Effective date: November 9, 2026
1. Who we are
Womelite LLC, operating as Womelite, is responsible for the personal information described in this Policy. For European data-protection purposes, we are the controller of this processing. Use our Contact Us form.
This Policy covers Womelite’s website, accounts, follows, and Huddles. Third-party sites and broadcast services have their own policies.
2. Information we collect and why
| Category and examples | Sources | Purposes | Recipients for these purposes |
|---|---|---|---|
| Account identifiers: email, authentication identifier, chosen handle, and authentication/session records | You and our authentication provider | Create and secure accounts, sign you in, respond to requests | Authentication, hosting, and infrastructure providers |
| Preferences and activity: followed teams and athletes, Huddle memberships, and saved settings | You and your use of the Service | Personalize your dashboard and live-game selection; provide requested features | Hosting and database providers |
| Community content: posts, timestamps, reports, and moderation records | You, other participants, and moderators | Publish discussions, prevent abuse, and enforce rules | Public readers for published content; hosting providers and authorized moderators for restricted records |
| Technical information: IP address, browser/device information, request times, requested URLs, and security/error logs | Your browser and infrastructure | Deliver pages, diagnose failures, prevent fraud and abuse | Hosting, security, and infrastructure providers |
| Support and privacy correspondence | You or an authorized representative | Answer questions, verify requests, and resolve concerns | Support providers and professional advisers when needed |
| Optional analytics: cookie or device identifiers, page views, navigation, approximate location, and interactions | Your browser, subject to the regional rules and cookie choices described below | Understand site usage and improve features | Google Analytics and relevant infrastructure providers |
Not every technical field is stored for every request. We do not ask you to provide government identifiers, payment-card details, precise location, or sensitive personal information in Huddles. Do not include such information in public posts.
We also obtain professional sports information about athletes and teams from sports-data providers, including BallDontLie, and relevant public sources. This may include professional names, nationality, age, physical measurements, team affiliation, rankings, and performance statistics. We use it to provide sports profiles and coverage; it is separate from private member-account information. Athletes may contact us to raise accuracy or privacy concerns.
3. Legal bases where the GDPR applies
We process account, follow, and discussion information to provide the services you request and perform our agreement with you. We rely on legitimate interests to secure and maintain the Service, moderate abuse, handle ordinary support, and provide professional sports information, after considering affected individuals’ rights. You may object to processing based on legitimate interests.
We rely on consent for optional analytics or marketing where required. For ordinary analytics enabled by default for U.S. visitors, we rely on applicable permissions under U.S. law and provide the choices described below. Withdrawing consent does not affect earlier lawful processing. We may also process information to meet legal obligations. Providing account information is necessary to use account features; you can browse public pages without an account. We do not make decisions with legal or similarly significant effects solely through automated processing.
4. Cookies, analytics, and your choices
Necessary cookies and browser storage support sign-in, security, settings such as your theme preference, and your cookie choices. You can manage cookies through your browser, although disabling necessary cookies may affect sign-in and other requested features.
We use Google Analytics 4 through Google Tag Manager to understand site usage. For visitors whose connection is identified as United States-based, analytics is enabled by default and can be turned off through Cookie Settings. For other visitors, including when we cannot determine a country, optional analytics stays blocked until acceptance. Rejecting analytics does not prevent you from using the site. Advertising storage, advertising user data, and advertising personalization remain disabled. Accepting our Terms or creating an account does not constitute consent to tracking where consent is required.
Use Cookie Settings in the footer to accept, reject, or change your analytics choice. We save that choice in your browser for up to 180 days, unless you clear it sooner. Changing a previously accepted choice to reject reloads the page to stop tracking and attempts to clear Womelite’s first-party analytics cookies. We also keep optional analytics off when your browser sends a Global Privacy Control signal. Third-party services you choose to visit have their own privacy practices. Google explains its practices at https://policies.google.com/privacy and https://policies.google.com/technologies/partner-sites.
Our page-view events omit URL query strings and fragments and use general page titles. We do not intentionally send email addresses, passwords, handles, or Huddle post text to Analytics. Analytics choices apply to this browser; another device or browser may require a separate choice.
We use your connection’s IP address for an approximate country lookup on our own server to select the cookie experience. We do not send the IP address to an external geolocation API for this lookup, request precise location, or create a separate location-history record. VPNs and other network routing can affect the result. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com/.
