Privacy policy

This policy explains what personal data Pigskin Nightly collects, why, and what your rights are. We wrote it to be read.

It applies to pigskinnightly.com and to the newsletters and alerts we may add; when one of those launches, this page is updated first.

Who is responsible

The data controller is CR OU OÜ, registry code 16778262, Nõmme tee 64-3, 11311 Tallinn, Estonia (the "publisher", "we"). Privacy questions: [email protected].

What we collect today

• Server logs. When you load a page, our servers and our content delivery network (Cloudflare) record your IP address, the page requested, the time and your browser's user-agent string. We keep server logs for up to 30 days to run and secure the site. Legal basis: our legitimate interest in operating a secure service (GDPR art. 6(1)(f)).
• Visitor statistics. For each page view we record the page, the referring site or campaign tag, the country (from our content delivery network) and a daily hash of IP address and browser that cannot be reversed. To count returning readers, your browser keeps a random first-party identifier (pn_vid, in local storage and in a cookie, see the cookie policy) for 13 months from its creation; we store only a salted hash of it. It is used only for our own audience statistics, never for advertising, never shared or combined with other sites. Legal basis: our legitimate interest in measuring our audience (GDPR art. 6(1)(f)). It is not created if your browser sends Global Privacy Control or Do Not Track, and you can switch it off on the cookie policy page. Statistics records are kept for up to 25 months.
• Nothing else. There are no tracking pixels and no advertising cookies on the site. We do not sell personal data.

Third parties

• Cloudflare delivers and protects the site; it may set a strictly necessary security cookie (see the cookie policy) and processes your IP address to do so.
• ESPN's image servers. Player photos are loaded from ESPN's content delivery network, so your browser requests them from those servers, which see your IP address.
• YouTube embeds. Where we embed an official video we use YouTube's privacy-enhanced player (youtube-nocookie.com); YouTube only sets cookies when you press play. By watching you are bound by the YouTube Terms of Service and Google processes data under the Google Privacy Policy.

YouTube API Services

Our YouTube channel (@pigskinnightly) is managed with an internal tool that uses the YouTube API Services. The tool is used only by our own staff to upload original short videos built from our statistics to our own channel and to edit their titles and descriptions. It does not ask any visitor to sign in with Google, and it does not collect, store or share any YouTube or Google account data of our readers or viewers.

• By using our videos or embeds you agree to the YouTube Terms of Service; Google processes data under the Google Privacy Policy.
• The only authorization data the tool holds is the access token for our own channel, stored with restricted access on our EU server and never shared. It can be revoked at any time from the Google security settings page; when revoked, or on request, it is deleted within 7 days.
• We do not store YouTube API data about other users or channels. Statistics about our own videos, if read, are kept for no longer than 30 days unless refreshed.
• Questions or deletion requests: [email protected].

What we will collect when features launch

A newsletter needs your email address (legal basis: your consent, which you can withdraw with the unsubscribe link in every email). Remembering your team uses a first-party cookie with the team's name only. Each of these will be described here before it goes live.

Your rights (GDPR)

If you are in the European Economic Area, the UK or Switzerland you may ask us to access, correct, delete or export your personal data, to restrict or object to processing, and you may withdraw consent at any time. Write to [email protected]. You can also complain to a supervisory authority; ours is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee).

Your rights (California and other US states)

If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect and how we use it (described above), to delete it, to correct it, and to opt out of its sale or sharing. We do not sell or share personal information as those terms are defined in the CPRA, and we do not use it for cross-context behavioral advertising. There is nothing to opt out of today; this section will be updated if that changes. To exercise any right, email [email protected]; we will not discriminate against you for doing so. Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon and other states with privacy laws have similar rights and may use the same address.

International transfers

We are based in Estonia (EU) and our servers are in the EU. Cloudflare and Google may process data in the United States under the EU-US Data Privacy Framework and standard contractual clauses.

Children

The site is not directed at children under 13 and we do not knowingly collect their data. If you believe a child has given us personal data, contact us and we will delete it.

Changes

We will change this policy when the site changes. The date at the top tells you when. Material changes to how we handle data will be announced on the site before they take effect.