Privacy

Who runs this site

Hoops Tonight is the site for Jason Timpf's show and its fan lists and mailbag.

TODO — Legal entity and contact email.

TODO — Postal address.

Fans do not need accounts

You can build a list, send a question and vote without signing up. We collect the ballot choices, mailbag question text and any display name you choose to provide. Names are optional. Your ballot name appears on the share graphic; a mailbag name may appear with an approved question.

The necessary device cookie

We use a random device identifier in an httpOnly, Secure, SameSite=Lax cookie for up to one year. Our server stores only a SHA-256 hash salted with a private server secret, not the identifier itself. It keeps one ballot per device per list, lets you replace that ballot before a poll closes, and keeps one mailbag vote per device per question. It also enforces ten ballot submissions and five questions per rolling hour. We do not store IP addresses or user agents with ballots or votes.

Your browser also keeps unsent list drafts and your optional name in local storage per list so you can return to them. These drafts are not counted as votes. Clearing browser storage removes these drafts and may reset device recognition.

Questions and screening

Questions are screened automatically before they appear. OpenAI, the AI model provider used through Lovable's AI gateway, receives the question text to check whether it is an appropriate basketball question and assign a topic. Topic summaries for the show's team use approved question text. We do not send your device cookie, hash or admin email to the model for screening. Rejected questions are not public. Approved or answered questions, their optional names, topics and vote totals may appear here and on the show.

YouTube mailbag comments

When YouTube is connected, we import public comments beginning with “Mailbag:” from the channel's eight most recent uploads. We store the comment text, comment ID and video ID, but no commenter channel or profile data. These comments go through the same screening. YouTube receives the channel and video requests; its own service and privacy rules apply when you comment there.

The show's team

Admins sign in with an email link or one-time code. Lovable Cloud stores admin email addresses and sign-in records, and the protected allowlist determines who can manage the show. Fans have no accounts.

No ads or analytics

We do not use advertising cookies, visitor analytics or tracking pixels. We do not sell your data. There is no cookie banner because the device cookie is necessary for the lists and votes, not advertising or visitor tracking.

Who handles the data

Lovable Cloud provides hosting, the database and team sign-in. The AI model provider processes question text for screening and topic summaries. Public ballot results show only aggregated rankings, and remain hidden until 10 ballots have been cast. Individual ballot contents, device hashes, private votes and pending or rejected questions are not public.

How long we keep it

Ballots and mailbag votes are kept for the season and removed after the next season starts in October. Rejected mailbag items are removed after 30 days. Necessary submission-limit records are cleared after their one-hour window during subsequent submissions. Approved and answered questions remain for the mailbag and show archive until removed by the team or through a deletion request. Unsent drafts remain in your browser until cleared or replaced.

Deletion requests

To request deletion, contact the site's operator at the contact email above once it is added. For an anonymous ballot, include the list date and enough details to locate it; for a question, include its text or public link. Do not send passwords, sign-in codes or cookie values. Clearing your cookie does not delete the saved server record. We may need limited information to verify which record is yours.

Children

This site is not directed to children under 13. Please do not submit personal information about children. Contact the operator if you believe a child has submitted personal information so it can be removed.