Privacy statement

01Controller

Rothy's, Inc., San Francisco, California, US. Contact: privacy@tennissails.com.

02Data we collect

• Your IP address, plus a rough location worked out from it (usually region or city).
• The user-agent string your browser announces, the kind of device, which of our pages you open and the link that brought you.
• Contact-form data, meaning whatever name, address, subject and text you choose to send.
• Your cookie choice, stored in your browser.

03Purposes

• Serving pages and blocking abusive traffic (necessary).
• Analytics: understanding which pages are read, in aggregate, with consent.
• Marketing: recording affiliate referrals and measuring partner links, with consent.
• Answering your messages.

Legal bases under the GDPR are consent, our legitimate interest in running the site, and steps you ask us to take.

04Who receives data

Companies hosting our files or counting traffic under contract with us, and partner or affiliate networks once you follow a tracked link with advertising consent. Hotels you visit through our links apply their own privacy policies. Certain processors handle information in other jurisdictions; in that case we lean on safeguards like the EU standard contractual clauses. Nobody pays us for personal data.

05Retention

Server logs: up to 90 days. Analytics data: up to 26 months. Emails: as long as needed to answer, then up to two years. Cookie choice: until you change or clear it.

06Your rights (GDPR)

Under the GDPR, readers may see the personal data we keep about them, fix mistakes in it, have it removed, pause or challenge our handling of it, and take a machine-readable export elsewhere. Withdrawing consent is possible at any moment, and complaints may be lodged with the data regulator in your country.

07Your rights (CCPA/CPRA)

Residents of California may request disclosure of the kinds of personal information on file, fix or erase it, stop any sale or cross-context behavioural sharing, narrow how sensitive details are used, and expect no penalty for asking. A Global Privacy Control signal is honoured as an opt-out from advertising cookies.

08Minors

Our audience is adult travellers. Information from children under 16 is not sought; should a child have written to us, tell us and the message will be erased.

09Changes

We will update this page when practices change and show the revision month here. Last revised: October 2026.