Privacy Policy

Who we are

hmbrimpact.org is operated by HmBr Sports. For any question about this policy or the data described in it, write to contact@hmbrsports.com.

What this site does NOT do

Stating this plainly because it removes most of the usual concerns:

• No advertising, ad networks, or ad tracking.
• No Google Analytics, no tag manager, no heatmaps, no session recording, and nothing that follows you to other websites. (Two things do measure this site — a cookieless page-view counter and the live-chat widget — and both are described below.)
• No payments. Nothing is sold here and no card data is handled.
• No marketing email or SMS. We do not run a newsletter here.
• No sale, rental, or sharing of personal data with anyone for their own purposes.

Page-view counting (Vercel Web Analytics)

We count page views so we can see which pages are read and roughly where in the world our readers are. This is deliberately the least invasive option we could find:

• No cookies. Nothing is stored on your device.
• No IP address is kept. Visitors are counted using a short-lived hash derived from the request, which is discarded after 24 hours. There is no lasting identifier for you.
• No cross-site tracking. It cannot follow you to other websites or reconstruct your browsing elsewhere.
• We see aggregate counts — country, page, device type, browser, referring site. We cannot see who you are.

Because URLs themselves can contain private information, we strip them before anything is sent: sign-in pages are never reported at all, and any private link — an invitation or a document link — has its secret part removed first.

Live chat (Zoho SalesIQ)

This site runs Zoho SalesIQ so you can start a conversation with us. The script loads on every page, and — whether or not you open the chat — it may record technical and usage information including your IP address, the approximate location derived from it, your browser and device, the page that referred you, and the pages you view here. It sets its own cookies to recognise returning visitors.

If you do start a chat, the transcript and anything you type into it are processed by Zoho as part of delivering that conversation. We tag each visitor with which HmBr site they are on, so a conversation started here is distinguishable from one started on hmbrsports.com. We attach nothing else about you.

Zoho Corporation acts as a processor on our behalf; its handling is governed by Zoho's privacy policy.

AI processing of chats

Our live chat uses an AI assistant. To provide it, Zoho SalesIQ shares the following with Anthropic, the provider of the Claude models: chat transcripts, conversation tags, and our own help articles and webpage content.

That means anything you type into the chat may be processed by Anthropic as well as Zoho, both acting on our behalf. Please do not put sensitive personal information — financial details, identification numbers, health information — into the chat window. If you need to send us something sensitive, email contact@hmbrsports.com instead.

Declining it

Blocking third-party scripts or cookies in your browser, or using a tracker-blocking extension, stops SalesIQ loading. Live chat then does not work, but nothing else on this site is affected — you can still read every page, request Evidence Room access, and reach us at contact@hmbrsports.com.

Signing in

Sign-in is by magic link: you enter an email address and we email you a one-time link. There is no password to store. Authentication is handled by Supabase, which stores your email address and the timestamps of your sessions on our behalf.

A session cookie keeps you signed in. It is required for the site to recognise you and cannot be disabled while remaining signed in.

Evidence Room access requests

The Evidence Room holds signed originals — coach evaluations, club and federation endorsement letters, independent test reports. Because those documents carry other people's names and signatures, access is granted individually rather than published openly.

What the request form collects

• Your name — so we know who is asking.
• Your organization (optional) — club, federation, publication, or similar.
• Your email address — used to reach you with the decision, and matched against your signed-in account when you enter the room.
• Your stated purpose — why you want to see the originals.

We record the decision on your request, who made it, when, and the date access expires. Approved access is time-limited (14 days by default) and view-only.

The access agreement, and what signing it records

Before entering the Evidence Room you are shown an access agreement and asked to type your full name as an electronic signature. At that moment we record:

• the name you typed and the email address on the grant;
• the version of the agreement shown to you, and a cryptographic hash of its exact text, so it can later be proven which wording you agreed to;
• your IP address and browser user-agent string;
• the date and time of signing.

The IP address and user agent are kept for one reason: these are confidential third-party documents, and an electronic signature is only meaningful if there is a record of the circumstances in which it was given. They are not used to profile you, are not shared, and are not used for any other purpose.

If you would rather not have that recorded, do not sign the agreement — you simply will not enter the room. Nothing else on the site is affected.

How long we keep things

• Access requests and decisions— kept while the grant is live and afterwards as a record of who was given access to other people's signed documents.
• Signature records — kept for as long as the documents they relate to are in the room, for the evidentiary reason above.
• Account records — kept until you ask us to delete the account.

You can ask us to delete your account and your access history at contact@hmbrsports.com. We may need to retain a minimal signature record where it is the only proof of a confidentiality undertaking someone else relied on; if so, we will tell you exactly what is being kept and why.

Third parties

These services necessarily see technical data when you use this site:

• Vercel hosts the site and processes requests, including your IP address, as part of serving pages.
• Supabase provides authentication and the database.
• Vercel Web Analytics counts page views, cookielessly and in aggregate, as described above.
• Zoho provides the live-chat widget and records the visit data described above.
• Google Fonts serves the typefaces. Your browser requests those files from Google, which means Google can see your IP address. No other Google service is used on this site.

These act as processors for us. We do not send them anything about you for their own purposes.

Links away from this site

This site links to other HmBr properties, to our scholarship fund at bold.org, and to third-party tournament and product pages. Once you follow such a link, that site's own privacy policy applies, not this one.

Your rights

You can ask us what we hold about you, ask for it to be corrected, ask for it to be deleted, or object to how it is used. Write to contact@hmbrsports.com and we will respond. Depending on where you live you may also have the right to complain to a data protection authority.

Changes

If the site starts collecting something it does not collect today, this page will be updated before that change goes live, and the date at the top will change with it.