PRIVACY POLICY

Box & Slate ("we," "us," or "our") operates the website boxandslate.com and the Box & Slate daily email newsletter. This Privacy Policy explains how we collect, use, and protect your personal information.

INFORMATION WE COLLECT

We collect only the information necessary to deliver our service:

• Email address — provided when you subscribe to our newsletter. This is the only personal data we collect directly.

We do not collect names, phone numbers, payment information, or any other personal data through our website.

HOW WE USE YOUR INFORMATION

Your email address is used solely to:

• Send you the Box & Slate daily newsletter
• Send occasional service-related communications (e.g., changes to our service or this policy)

We do not sell, rent, or share your email address with third parties for marketing purposes.

LEGAL BASIS FOR PROCESSING (GDPR)

If you are in the European Economic Area (EEA), our legal basis for processing your personal data is your explicit consent, which you provide by checking the consent checkbox and submitting the subscribe form. You may withdraw consent at any time by unsubscribing.

SERVICE PROVIDERS

We use the following third-party services to operate Box & Slate:

• Resend (resend.com) — email delivery and contact management. Your email address is stored and processed by Resend to send newsletters. Resend is based in the United States. Resend Privacy Policy
• Cloudflare (cloudflare.com) — website hosting and delivery via Cloudflare Workers. Cloudflare processes request metadata (IP addresses, request headers, timestamps) as part of serving the website and for operational monitoring (error logging, performance). This data is retained by Cloudflare per their data retention policies and is not used for advertising or shared with other parties. Cloudflare Privacy Policy
• Supabase (supabase.com) — database hosting for public game schedule and score data. No personal data is stored in Supabase. Supabase Privacy Policy

COOKIES AND TRACKING

Box & Slate does not use cookies, local storage, or any client-side tracking technologies. We do not use analytics services such as Google Analytics. We do not embed third-party tracking pixels or social media widgets.

Fonts are self-hosted — no requests are made to external font services.

INTERNATIONAL DATA TRANSFERS

Our service providers (Resend, Cloudflare, Supabase) are based in the United States. If you are located outside the United States, your email address will be transferred to and processed in the United States. By subscribing, you consent to this transfer.

DATA RETENTION

We retain your email address for as long as you remain subscribed to our newsletter. When you unsubscribe, your email address is removed from our active mailing list. You may also request complete deletion of your data at any time.

YOUR RIGHTS

You have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — request correction of inaccurate data
• Erasure — request deletion of your data ("right to be forgotten")
• Portability — request your data in a portable format
• Withdraw consent — unsubscribe at any time via the link in any email
• Lodge a complaint — with your local data protection authority if you believe your rights have been violated

To exercise any of these rights, contact us at the email below.

UNSUBSCRIBING

Every email we send includes an unsubscribe link. You can also contact us directly to be removed from our mailing list.

CHILDREN'S PRIVACY

Box & Slate is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us and we will delete it promptly.

CHANGES TO THIS POLICY

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. Continued use of our service after changes constitutes acceptance of the updated policy.

CONTACT

For privacy-related questions or to exercise your data rights, contact us at:

hello@boxandslate.com