Jarvis AI🔒 PRIVACY & YOUR DATA
IPL FanZone is a free fan hub. We collect the minimum possible data to make the site fun — and you can see or erase all of it, any time, in one click.
👤 View / export / delete my data ⬇ Download my data (JSON)
1. What we store
| Data | Where it lives | Why | Retention |
|---|---|---|---|
| Fan name & favourite team | Your browser (localStorage) | Personalise pages & chat | Until you clear it |
| Jarvis chat memory (name, city, favourite team) | Server memory file | So Jarvis remembers you between chats | Until you delete it |
| Jarvis conversations | SQLite database | Chat history shown back to you | Until you delete it |
| Chat messages, reactions, fan insights | SQLite database | Public fan features you posted | Until you delete them |
| Cookie-consent choice | First-party cookie fz_consent | Remembering your choice | 180 days |
| Session + CSRF cookies | Strictly-necessary cookies | Security & rate limiting | Session only |
| IP address (hashed) | In-memory rate-limit counters | Stopping abuse of our free AI quota | ≤ 24 hours |
We never store: passwords (no accounts), payment info, location tracking, advertising identifiers.
2. Your rights (GDPR)
- Access & portability (Art. 15/20): download everything we hold as JSON.
- Erasure (Art. 17): one click on the My Data page wipes server records + cookies.
- Restriction (Art. 18): choose “Decline” in the cookie banner — we stop persisting personalisation data.
- Lodging a complaint: you may complain to your local supervisory authority (e.g. ICO in the UK, your EU DPA).
Lawful bases: consent (Art. 6(1)(a)) for optional personalisation & Jarvis memory; legitimate interest (Art. 6(1)(f)) for security/rate-limit counters.
3. Your rights (CCPA / CPRA — California)
- Right to know / delete / correct: use the My Data page — it does all three.
- Right to opt-out of sale/sharing: we do not sell or share personal information. There is nothing to opt out of — but declining cookies also disables the third-party embeds below.
- Non-discrimination: the site works fully even if you decline cookies (Jarvis just won't remember you between visits).
4. Third-party services
| Service | Purpose | Notes |
|---|---|---|
| Groq (AI) | Jarvis answers | Your question text is sent to Groq's API; anonymous by design. |
| ESPN Cricinfo (RSS) | Live match list | Fetched server-side and cached — your browser never talks to it. |
| CricZop | Full scorecards | Fetched server-side and cached — your browser never talks to CricZop. |
| Crictimes / CricketData widgets | Embedded live widgets | Third-party iframes/scripts; blocked if you decline cookies. |
| Google Fonts | Typography | Stylesheet + font files only. |
5. Cookies we set
sessionid— strictly necessary (rate limiting, CSRF session).csrftoken— strictly necessary (form security).fz_consent— your accept/decline choice (180 days).
Fan name/team use localStorage, not cookies, and only after you consent.
6. Data security & transfers
User identifiers are SHA-256 hashed before use in rate-limit counters. AI prompts go to Groq (US) — no names are required, so prompts are effectively anonymous. Backups: none beyond the host's standard disk.
7. Contact
Privacy requests: hello@iplfanzone.app — or do it yourself instantly on the My Data page.
Last updated: September 2026 · This policy applies to this fan-made, non-commercial site.