Privacy policy

Data controller

GPI SARL, 38 rue Dunois, 75013 Paris, France, contact: [email protected].

Data collected

• Email: entered to receive your login link and manage your account.
• Subscription data: Stripe identifiers (customer, subscription), status and period end date. Your bank card data is processed by Stripe and never goes through our servers.
• Technical data: IP address (abuse prevention and security), login and billing logs.
• Proof of acceptance of the terms of sale and of the waiver of the right of withdrawal, at the time of subscription.
• Preferences: chosen language (lang cookie) and the country Cloudflare infers from your connection, to show the right language and currency; language saved with your account for emails.

Purposes and legal bases

• Provide the service and authenticate your account (performance of the contract).
• Email you today's picks if you are a subscriber (performance of the contract). Every email contains an unsubscribe link; your subscription status determines whether you receive them.
• Manage billing and accounting obligations (performance of the contract, legal obligation).
• Secure the site and prevent abuse (legitimate interest).

We do not use your data for advertising and we do not sell it.

Retention periods

Account data: for the duration of the relationship, then 1 year after last activity. Billing data: 10 years (accounting obligation). Login links: 15 minutes, deleted afterwards. Sessions: 30 days at most.

Recipients and processors

• Cloudflare, Inc.: hosting and database.
• Stripe Payments Europe, Ltd.: payment and billing.
• Resend: sending login emails.

Some of these providers may process data outside the European Union, with appropriate safeguards (the European Commission's standard contractual clauses or the EU-U.S. data protection framework).

Photos and logos

Player photos and team logos shown on the pages are served by our own site: your browser contacts no NBA server and your IP address is not passed on to it. Our server fetches these images from the NBA, without any information about you.

Audience measurement

We measure traffic and the sign-up journey with an in-house, anonymous tool: a random identifier is kept in your browser's local storage, together with the source of your visit (campaign parameters and the domain name of the referring site). We keep neither your IP address nor your browser details, and use no third-party service. Your browser's "Do Not Track" signal is respected. Measurement data is deleted after 13 months.

Cookies and local storage

The site only uses two technical cookies: sid (login session, 30 days at most, strictly necessary) and lang (your language choice, 12 months, set only when you use the language selector). It also uses local storage in your browser to remember your acceptance of the terms of sale, the source of your visit and an anonymous audience-measurement identifier (see above). No advertising or audience-measurement tracker is used; no consent is therefore required.

Your rights

You have the rights of access, rectification, erasure, restriction, objection and portability. Write to [email protected]. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).