Last updated: September 3, 2026
This policy explains what personal information sportshighlight.net collects, why, who else receives it, and what you can do about it. It covers this website only, not any third-party site you reach through a link from here. The operator of this website is the controller under the General Data Protection Regulation and the UK GDPR. Requests and questions go to [email protected].
1. Information We Collect
1.1 What you send us
Email to our published addresses reaches us with your address, the name you sign with, and the contents. We use it to answer you and to keep a record in case a correction is later disputed. Correspondents are not added to any list.
Comments are open under our articles. Posting one stores the name and email you type, the comment, your IP address and your user agent. The name and comment become public; the email and IP address do not.
1.2 What your browser tells us
Our web server keeps an access log, as every web server does: IP address, timestamp, page requested, referring page, response code and the user agent identifying your browser and operating system. That log is all this site records about you on its own.
There is no analytics layer above it. No Google Analytics, no Tag Manager, no measurement script of ours, no heat map, no session recording. Nothing here records scroll depth, time on page, clicks or window size, and no visit identifier of ours is attached to your reading. What we know about traffic is that log, read in aggregate.
1.3 Cookies and similar technologies
We and our advertising partners use cookies, local storage and pixels. The only ones we set are the cookie recording your consent choice and technical cache cookies that hold no personal data; the rest belong to the partners. The Cookie Policy lists the categories, purposes and lifetimes. Where consent is legally required, nothing outside the strictly necessary category runs before you give it.
1.4 What we do not collect
No payment details, because nothing here is sold to readers. No precise GPS location. No special category data under the GDPR and no sensitive personal information under California law: we neither derive nor ask partners to infer data about health, belief, political opinion, ethnic origin, sexual orientation, biometrics or union membership.
2. Why We Use It, and On What Legal Basis
- Serving the site — delivery, caching, load balancing. Legitimate interests in providing what you asked for.
- Security — rate limiting, blocking scrapers and attacks, identifying invalid advertising traffic. Legitimate interests, and legal obligation where one applies.
- Aggregate traffic counts — reading the server log to see which articles draw readers, so we can decide what to cover. Legitimate interests.
- Correspondence and comment moderation — legitimate interests, or steps taken at your request.
- Advertising — contextual advertising rests on legitimate interests; personalized advertising rests on your consent in the EEA and the UK, and in the United States operates subject to the opt-out in section 8.
- Legal compliance — responding to valid legal process. Legal obligation.
Where we rely on legitimate interests we have weighed them against your rights. You may object at any time.
3. Advertising and Advertising Partners
This site is free because advertising pays for it. The advertisements are not booked in advance and are not chosen by us: when your browser opens a page, an automated auction runs in a fraction of a second and the winning bid fills the slot.
For that to work, information about the request leaves this site. It normally includes your IP address and the approximate location it implies; your user agent, device type, operating system, screen size and browser language; the address of the page you are on and sometimes the page you came from; advertising identifiers previously stored by those partners; delivery signals such as whether the advertisement rendered, was visible on screen, or was clicked; and, in the EEA and the UK, the consent signal you gave or refused.
The advertising here is run by PubGalaxy, which manages the stack for us and brings in the buyers. Behind it sit supply-side platforms and exchanges that put our inventory up for bid, demand-side platforms that bid for advertisers, ad servers that deliver and count the creative, and verification vendors that check for fraud and viewability. Their code runs in your browser and collects what it needs directly. They act as controllers in their own right for what they do with it, under their own purposes, retention periods and privacy policies.
Some partners use that data to build interest profiles and target advertising to you on other sites. California law calls this sharing for cross-context behavioral advertising, and its broad definition of a sale can apply too, even though no money changes hands for data as such. Section 8 explains how to stop it.
Readers in the EEA and the UK see a consent notice before any of this runs, served by a consent management platform built to the IAB Transparency and Consent Framework, version 2.3. It records your answer purpose by purpose, passes the resulting consent string to the participating companies, and can be reopened at any time to change or withdraw it. Declining does not remove advertising; it makes it contextual, chosen from the subject of the article and a coarse location rather than from a profile of your browsing.
4. Who Else Receives Data
- Hosting and content delivery providers that store and serve the site.
- Security providers that filter hostile traffic before it reaches us.
- PubGalaxy and the advertising partners it brings in, in the roles set out in section 3.
- Professional advisers, under a duty of confidence.
- Public authorities, where we are legally obliged to respond to a valid request.
- A successor operator, if the site were transferred, in which case this policy applies until you are told otherwise.
We do not exchange readers’ personal information for money.
