Privacy Policy

Who we are

Cyclismo is an independent, individually operated site for tracking professional cycling. If you have questions about this policy or your data, contact [email protected].

What we collect and why

• Cookieless site analytics. We use Cloudflare Web Analytics, a privacy-first, cookieless measurement beacon that reports aggregate traffic (e.g. page views) without fingerprinting visitors or setting a tracking cookie. It only loads when an analytics token is configured for the deployment.
• Anonymous comment identity. If you post a comment, we set a single strictly-necessary cookie (cyclismo_anon) so your comments can be attributed to a consistent anonymous identity. It is httpOnly, signed, and expires after 30 days.
• Optional account. If you choose to sign in, we use Supabase to manage authentication (e.g. email sign-in). We do not require an account to browse or read the site.
• Advertising. We show ads through Google AdSense to help fund the site. Google and its partners collect information such as your IP address, device and browser details, the pages you visit and how you interact with ads. See the Advertising section below.

Cookies

Cyclismo itself sets the strictly-necessary comment-identity cookie described above, and signing in stores your session in authentication cookies. Our site analytics are cookieless. Google and its partners set advertising cookies, and may use similar technologies, as described below.

Advertising

Third-party vendors, including Google, use cookies to serve ads based on your previous visits to this site or other websites. Google's use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and other sites on the internet.

Where the law requires your consent to these cookies, such as for visitors in the European Economic Area, the UK and Switzerland, we ask for it through a consent message.

You can turn off personalised ads from Google in My Ad Center, and from participating third-party vendors at aboutads.info. Google explains how it handles this information in How Google uses information from sites or apps that use its services.

Who processes your data

We rely on a small number of providers to run the site: Cloudflare (content delivery, security, and analytics), Microsoft Azure (hosting and file storage), Supabase (account authentication), and Google (advertising). Google collects advertising data directly from your browser. We do not give your account details or comments to advertisers.

Your rights

You have the right to access and delete the personal data we hold about you. If you have an account, you can delete it yourself at any time from your profile; this removes your comment history and, in production, your authentication account. To request access to your data, or for help with deletion, contact [email protected].

Data retention

The anonymous comment-identity cookie expires automatically after 30 days. Account data and comments are retained until you request deletion. Google decides how long advertising cookies and advertising data are kept.

Changes to this policy

We may update this policy as the site changes. The "Last updated" date above reflects the most recent revision, and this page describes the site's actual data-handling behaviour as of that date.