The Victors' Desk (“we”, “the Site”) is an independent, fan-run publication covering University of Michigan athletics at victorsdesk.com. It is not affiliated with the University of Michigan. This policy explains what we collect, why, who else sees it, and how to have it removed.
What we collect
If you never sign in, we do not collect anything that identifies you personally. Our analytics providers record anonymous usage data as described below.
If you sign in with Google, Google shares a limited profile with us and we store:
- Your name, as supplied by Google — you can change this at any time in your account settings.
- Your email address.
- Your Google profile picture, unless you upload your own.
- A unique account identifier.
We never receive your Google password, and we cannot access your Gmail, contacts, Drive, or any other Google service.
Content you create — comments, forum threads and replies, articles if you write for us, your bio, and any image you upload — is stored on our behalf and, except for drafts, is public.
If you subscribe to the newsletter, we store the email address you give us and where on the site you signed up. That address is used only to send you the newsletter. Every email includes an unsubscribe link, and you can ask us to delete the address entirely at any time.
Technical data collected automatically includes pages viewed, approximate location at country or region level, device and browser type, and referring site.
Cookies
We use two kinds:
- Essential cookies keep you signed in. Without them the site cannot tell who you are, so they cannot be turned off while you hold an account.
- Analytics cookies from Google Analytics measure how the site is used. You can block these with a browser setting, an extension, or Google’s opt-out add-on. Nothing on the site will break if you do.
Who else handles your data
We do not sell your personal information. We rely on a small number of providers to run the site, and each holds data on our behalf:
- Supabase — database, sign-in, and image storage.
- Vercel — hosting and privacy-preserving traffic analytics, which do not use cookies.
- Google — sign-in and Google Analytics 4.
Advertising
The Site does not currently show advertising. If that changes, this policy will be updated before any ads appear, and it will name the advertising partners and describe the cookies they use to personalise and measure ads.
How long we keep it
Account data is kept while your account exists. Published articles, comments, and forum posts are kept indefinitely as part of the site’s public record, including after an account is deleted, though we will remove your name from them on request. Analytics data is retained according to our providers’ standard periods.
Your choices
- Change your display name, bio, and picture at any time under Account.
- Delete individual comments and forum posts yourself.
- Ask us to delete your account and personal data by emailing jtilley02rio@gmail.com.
- Request a copy of the personal data we hold about you.
- Disconnect the site from your Google account at any time via your Google security settings.
Depending on where you live, you may have additional rights under laws such as the GDPR or CCPA, including access, correction, deletion, and objecting to processing. We apply these requests to everyone regardless of location. Email us and we will respond within 30 days.
Children
This site is not intended for children under 13, and we do not knowingly collect their personal information. If you believe a child under 13 has created an account, email us and we will remove it.
Security
Data is transmitted over HTTPS and access is restricted at the database level, so one member cannot read another member’s private data. No system is perfectly secure, and we cannot guarantee absolute security.
Changes
We may update this policy. The date at the top always reflects the current version, and material changes will be noted on the site.
Contact
Questions, deletion requests, or corrections: jtilley02rio@gmail.com.