5. International Transfers
Our advertising partners operate worldwide, so this data is processed in countries other than the one you read from, including the United States. Where personal data of readers in the EEA or the UK leaves those areas, the transfer relies on an adequacy decision where one exists and otherwise on the European Commission’s Standard Contractual Clauses with the UK International Data Transfer Addendum. Ask us and we will tell you which mechanism applies.
6. How Long We Keep It
- Server access logs: deleted within 30 days, after which only aggregate page counts remain. Nothing else is recorded, so nothing else is kept.
- Comments: as long as the article stays published, unless you ask for removal.
- Email correspondence: up to 24 months from the last message.
- Consent and opt-out records: as long as needed to show we honored your choice, generally 24 months.
- Advertising cookies: governed by the partner that set them, with lifetimes in the Cookie Policy.
7. Your Rights in the EEA and the United Kingdom
- Access to the personal data we hold about you.
- Rectification of inaccurate or incomplete data.
- Erasure, where a ground in Article 17 applies.
- Restriction while a dispute about accuracy or lawfulness is resolved.
- Portability of data you provided, in machine-readable form.
- Objection to processing based on legitimate interests, and at any time and without reason to direct marketing, which includes personalized advertising.
- Withdrawal of consent, without affecting what was lawful beforehand.
- Complaint to your national supervisory authority, or the Information Commissioner’s Office in the United Kingdom.
We reply within one month and will say if a complex request needs the two-month extension the GDPR allows. There is no charge unless a request is manifestly unfounded or excessive. Because we hold almost nothing that identifies readers by name, an access request usually depends on you supplying the cookie values that let us find anything.
8. Your California Rights
The California Consumer Privacy Act, as amended by the California Privacy Rights Act, gives California residents the rights below along with the disclosures that must accompany them.
8.1 Categories collected in the last twelve months
- Identifiers — IP address, cookie and device identifiers, and your email address if you write to us.
- Internet or other electronic network activity — pages requested, referring pages and the browser and device detail in the user agent; plus whatever the advertising partners’ own code observes in your browser.
- Coarse geolocation — country, region and sometimes city, inferred from the IP address. Never precise geolocation.
- Inferences — interest categories derived by advertising partners and used to select advertising.
Sources are you directly and your browser automatically. Everything listed is used for the purposes in section 2, disclosed for business purposes to hosting and security providers under contracts restricting their use of it, and disclosed to advertising partners as described in section 3. We collect no sensitive personal information as the CPRA defines it, so the right to limit its use has nothing to operate on here.
8.2 Do Not Sell or Share My Personal Information
Because advertising partners may use identifiers and activity data to target advertising to you on other websites, that disclosure counts as a sale or a share under California law. You can stop it in any of these ways:
- Turn on Global Privacy Control in a browser or extension that supports it. We treat that signal as a valid opt-out automatically, with no email needed.
- Email [email protected] with DO NOT SELL OR SHARE in the subject line.
- Reopen the consent panel on this site and record your choice there.
- Use the industry opt-out tools in the Cookie Policy, which cover many advertising companies at once.
An opt-out stored in a browser signal or cookie is specific to that browser and device, so set it again after clearing cookies or switching devices.
8.3 Other California rights
- Right to know the categories and specific pieces of personal information collected, their sources, purposes and recipients.
- Right to delete, subject to the statutory exceptions.
- Right to correct inaccurate personal information.
- Right to non-retaliation. Exercising a right will not restrict content or change your experience of the site.
An authorized agent may act for you with written permission and proof of identity. We verify requests by matching the identifiers you supply against our records, and will explain plainly if verification is not possible.
9. Other United States Privacy Laws
Residents of Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Delaware, New Jersey and other states with comprehensive privacy statutes have broadly equivalent rights: to confirm and access, correct, delete, obtain a portable copy, and opt out of targeted advertising, sale and certain profiling. Use the same address. Where the statute provides a right to appeal a refusal, our response explains the route. Universal opt-out mechanisms are honored where state law requires it.
10. Children
This site is written for a general adult audience. We do not knowingly collect personal information from anyone under 13, and do not knowingly sell or share the personal information of anyone under 16. If you believe a child has provided information here, write to us and it will be deleted.
11. Automated Signals
We honor Global Privacy Control as an opt-out of sale, sharing and targeted advertising. The older Do Not Track header never acquired an agreed meaning; use GPC instead.
12. Changes to This Policy
We revise this policy when our practices, our partners or the law change. The date at the top identifies the current version, and material changes are highlighted on this page. Where the law requires consent for something new, we ask again rather than assume.
13. Contact and Complaints
Privacy correspondence: [email protected]. Editorial matters go to [email protected]. If our answer does not satisfy you, readers in the EEA may complain to their national supervisory authority, readers in the UK to the Information Commissioner’s Office, and California residents may contact the California Privacy Protection Agency.