Privacy notice

Only what an account needs. There is no profiling, no advertising profile and no data bought from anyone else.

Your email address

So you can sign in and receive account email. Held by our accounts provider — see section 04.

Your password

Stored only as a hash, by our accounts provider. We cannot read it, and neither can anyone at Xilbishi Services.

Your membership

Which tier you are on, when it expires, and — if you asked for the launch promo — that you asked, when, and which administrator answered.

A display name

Optional, and only if you give us one.

We do not store payment details, because no payment is taken yet. When that changes, this notice changes with it.

To give you the account and membership you asked for — in data protection terms, performance of a contract with you. Where we keep the service running and secure, the basis is our legitimate interest in operating it.

Two kinds, both strictly necessary, so there is no cookie banner on this site and nothing to consent to:

Authentication cookies

Set by our accounts provider to keep you signed in. Without them you would be signed out on every page.

qh_user and qh_tier

Used only by the zero-configuration demo mode a developer runs locally. They are not set for you on this site.

There is no analytics, no advertising technology and no third-party tracker anywhere on this site. Nothing follows you between pages, and nothing follows you off it.

Our display and body typefaces are served from this site rather than from Google's servers, so simply loading a page sends your IP address to no one but us and our hosting provider.

Four service providers, described by what they do and where they do it. We will name any of them on request — just ask.

Accounts and database — European Union

Stores your account, your membership and everything in section 01. Hosted in the EU.

Email delivery — European Union

Sends account email such as your sign-up confirmation. It handles your email address and nothing else. Hosted in the EU.

Website hosting

Serves this site and runs its server code. Request data — including your IP address — may be processed outside the EEA, under the standard contractual clauses in that provider's data processing terms.

Automated text assistance

Used server-side only, on publicly published sports news and fixture data, to draft and check the copy you read. Processing may take place outside the EEA. No member data is ever sent to it — not your email, not your membership, nothing.

Your account data stays until you ask us to delete it, or until you delete the account. Deleting the account removes the profile with it.

You can ask for a copy of your data, ask us to correct it, ask us to delete it, ask for it in a portable form, object to how we use it, or ask us to restrict that use. Email post@qehreman.krd and we will answer within one month.

If you think we have handled your data badly, you can complain to Datatilsynet, the Norwegian Data Protection Authority. We would rather you told us first, but it is your right either way.

If this notice changes we will update the date at the top. If a change materially affects you — a new processor, a new purpose, anything that starts tracking you — we will say so on the site rather than quietly editing this page.

Questions about any of it: post@qehreman.krd. See also our terms of service.