Privacy notice

Who we are

clva.io is run by CLV Analytics ("CLVA", "we", "us"), an independent publisher of football, NFL and horse racing ratings, run by an individual based in the United Kingdom. For anything about your data, contact us at [email protected].

The short version

• You can read the whole site without giving us any personal details.
• We don't run advertising, tracking or analytics cookies. Members get one sign-in cookie, nothing else.
• If you sign up, we keep your email address to send you CLVA emails, including the daily ratings email, and to let you sign in as a member.
• If you buy a CLVA Edge plan, Stripe handles the payment. We never see your card details.
• We never sell or share your information.

What is collected when you visit

The site is hosted by Cloudflare. Like any web host, Cloudflare automatically processes basic technical information when you load a page, such as your IP address, browser and device type, the page requested and the time. This is used to deliver the site, keep it secure and protect it from abuse. We don't use this information to identify you.

We don't set any cookies for visitors who aren't signed in. Cloudflare may occasionally use a strictly necessary security cookie to tell real visitors apart from automated traffic. You can read how Cloudflare handles data in its privacy policy.

Email updates and daily ratings

If you sign up on our homepage, we store:

• your email address
• the date and time you signed up
• which part of the site you signed up from (for example, Football)
• a record that you ticked the box agreeing to receive our emails, and the wording you agreed to

We use your email address to send you CLVA emails, such as a daily ratings email on days we publish them, ratings updates and news about CLVA Edge. Our reason for doing so is your consent. We never sell it, share it for anyone else's marketing or use it for advertising.

Every regular email includes a one-click unsubscribe link. Using it removes you from our list straight away (if you pay for CLVA Edge, it just stops the daily email and your plan carries on). You can also email [email protected] and we'll delete your details.

To send emails we use Resend (Resend, Inc.), which processes your email address and the email content on our behalf, and records whether each email was delivered so we can keep the list healthy. We don't track whether you open our emails or click their links.

To stop our forms being abused, each sign-up or sign-in attempt briefly records a scrambled, one-way code made from your IP address. It can't be turned back into your IP address and is deleted after 24 hours.

Member sign-in and cookies

Anyone can sign in to the members area with their email address; the first sign-in creates a free account. That doesn't sign you up for marketing emails. There are no passwords: we email you a sign-in link that expires after 45 minutes and stops working shortly after it is used. We keep a scrambled copy of each link for up to a day so it can only be used once.

When you sign in we set one small cookie that keeps you signed in. It's strictly necessary for the members area, lasts 30 days (or until you sign out) and is never used for tracking or advertising, so we don't ask for cookie consent for it. We keep a scrambled copy of it with your email address so we know who is signed in.

We also keep your member settings, such as whether you want the daily ratings email.

Paid plans

If you buy a CLVA Edge plan, the payment is handled by our payment provider, Stripe. We never see or store your card details. We keep your plan (monthly or annual), whether it's active, its renewal date and the customer reference Stripe gives us, so we know what you've paid for. Our reason for doing so is to provide the service you've paid for and to meet our legal duties, such as keeping tax records. Stripe also uses your payment details to prevent fraud, under its own privacy policy.

How long we keep it

Hosting and security logs are kept by Cloudflare for a limited period under its own policies. Sign-in links are deleted within a day, and sign-in sessions after 30 days. We keep your email details until you unsubscribe or ask us to delete them. We and Stripe keep payment records for as long as the law requires (usually 6 years, for tax).

Where it is stored

Sign-ups and member accounts are stored in a Cloudflare database that we've set up in Cloudflare's Western Europe region. Cloudflare acts as our hosting provider and only processes this data on our behalf. Cloudflare runs a worldwide network, so some technical data may be processed outside the UK and the EU. Where that happens, Cloudflare relies on recognised legal safeguards for international transfers, as covered by UK and EU data protection law. Resend and Stripe are based in the United States. When they process your information there, they rely on recognised safeguards for international transfers, such as the UK International Data Transfer Addendum or the UK Extension to the EU-US Data Privacy Framework.

Your rights

Under UK data protection law you can ask to see the personal information we hold about you, ask us to correct or delete it, or object to how we use it. Contact us at [email protected]. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

Children

This site is for adults aged 18 and over. We don't knowingly collect information from anyone under 18.

Changes

If we change this notice we'll update it here and change the date at the top.