Privacy Policy

Heavy Hitters Only is responsible for the personal information collected through heavyhittersonly.live. Email: support@heavyhittersonly.live

• Account details: email address, name if you give it, password (stored only in encrypted form by our authentication provider), language preference.
• Purchases: which events you bought, amount, currency, date and payment status. Card or PayPal details are handled by Stripe or PayPal and never reach us.
• Optional community details: the Facebook profile link you add on your account page, if you choose to join our community chat.
• Viewing data: when you play, pause or finish a video, with a masked IP address, browser information and a session identifier. Your email, a short account code and the masked IP are shown as a watermark on the videos you watch.
• Preview sign-ups: if you leave your email to unlock an event preview, we store it with the event, whether you agreed to receive updates, a masked IP address and browser information.
• Traffic source: if you arrive from one of our social links, the source (for example "x" or "tg") is saved in your browser for 30 days and attached to your order, so we know which channel works.
• Browser storage: we use local storage to remember your age confirmation, language, unlocked previews, traffic source and login session. We do not use advertising cookies or third-party tracking pixels.

• To create your account, sell and deliver passes, and handle refunds (performance of our contract with you).
• To protect our content from piracy and our users from fraud, through watermarks and viewing logs (our legitimate interest).
• To understand which channels bring visitors (our legitimate interest, using only the source label, not a profile of you).
• To send updates about new events, only if you agreed or are a customer, with an unsubscribe link in every email (your consent or our legitimate interest, as allowed by law).
• To meet legal, tax and accounting obligations.

We do not sell your personal information and we do not share it for cross-context behavioural advertising. We share it only with the providers that run the Site for us, under their own data protection terms:

• Stripe and PayPal (payments);
• Lovable and Supabase (hosting, database, authentication and email delivery);
• Cloudflare (network and security);
• Google Fonts (fonts loaded by your browser).

We may also disclose information when required by law or to protect our rights, for example against content piracy.

Our providers process data in the United States and other countries. When personal information of people in the European Union or the United Kingdom is transferred outside it, we rely on the safeguards our providers offer, such as the EU Standard Contractual Clauses or the EU-US Data Privacy Framework.

Account and purchase data: for as long as your account exists, and purchase records for as long as tax law requires (up to 10 years). Viewing logs: for as long as your account exists, because they are what lets us trace a leak back to an account; you can ask us to delete them together with your account. Preview sign-ups: until you unsubscribe or ask us to delete them.

You can ask us to access, correct, download or delete your personal information, to stop sending you marketing emails, or to stop using it for purposes based on our legitimate interest. Write to support@heavyhittersonly.live from the email address on your account. We answer within 30 days and will not treat you differently for exercising your rights.

California residents: you have the right to know what personal information we collect, use and disclose, to request deletion and correction, and to opt out of the sale or sharing of personal information. We do not sell or share it as those terms are defined by California law.

People in the European Union or the United Kingdom also have the right to object, to restrict processing, to data portability and to lodge a complaint with a data protection authority, such as the Italian Garante per la protezione dei dati personali.

We do not track you across other websites, so we do not change our behaviour in response to browser Do Not Track signals.

The Site is for adults only. We do not knowingly collect information from anyone under 18; if we learn we have, we delete it.

If we change this policy we will post the new version here with a new date, and tell account holders by email if the change is significant.