Privacy Policy

This explains what personal data we hold about you, why we hold it, and what you can do about it.

The data controller is Rebirthed LLC, of Attn: "UFC.GG", 930 S 4th St, Ste 209 #6326, Las Vegas, Nevada 89101-6845. For anything in this policy — a copy of your data, a correction, a deletion — write to [email protected].

1. What we collect

When you create an account. Your username, email address, and a hashed password. We never store your password itself.

When you use the site. Posts, comments, reactions, predictions, and reputation you give or receive. Your IP address and browser user-agent at the time of each post, kept for abuse and moderation purposes.

When you buy something. What you bought, when, how much you paid, and the reference our payment provider gives us. We do not receive or store your full card number.

When you contact support. Whatever you write to us, plus anything you attach.

Automatically. Essential cookies and session data. See the Cookie Policy for the detail. Analytics and advertising cookies are set only if you consent.

We do not ask for, and would rather not receive, special category data — health, politics, religion, sexuality, biometrics. Please do not put it in a post.

2. Why we hold it, and on what legal basis

Where we rely on legitimate interests, we have weighed those against your rights and consider the processing proportionate. You may object — see section 6.

3. How long we keep it

• Account and profile: while your account is open.
• Posts and comments: until deleted. Closing your account does not delete your posts, because removing them would gut the discussions other people took part in. They are anonymised instead: your username is replaced and the post is detached from your account.
• IP addresses attached to posts: 12 months.
• Purchase records: as long as tax and accounting law requires, typically six to seven years.
• Support tickets: 24 months after the ticket is closed.
• Moderation and ban records: while the account exists, and afterwards where needed to enforce a ban.
• Backups: deleted data may persist in backups for up to 35 days.

4. Who we share it with

We share personal data only with:

• Payment providers, to take payment and handle refunds and disputes.
• Our hosting, email and infrastructure providers, who process it on our instructions.
• Analytics and advertising providers, and only where you have consented.
• Law enforcement or a court, where we are legally required to, or where it is necessary to protect someone's safety.

We do not sell your personal data.

Your public posts, username, avatar and reputation are visible to anyone who visits the site, including search engines. Please treat anything you post as public and permanent.

5. Where it goes

We are based in the United States, and our providers may process data there and elsewhere. If you are in the UK or the EEA, that means your data is transferred out of your country to us. Where that happens we rely on the appropriate safeguards — an adequacy decision, or standard contractual clauses — and you can ask us at [email protected] which applies to a particular transfer.

6. Your rights

Depending on where you live, you can ask us to:

• give you a copy of the data we hold about you;
• correct it, if it is wrong;
• delete it (though see the retention notes above — some records we must keep);
• restrict or object to how we use it;
• give it to you, or another provider, in a portable format;
• stop sending you marketing, at any time, with no reason needed.

Where we rely on consent, you can withdraw it at any time. That does not undo processing already carried out.

Write to [email protected]. We will respond within one month. If you are not satisfied, you can complain to your national data protection authority.

If you are in the United States

Several states give residents their own rights, and we apply the following to anybody in the US who asks, without checking which state you are in:

• to know what categories of personal data we have collected about you, and what we did with them;
• to a copy of that data;
• to have it corrected or deleted;
• to opt out of any sale or sharing of it for cross-context behavioural advertising;
• not to be treated worse for exercising any of the above.

We do not sell your personal data for money. Where you allow advertising cookies, the advertising partners those cookies belong to may use what they collect in ways that some US state laws define as "selling" or "sharing". You can refuse that at any time from Cookie Settings in the footer, and that refusal is the opt-out.

Nevada residents may also submit a verified request not to have covered personal information sold, under NRS 603A, by writing to [email protected].

7. Children

The site is not intended for children under 16. If you believe a child has given us personal data, write to [email protected] and we will delete it.

8. Security

Passwords are hashed. Traffic is encrypted in transit. Access to production data is limited to staff who need it. No system is perfectly secure, and we cannot guarantee that one is; if a breach affects your rights, we will notify you and the relevant regulator as the law requires.

If you have found a vulnerability, please tell us at [email protected] rather than posting it publicly. We will not pursue you for reporting one in good faith, and we will not ask you to keep it quiet indefinitely.

9. Changes

We will post any change here and update the date shown at the foot of this page. Where a change is significant, we will give notice on the site.