Our Contact Us form collects your name, email address, subject, and message to respond to your request. Messages are delivered through our configured email provider and retained as support correspondence. We do not publish your submission or send its contents to Google Analytics. When you load the form’s security check, Google reCAPTCHA processes browser, device, and interaction information to help detect automated abuse. Google’s privacy practices are described at https://policies.google.com/privacy.
5. Disclosure and public information
We use Google Firebase Authentication for sign-in and Google Cloud infrastructure for hosting. Follows and community records are stored in our database. Providers may process information to deliver contracted services, subject to applicable agreements and safeguards.
Public Huddle content is visible to other visitors and may be indexed or copied by third parties. Do not assume a public post is confidential. We may disclose information when legally required, to protect rights or safety, to investigate abuse, or to advisers and parties involved in a business transaction, subject to applicable protections. We do not provide private member-account information to sports-data providers merely because you follow a team or athlete.
6. Retention and deletion
We retain information only as long as reasonably needed for the purposes described here, considering account activity, security risks, disputes, and legal obligations.
| Information | Retention criteria |
|---|---|
| Account details, follows, and memberships | While your account is active; then removed or anonymized following a valid deletion request, subject to lawful exceptions |
| Public posts | While published or needed to operate the discussion; deletion requests are reviewed with privacy rights and lawful exceptions in mind |
| Deleted-post content and moderation records | Only as needed to investigate reports, prevent recurring abuse, resolve disputes, or meet legal obligations |
| Sessions | For the session’s validity period, with expired or revoked records retained only as needed for security or operational purposes |
| Security logs and support records | For the documented operational or legal need, rather than indefinitely |
| Analytics identifiers and events | Analytics cookies last up to 180 days under our tag configuration. Event records are retained according to the Google Analytics property settings and only as needed for the stated purposes. |
| Backups | Until overwritten or removed through backup rotation; access is restricted and information subject to deletion is not returned to ordinary use if a backup is restored |
7. Your privacy rights
Depending on your location and applicable law, you may request access to information, correction, deletion, a portable copy, or restriction of processing. You may object to processing based on legitimate interests and withdraw consent. These rights may be subject to lawful exceptions.
Send requests through our Contact Us form with enough information for us to understand your request. You do not need to create an account. We use proportionate verification for requests involving access or changes to personal information and do not ask for unnecessary sensitive documents. An authorized agent may submit a request with evidence of authority where applicable.
Where the GDPR applies, we respond without undue delay and normally within one month. If a lawful extension is necessary, we explain it within that period. You may complain to your local supervisory authority. EEA authority contacts are available at https://www.edpb.europa.eu/about-edpb/about-edpb/members_en; UK information is available at https://ico.org.uk/.
8. California privacy information
Where the CCPA applies, California residents have rights to know/access, correct, and delete personal information; opt out of sale or sharing for cross-context behavioral advertising; limit certain uses of sensitive personal information; and receive nondiscriminatory treatment for exercising rights.
The categories, sources, purposes, and recipient categories appear above. We do not use sensitive personal information to infer characteristics about you.
Use Contact Us form to submit a request. Where required, we acknowledge covered requests within 10 business days and respond within 45 calendar days, subject to a permitted extension explained to you. Opt-out requests do not require identity verification. You may use our Contact Us form with questions or requests concerning sale or sharing of your information.
If we introduce advertising or other processing that constitutes sale or sharing, we will update the disclosures and provide required opt-out controls before that processing begins. We do not knowingly sell or share personal information of people under 16. The CCPA’s legal applicability depends on statutory criteria; this Policy does not imply that every California business is subject to every CCPA requirement.
9. International processing
We operate in the United States. Information may be processed in the United States and other countries where our verified providers operate. Where applicable law requires safeguards for an international transfer, those safeguards must be in place before the transfer. Use our Contact Us form for information about the providers and safeguards relevant to your information.
10. Children and security
Accounts and Huddle participation are intended for people 16 or older. We do not knowingly collect personal information from children under 13. If you believe a child has provided information improperly, use our Contact Us form so we can investigate and take appropriate steps.
We use reasonable technical and organizational measures appropriate to the information we handle. No online service can guarantee absolute security. Please use our Contact Us form about suspected account misuse or a security concern.
11. Changes and contact
We update this Policy as our practices change and revise the effective date. We provide additional notice or obtain consent where required for material changes. Continued use is not a substitute for consent where consent is required.
Womelite LLC · Contact Us form