What we know about you
We hold your email, your name and the record of what you did here. We do not sell it, we do not advertise against it, and you can have all of it deleted whenever you like.
The short version
We keep your email address, your display name, and the record of what you did on the site. We do not sell it, we do not advertise against it, and nothing is ever posted anywhere on your behalf. If you ask us to delete your account, everything goes, including your trading history.
Who we are
58 All Out is an independent publication covering the Bangladesh national cricket team, operated by YOUR NAME OR COMPANY in Sydney, Australia. In this policy "we" means that operator, and "you" means anyone with an account.
For anything about your data, write to hello@58allout.com.
What we collect, and why
| What | Why we hold it |
|---|---|
| Email address | It identifies your account and is how a sign-in link reaches you. Sign in with Google and we receive it from Google. |
| Display name and profile picture | Only if you sign in with Google, which supplies both. They appear next to you on the leaderboard. You can change the name. |
| City or market | Optional. It groups the sentiment index by Dhaka, London, Sydney, New York and Auckland, which is the point of the index. |
| Your points, positions, trades and ledger | This is the product. Without it there is no balance, no leaderboard and no way to prove your score is right. |
| Sentiment votes | What you believe will happen, separately from what you staked points on. |
| Technical data | Our hosting and database providers log IP addresses and request details for security and abuse prevention. We do not use them to build a profile of you. |
We do not collect payment details, because nothing on the site costs money. We do not ask for your date of birth; you confirm you are 18 or over and we take that on trust.
What we do not do
- We do not sell or rent your data to anyone.
- We do not run advertising, so nothing is shared with ad networks.
- We do not post to your social accounts. Signing in with Google grants us your name, picture and email, and nothing else.
- We do not track you across other websites.
Who else touches your data
We use a small number of services to run the site. Each one only receives what it needs to do its job.
| Service | What it handles |
|---|---|
| Supabase | The database and your account. Holds your email, profile and full trading history. |
| Netlify | Serves the website. Sees requests, not your account data. |
| Resend | Sends sign-in emails. Sees your email address and the fact a link was sent. |
| Only if you choose to sign in with Google. Google tells us your name, email and picture. | |
| Cloudflare | Runs the domain's DNS. Does not see your account data. |
Cricket data comes from a commercial feed. That flows one way, into the site. Nothing about you is sent to it.
Where your data lives
Our database is hosted in ap-northeast-2. Our email and hosting providers operate globally. If you are in the UK, the EU or elsewhere, your data may therefore be processed outside your country, under the standard contractual protections those providers offer.
How long we keep it
For as long as your account exists. One exception is worth explaining: the ledger that records every change to your points balance is deliberately append-only and cannot be edited, because it is the only way to prove a balance is correct if you ever dispute it. Deleting your account deletes the ledger along with everything else.
Your rights
Wherever you live, you can ask us to:
- Show you everything we hold about you.
- Correct anything that is wrong.
- Delete your account. This removes your profile, positions, trades, ledger and votes. It cannot be undone and your leaderboard history goes with it.
- Export your data in a machine-readable form.
- Withdraw consent by deleting your account, which is the only thing your consent supports.
Email hello@58allout.com and we will act within 30 days. If you are in the UK or EU and think we have handled this badly, you can complain to your national data protection authority.
Cookies and local storage
We use no advertising or tracking cookies. The site stores two kinds of thing in your browser:
- A sign-in session, so you are not asked to sign in on every page. Deleting it signs you out.
- Small preferences: whether you chose light or dark, and whether you are reading in English or Bangla.
Children
The site is for people aged 18 and over and we do not knowingly hold data about anyone younger. If you believe a child has an account, tell us and we will delete it.
Security
Accounts are protected by database row-level security, which means one account cannot read or alter another's data. Balances can only be changed by the server, never by anything running in your browser. We hold no passwords for email sign-in, because there are none: we send a link instead.
No system is perfect. If we ever discover a breach affecting your data, we will tell you and the relevant regulator promptly.
Changes
If we change this policy in a way that affects you, we will say so on the site rather than quietly editing the page.