Privacy policy

Who we are

hitimes (hitimes.com) is run by Hitimes Ltd (company number 00000000), 1 Example Street, London EC1A 1AA, United Kingdom. We are the controller of your personal data under the UK GDPR and the Data Protection Act 2018. Our ICO registration number is ZA000000. Contact: admin@hitimes.com.

What we keep, and why

If you only read the site. We keep a request log: your IP address, your browser's user agent, the page you asked for, the time and the result. We use it to keep the site running and secure, to spot abuse and to fix errors (our legitimate interests). Logs are deleted after 30 days.

If you sign in with Google. Google tells us your Google account ID, your email address and whether Google has verified it, your name, your profile picture address and your language setting. We keep them to give you an account and recognise you when you return (to provide the service you asked for). When you are signed in, we also keep a session record: when it started, when it was last used and your browser's user agent.

What you do on hitimes. The items you add, your votes, your rankings and whether each of your lists is public or private. This is the service itself. What you add is usually visible to everyone at once. Past a daily limit on adds, what you add may at first be visible only to you: a new item, or an existing item's place in a list. An item that is already public stays public. Such an addition may later become visible to everyone, for example after we have checked it. Your public rankings are visible to everyone; private rankings only to you.

What we don't do. No analytics, no advertising, no tracking pixels, no profiling, no selling or renting of your data. hitimes has no affiliate links today (see the affiliate disclosure).

Who else is involved

• Google runs the sign-in. When you sign in, Google's own privacy policy applies to what Google does.
• Wikipedia (Wikimedia Foundation), YouTube (Google) and the websites that items are added from host the pictures and video players shown on hitimes. We do not copy or proxy pictures: your browser fetches each one directly from the website that hosts it, or from that website's image host, so that website sees your IP address and browser details. Which websites that is depends on the items on the page.
• our hosting provider hosts the site and its database for us under a contract that only lets it act on our instructions.

Google, Wikimedia and those websites may handle data outside the UK, under their own safeguards.

Apart from those requests your browser makes itself, we pass your data to no one else, unless the law requires it.

How long we keep it

• Signed-in sessions end after 30 days without use, and at most 90 days after sign-in.
• Request logs: 30 days.
• Your account and your rankings: until you ask us to delete them.

Your rights

You can ask for a copy of your data, ask us to correct it, delete it, restrict or object to how we use it, or receive it in a portable form. Email admin@hitimes.com from the address you signed in with; we answer within one month. There is no delete button yet, so deletion is by email.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ico.org.uk). We would appreciate the chance to put it right first.

Children

hitimes is not for children under 13. We do not knowingly keep data about them.

Cookies

See the cookie policy.

Changes

When this policy changes, we update the date at the top. A significant change is also announced on the site.