Privacy Policy
Last updated 14 October 2026
This page explains what CGSports, run by CG Sports Group, collects and why. We do not sell your personal information.
What we store
- Your account: email address; your password, stored only as a salted one-way hash (never in plain text); your plan; any preferences you save; the time and version of the Terms you accepted; and, if you choose "Later" or "never ask again" on the review prompt for a sport, that choice for that sport and the time you made it. "Later" holds the prompt back for 90 days; "never ask again" stops it.
- Security records: the IP address and time of each sign-in, records of accounts locked for sign-ins from too many addresses, and rate-limit counters. Access logs: a row is written each time the sign-in check (
/api/auth/me) runs, which the site does when you open the Membership or Reviews page. Each row holds the IP address, your account if you are signed in, and the time; its route and status columns are the same on every row. There is one rate-limit counter for each IP address and each rate-limited route, with a separate counter for each sport on the sport pages and APIs, holding the start of its current time window and the number of requests counted in that window. The IP address of anyone who sends a support or feedback message is kept in that counter; the message itself is stored without the IP address. Nothing removes a counter automatically, so it is kept until we delete it by hand; there is no fixed retention period. - What you send us: reviews you post (rating and text); support messages and feedback (name, email, subject and message), with whether each one is a support request or feedback; and, only if you answer it, your reply to the optional hypothetical question "if this were paid, would you pay?" on a scale of 1 to 5. Nothing is sold during the free preview.
- Payments: if you buy a plan, the payment processor handles your card, and we do not store your card number. Our subscription record holds: your account; the plan key; the status ('intent' when a signed-in user starts a subscription, before any payment; 'active' once payment is confirmed; and later the status the processor reports, including 'cancelled'); the processor's customer and subscription reference numbers; and the time the record was created.
Cookies and browser storage
cgs_session: a signed sign-in cookie that keeps you logged in for up to 30 days. It cannot be read by page scripts and is only sent over secure (https) connections.- Your answer to the age check is saved in your browser's local storage, on your device only.
- We do not use advertising or tracking cookies.
How we use it
- To run your account and the site, to answer support messages, to read the feedback you send us, and to gauge interest in a paid plan from the optional hypothetical answer.
- To protect accounts and the site from sharing, fraud and abuse.
- To process payments, if you buy a plan.
Who else handles it
- Our hosting and database provider (Cloudflare) stores the site and its data.
- Our payment processor, if you buy a plan.
- Authorities, when the law requires it.
Your choices
You can ask us to show you, correct or delete the personal information we hold about you. Contact CustomerService@CGSportsGroup.com or use the Support form.
Changes
If this policy changes, we post the new version here with a new date.
Contact
CG Sports Group · CustomerService@CGSportsGroup.com