The short version: no accounts, no advertising or tracking cookies, no selling of personal data. We use cookieless analytics, and API requests are logged only as a salted, non-reversible hash, never a raw IP.
Website analytics
We use Umami, a privacy-focused, cookieless analytics tool, for anonymous aggregate statistics (popular pages, rough country). It sets no cookies and builds no profile of you.
API request logs
To detect abuse and understand usage, each API request is logged with: the endpoint path, a salted SHA-256 hash of the client IP (truncated and non-reversible; the raw IP is never stored), the API key id if one was sent, the response status, and a timestamp. These logs are retained for up to 90 days and then deleted. If you use an API key, requests are attributable to that key for rate-limiting and abuse handling.
Edge & hosting
Our content-delivery and security layer (Cloudflare) processes standard technical request data (such as IP address and browser type) transiently to deliver the Service, cache responses and prevent abuse. This is not used to identify individuals.
Contact form
If you send a message via the contact form, we receive the name, email and message you provide, plus an anti-spam check (Cloudflare Turnstile), solely to read and reply. We don't use it for marketing.
Data about fighters & events
The factual MMA data (names of public figures, results, dates, venues) is compiled from publicly available records and presented for reference. If you are featured and believe something is inaccurate, contact us and we'll review it.
Contact
Questions about privacy, or a data request? Contact us or email [email protected].