1. Who runs this site
Gavi Corner is an independent fan-journalism project operated by Sam. We are not affiliated with FC Barcelona, LaLiga, UEFA, the RFEF, Pablo Gavi, or his family. For privacy-related questions, contact us through the address listed on the Code of Ethics page.
2. What we collect when you just read
If you only read articles and never sign up, we do not collect personal data on the server. Some of what we use lives entirely in your browser via localStorage:
- Language preference — so the page loads in the right language.
- Article-view dedup — short flags so reload doesn't double-count your view.
- Cookie-notice acknowledgement — so we don't show the banner twice.
- Newsletter subscription flag — so we don't show the form to people who already subscribed.
None of the above ever leaves your device. There are no third-party advertising or analytics trackers on this site.
3. What we collect when you sign up as a Cornerist
Creating an account is optional. If you sign up, the following is stored on our database:
- Email address — used for login and (optionally) for the digest newsletter. Never shown publicly.
- Display name — visible publicly on comments, leaderboard, and your profile page.
- Avatar — optional. If you upload one it's stored in our public "avatars" bucket.
- Joined-at timestamp — visible on your profile.
- Score, badges, comments, bookmarks — generated as you use the site. Comments and score are public; bookmarks are private to your own account (server-side row-level security enforces this).
4. The newsletter
Subscribing stores your email and language preference in a separate, write-only table. No one except the site operator can read that table — not even logged-in Cornerists. We only use your email to send the weekly Gavi digest. Every email includes a one-click unsubscribe link.
5. Embedded third parties
The Instagram feeds on this site are rendered by Elfsight. When you load a page with an Instagram embed, your browser fetches the widget from elfsightcdn.com, which may set its own cookies. Flag icons come from flagcdn.com. We do not share any of your Gavi Corner account data with these providers.
Fonts are served by Google Fonts. Scripts used for sign-in and account features may be loaded from jsdelivr.net. These providers may see your IP address as part of normal HTTP requests — we do not pass any account data to them.
6. Cookies vs. localStorage
We do not set our own tracking cookies. The only browser-side state we use is localStorage, listed in section 2. Third-party embeds (Elfsight, etc.) may set their own cookies under their own domains; their policies apply there.
7. How long we keep data
- Account data: for as long as your account exists. You can request deletion at any time.
- Newsletter: until you click unsubscribe. Unsubscribed rows are flagged but kept for ~12 months to honor "please don't re-add me" requests.
- Comments: kept while your account is active. They become anonymous (display name → "Cornerist #000000") if your account is deleted.
- Server access logs: our hosting provider keeps platform-level logs for a short retention window we don't control. They're not used to profile readers.
8. Your rights
No matter where you live, you can ask us to:
- Export everything we hold about your account.
- Correct your display name, email, or avatar.
- Delete your account and all associated comments/bookmarks/scores.
- Unsubscribe from the newsletter (instantly, via the link in every email).
If you're in the EU, EEA, UK, or any jurisdiction with similar laws (GDPR, UK GDPR, LGPD, CCPA, etc.), the above are explicit legal rights. We treat them the same regardless of where you're based.
9. Children
Gavi Corner is not directed at children under 13 (or under 16 in the EU, where applicable). We do not knowingly collect personal data from minors. If you are a parent or guardian and believe a minor has signed up, contact us and we will delete the account.
10. Changes to this policy
We will update this page if our practices change in a way that affects you (e.g. adding analytics). For non-trivial changes we will also note them on the home page for a few days.
11. Contact
Privacy questions and account deletion requests can be sent via the contact listed on the Code of Ethics page. We'll respond within a reasonable time — usually within a few days.