Privacy Policy
What we collect, why we collect it, and how to have it removed.
Plain summary: this is a static fan site with no advertising, no analytics and no tracking pixels. We only hold personal information you choose to send us through a form or by email, plus the basic server logs every website needs. We do not sell or share it.
Who we are
Minnesota Vikings IO (minnesotavikings.io) is an independent fan site run by Vikings supporters. It is not affiliated with the Minnesota Vikings or the NFL. We are responsible for the personal information described in this policy. For any privacy question or request, email hello@minnesotavikings.io.
What we collect
Messages sent through the contact form
When you use the contact form we store your name, email address, the topic you chose, the page address if you add one, and your message. To stop spam and abuse we also keep a salted hash of your IP address (a scrambled value, not the address itself) for rate limiting. The form uses a hidden spam trap field and a short-lived security token; neither collects anything about you.
Newsletter sign-ups
If you enter your email address in a newsletter sign-up form, we store that address. The newsletter has not launched yet. When it does, your address will be used only to send that newsletter.
Emails you send us
If you email hello@minnesotavikings.io directly, we receive your email address and whatever you include in the message. A copy of contact form messages may also be sent to that mailbox as a notification.
Server logs
Like every website, our web server records basic technical information about requests, such as the page requested, the time, your IP address and your browser type. These logs are kept by our hosting provider for security and to keep the site running.
Cookies and browser storage
We set one first-party cookie, mnv_consent, which remembers your cookie choices. A few pages also use your browser’s local storage for small conveniences, such as remembering the boxes you ticked on a ticket checklist. Local storage stays on your device and is never sent to us. The full list is in our cookie policy.
What we do not collect
We run no analytics, no advertising, no social media pixels and no third-party scripts, and our fonts are hosted on our own server. We do not build profiles of visitors and we do not buy data about you from anyone.
Why we use it, and our legal bases
Where data protection laws such as the GDPR or UK GDPR apply, we rely on these legal bases:
| What | Why | Legal basis |
|---|---|---|
| Contact form messages and emails | To read and reply to your message, fix errors you report and consider pitches | Your consent, given with the checkbox on the form, and our legitimate interest in answering readers and keeping the site accurate |
| Hashed IP address from the contact form | To limit repeated submissions and block spam | Legitimate interest in protecting the site and its forms |
| Newsletter email address | To send the newsletter you signed up for | Your consent, which you can withdraw at any time |
| Server logs | To keep the site secure, diagnose faults and prevent abuse | Legitimate interest in running a secure website |
mnv_consent cookie and local storage | To remember your cookie choices and features you used | Strictly necessary for the service you asked for |
We do not use your information for automated decision-making or profiling, and we do not send marketing on behalf of anyone else.
How long we keep it
- Contact form messages (including the hashed IP address) are kept only as long as we need them to deal with your message, and are deleted within 12 months.
- Emails you send us follow the same rule.
- Newsletter addresses are kept until you ask us to remove them, or until we decide not to run the newsletter, whichever comes first.
- Server logs are kept by our hosting provider for a limited period for security and operations.
- The
mnv_consentcookie expires after 180 days. Local storage stays in your browser until you clear it.
Sharing
We do not sell, rent or share your personal information with third parties, and we do not pass it to advertisers. Form submissions are stored in a private file on our server, outside the public website. Our hosting provider runs that server and so processes the data stored on it and the server logs on our behalf. We would only disclose information if we were legally required to.
International visitors
The site is read by Vikings fans in many countries. The server that hosts the site, and the email service that handles our mailbox, may be located in a different country from you, so your information may be processed outside your own country. We apply the same protections described here wherever it is processed.
Your rights
Depending on where you live, you may have the right to:
- Access the personal information we hold about you.
- Correct information that is wrong or incomplete.
- Delete your information, for example your newsletter address or a message you sent.
- Object to or ask us to restrict how we use it.
- Withdraw consent at any time, for example to stop receiving the newsletter. This does not affect anything we did before you withdrew it.
- Complain to a data protection authority, such as the Information Commissioner’s Office in the UK or the supervisory authority in your EU country. We would appreciate the chance to sort out your concern first.
To make a request, email hello@minnesotavikings.io from the address the request relates to, so we can match it to our records. We will not charge you, and we will confirm once we have acted on it.
Children
The site is not directed at children under 13 and we do not knowingly collect their information. If you are under 13, please do not use the contact or newsletter forms. If you believe a child has sent us personal information, email us and we will delete it.
Security
The site is served only over HTTPS, with HTTP Strict Transport Security and a strict Content Security Policy that blocks outside scripts. Form submissions are stored outside the public website, IP addresses are kept only as salted hashes, and the forms are protected against automated abuse. No system is completely secure, but we keep what we hold to a minimum.
Changes to this policy
If this policy changes, we will update this page and the date below. If we ever add analytics or anything else that uses personal information in a new way, we will update this policy and our cookie policy before it goes live.
Related: cookie policy, terms and conditions, contact.
Last updated: