Privacy Policy

Privacy Policy — Blaugrana News (EN) Effective date: January 1, 2026 Last updated: March 27, 2026 1. General Provisions This Privacy Policy explains what personal data we process on Blaugrana News (the “Site”), for what purposes, on what legal grounds, and what rights users have. By using the Site, you acknowledge that you have read this Policy. 2. Controller and Contact Data controller: Blaugrana News Privacy contact: [email protected] 3. What Data We Collect We may process the following categories of data: Data you provide directly: email address; username; selected country; selected avatar; messages sent to us by email. Authentication and security data: password hash (we do not store plaintext passwords); authentication session data (technical session token); email verification data (service codes/tokens stored securely); password reset data (service tokens stored securely). Technical and log data: IP address; user-agent (browser/device type); interface language and operating system; visited pages, session time and duration; technical events related to Site operation. Cookies and similar technologies: strictly necessary cookies (authentication/session functionality); analytics and advertising cookies (depending on settings and applicable law). 4. Purposes of Processing We process data to: register users, provide login, maintain and secure accounts; verify email and support password recovery; operate, maintain, and improve the Site; analyze traffic and content performance; display ads and manage ad settings; prevent abuse, fraud, and attacks; respond to user inquiries; comply with legal obligations. 5. Legal Bases for Processing Depending on the context, we rely on: your consent (e.g., non-essential cookies/ad personalization where required); performance of a contract or pre-contractual steps (account creation and maintenance); legitimate interests (security, Site improvement, analytics, abuse prevention); compliance with legal obligations. 6. Cookies, Analytics, and Advertising The Site uses cookies and similar technologies. Strictly necessary cookies Required for login, session continuity, and core security. Analytics and advertising technologies May be used for audience measurement, performance analytics, and ad delivery (including non-personalized/personalized ads depending on region and user choice). Consent management Users can manage cookies via browser settings and, where available, via a consent banner/form. Disabling certain cookies may affect Site functionality. 7. Sharing Data with Third Parties We may share data, only as necessary, with: hosting and infrastructure providers; analytics and advertising providers; email delivery providers (e.g., for verification codes and password reset links); public authorities where legally required. We do not sell users’ personal data. 8. International Data Transfers Some providers may process data outside your country. In such cases, we aim to use legally recognized safeguards and share only the minimum necessary data. 9. Data Retention We retain data only as long as necessary for the purposes stated in this Policy, including: account data — until account deletion by the user or upon request; auth sessions — for session lifetime and a reasonable security period; verification/reset codes and tokens — for a limited technical period (as configured); technical logs — for security, diagnostics, and legal compliance needs. After retention periods expire, data is deleted or anonymized unless law requires otherwise. 10. Data Security We apply reasonable technical and organizational security measures, including: storing passwords as cryptographic hashes; access controls; abuse and threat protection measures. No internet transmission or storage method is absolutely secure. 11. Your Rights You may have the right to: access your personal data; correct inaccurate data; request deletion; restrict or object to processing (where applicable); withdraw consent (where processing is based on consent); request data portability (where applicable). To exercise your rights, contact: [email protected] 12. Account Management If you have an account, you can: edit your profile (except email); log out; delete your account (“Delete player”) in profile settings. You may also request account deletion by email. 13. Third-Party Links The Site may contain links to third-party resources. We do not control and are not responsible for their privacy practices or content. 14. Children’s Data The Site is not intended to knowingly collect children’s data in violation of applicable law. If you believe a minor has provided data without valid legal basis, contact us. 15. Policy Changes We may update this Policy from time to time. The current version is always available on the Site with the latest update date. 16. Contact For privacy and personal data matters: [email protected]