch it off on the cookie policy page. Statistics records are kept for up to 25 months.
• Nothing else. There are no accounts, no tracking pixels and no advertising cookies on the site at this time. We do not sell personal data.

Third parties

• Cloudflare delivers and protects the site; it may set a strictly necessary security cookie (see the cookie policy) and processes your IP address to do so.
• Google Fonts. Our display typeface is loaded from Google Fonts, so your browser requests it from Google's servers, which see your IP address. Google's privacy policy applies to that request.
• YouTube embeds. Where we embed an official video we use YouTube's privacy-enhanced player (youtube-nocookie.com); YouTube only sets cookies when you press play.

YouTube API Services

Hoops Nightly uses the YouTube API Services. We use them in two ways: to publish our own videos to the YouTube channels we own and operate (for example Lakers Nightly), and to read public information about official team videos (title, thumbnail, duration, whether embedding is allowed) so we can embed them on this site with the standard YouTube player. By watching YouTube videos on this site you are also bound by the YouTube Terms of Service, and Google processes data according to the Google Privacy Policy.

What we access. The only Google accounts our application connects to are our own channels. We never ask visitors to sign in with Google, and we do not access, collect or store any visitor's YouTube or Google account data. For our own channels we store OAuth tokens on our server, with access restricted to our publishing tool, and nothing else.

Storage and deletion. Public video information read through the API is kept only while the video is shown on the site and is refreshed regularly; it is deleted when the video is removed or no longer embeddable, and in any case we do not keep API data longer than the YouTube API Services policies allow. Tokens are deleted when a channel is disconnected. Anyone who authorized our application can revoke its access at any time from the Google security settings page. For any request about this data write to [email protected] and we will answer within 30 days.

Browser extension

The Hoops Nightly extension for Chrome shows our scores, standings and team widgets in a popup. It asks for one permission, storage, used only to remember the team and tab you picked; that choice is kept by your browser (synced through your Google account if Chrome sync is on) and is never sent to us. The extension does not read the pages you visit, your browsing history or any personal data, and it contains no tracking or advertising code. The widgets it shows are loaded from hoopsnightly.com, so our server logs and cookie-free statistics treat that request like any page view (see "What we collect today"). Uninstalling the extension removes everything it stored.

Discord bot

The Hoops Nightly bot for Discord asks for two permissions, Send Messages and Embed Links. It does not read the messages in your server. When a server manager runs /follow in a channel we store the server ID, the channel ID, the chosen team and the Discord user ID of the person who ran the command, only to post in that channel; /unfollow deletes the record, and so does removing the bot (the next post fails and the record is dropped). Commands such as /scores are answered and not stored. Discord's own privacy policy applies to your use of Discord.

What we will collect when features launch

A newsletter needs your email address (legal basis: your consent, which you can withdraw with the unsubscribe link in every email). Push alerts need a browser subscription token, stored until you turn alerts off. Community features need a username and an email address to run your account, and keep what you post. Audience measurement, if we add it, will use a privacy-respecting tool or ask your consent first. Each of these will be described here before it goes live.

Your rights (GDPR)

If you are in the European Economic Area, the UK or Switzerland you may ask us to access, correct, delete or export your personal data, to restrict or object to processing, and you may withdraw consent at any time. Write to [email protected]. You can also complain to a supervisory authority; ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Your rights (California and other US states)

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use it (described above), to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined in the CPRA, and we do not use it for cross-context behavioral advertising. Because of that, there is nothing to opt out of today; this section, and a "Do Not Sell or Share" control, will be updated if that changes. To exercise any right, email [email protected]; we will not discriminate against you for doing so. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with privacy laws have similar rights and may use the same address.

International transfers

We are based in Estonia (EU) and our servers are in the EU. Cloudflare and Google may process data in the United States under the EU-US Data Privacy Framework and standard contractual clauses.

Children

The site is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Changes

We will change this policy when the site changes. The date at the top tells you when. Material changes to how we handle data will be announced on the site before they take effect.