Version of November 12, 2026.
Who is responsible
Guillaume Houssel, sole trader registered in France (micro-entreprise), SIRET 851 215 582 00012, 138 avenue Victor Hugo, 75016 Paris, France, email: nbamorningshow@gmail.com. For any question about your data: nbamorningshow@gmail.com.
The data we process, and why
| Data | Why | Legal basis |
|---|---|---|
| Email address, password (stored only in encrypted form, never readable) | Create and secure your account, send you account emails (forgotten password, renewal reminder, confirmation) | Performance of the contract |
| Type of subscription, payment dates and history, invoices, billing address | Manage your subscription and billing | Performance of the contract; legal obligation (keeping invoices) |
| Your country, from your IP address (not stored), and your billing address | Show prices in your currency, calculate any applicable tax (VAT, GST, sales tax) | Performance of the contract; legal obligation (tax) |
| Language of your account | Send you emails and invoices in your language | Performance of the contract |
| Date of your request for immediate access and waiver of the right of withdrawal, version of the terms accepted | Prove your agreement | Legal obligation |
| Card details | Pay: they are entered and stored by Stripe, never by The NBA Analyst | Performance of the contract |
| Email address | Send you the weekly recap, our offers and app news (for example a discount code), only if you agreed to it: box ticked when creating your account, or “Yes, please” on the app banner. Unsubscribe in one click: every such email contains a link to stop receiving them; you can also write to us. | Consent (can be withdrawn at any time) |
| Technical card code provided by Stripe (never the card numbers), only if you subscribe with a referral link | Check that the same card benefits from the referral free month only once (Terms, section 16) | Legitimate interest (preventing abuse) |
| IP address and technical logs | Security (limiting login attempts), proper operation | Legitimate interest |
No data is sold or shared for advertising, and none is used for advertising.
Cookies and storage on your device
- Session cookie (“analyste_session”, 30 days): keeps you logged in. It is essential to the service and therefore does not require consent.
- Display preferences kept in your browser (last game analyzed, plan shown). They never leave your device.
- No audience measurement or advertising cookies.
- Videos: the YouTube player (the “no-cookie” version, youtube-nocookie.com) only loads when you click on a video; Google may then process data under its own policy.
- Fonts loaded from Google Fonts: your IP address is sent to Google to display them.
Who receives your data
| Provider | Role | Country |
|---|---|---|
| Stripe Payments Europe, Limited | Payment, tax calculation, invoices and account storage | Ireland (with possible transfers to the United States) |
| Netlify, Inc. | Hosting of the app (including the country of your connection) | United States |
| Resend | Sending account emails, and the weekly recap and offers if you agreed to them | United States |
Transfers outside the European Union and the United Kingdom are covered by the safeguards required by the GDPR and the UK GDPR (EU–US Data Privacy Framework and its UK extension, or the European Commission's standard contractual clauses with the UK addendum, depending on the provider).
How long
- Account: as long as it is active, then deleted 3 years after your last login or your last subscription, or earlier on request.
- Invoices and accounting records: 10 years (legal obligation).
- Proof of your agreement (immediate access, terms): for the duration of the subscription, then 5 years.
- Technical logs: a few weeks at most.
Your rights
You can ask to access your data, correct it, delete it, receive it in a portable format, restrict its processing or object to it, by writing to nbamorningshow@gmail.com. We reply within one month. You can also lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), with the data protection authority of the European country where you live, or, in the United Kingdom, with the ICO (ico.org.uk).
California residents: you have the right to know what personal information we hold about you, to have it deleted or corrected, and not to be discriminated against for exercising these rights. We do not sell or share your personal information, and we do not use sensitive personal information.
Canada and Australia: you can ask to access or correct your personal information, and complain to us at the address above; you can also contact the Office of the Privacy Commissioner of Canada or the Office of the Australian Information Commissioner.
Children
The app is not intended for children under 13, and we do not knowingly collect their data. If you think a child has created an account, write to us and we will delete it.