What we collect, where it goes, how to take it back.
No analytics SaaS. No ad network. No accounts. One preview cookie, and that's the whole list.
1. What this site does
GleamingGymnast is a gymnastics archive — athlete pages, competition results, and an On This Day feed. The site is static HTML on Cloudflare. There are no user accounts: everything is open to read without signing anything.
2. What we collect from you, and when
When you enter the dev-preview password. A shared password cookie (gg_auth, see § 5) marks your browser as having passed the preview gate. It carries no identity — everyone who enters the password receives the same kind of cookie, and it isn't linked to a name, email, or account.
What we do NOT collect. No analytics SaaS (Google Analytics, Plausible, Fathom, Mixpanel, Hotjar, Amplitude, Segment, PostHog, or equivalent). No advertising SDK. No third-party pixel. No cross-site tracking. No user accounts, no sign-in, no forms that store what you type. Re-checked against the live Worker source before every publish of this page.
3. Where your data goes
One party, and only one:
- Cloudflare — hosts the Worker (
gleaminggymnast.com) and its storage. Cloudflare's data-processing addendum applies.
No analytics, no ad network, no ML-training pipeline.
4. Retention windows
- Preview-gate cookie. 7-day
Max-Age; expires on its own, holds no identity.
That's the list. Nothing you do on the site creates a server-side record about you.
5. Cookies, in plain language
No third-party cookies. No ad cookies. No tracking pixels.
6. GDPR & CCPA applicability
If you're an EU, UK, or EEA resident, you have data-subject rights under GDPR including access, rectification, erasure, restriction, portability, and objection. If you're a California resident, you have equivalent rights under the CCPA/CPRA including the right to know, delete, and opt out of sale — we do not sell your information. Email hello@gleaminggymnast.com to exercise any of these rights. This section is applicability-only; a full data-processing addendum is not yet drafted.
7. Children
This site is not directed at children under 13 (or 16 where that's the threshold). We do not knowingly collect personal information from children — the site has no accounts to sign into. Athletes featured on archive pages are often themselves minors — that data is public competition-results data, not user data, and is handled under the Sources section of the About page.
8. Changes to this policy
When this policy changes we update the Last-updated stamp at the top. For material changes — a new data recipient, a change in what we collect, a new retention window — we'll surface a banner on the site itself. We do not currently have an email-dispatch vendor wired, so we do not email anyone about policy changes.
9. Contact
Email hello@gleaminggymnast.com with "Privacy" in the subject.