PRIVACY

DataDrift (datadrift.com.au) is responsible for the information on these sites. Contact us at privacy@lightningrod.com.au.

• Your account: your name, email address and, if you set one, your password. Passwords are stored hashed, so nobody can read them.
• Your details: your postcode (or your country, if you're outside Australia) and, if you choose them, your favourite NTFL club and AFL club.
• Your choices: whether you're counted as a bid supporter, whether you want email updates, and whether you're on the public supporter list, including when you made or changed each choice and the wording you agreed to.
• If you join by email: the email address, postcode and choices you entered, kept until you click the link we send, so we can finish setting you up.
• If you press “Express interest” (for example in merch): that you did, and when, so we can contact you about that one thing if it happens.
• If you join the public supporter list: the name you choose to show, and your suburb if you pick it from those in your postcode.
• Your forum name: the username and display name you choose for the fan forum.
• If you send in a player update: the details and photo you send, how you know the player, and your account, so a moderator can check it.
• If you suggest a link for the library: the link, your note and, if you give it, a contact email.
• Sign-in records: the IP address and browser type used for each signed-in session, to keep accounts secure.
• If you sign in with Google: your name, email and profile photo from your Google account. Google also gives us sign-in tokens, which we store but don't use to access your Google account.
• If you turn on two-factor sign-in or add a passkey: an encrypted code secret and your backup codes, or your passkey's public key. Passkeys never reveal your fingerprint, face or device PIN.
• Emails we send you: a record of the address, subject and time of each email, so we can stay within sending limits and look into delivery problems.
• Abuse limits: a scrambled code made from your IP address (it can't be turned back into the address), so one person can't flood the site. For sign-in emails it's deleted after a day; for library suggestions it's kept with the suggestion.

• To run your account and sign you in to the site, the NTFL hub and the fan forum.
• To show supporter numbers by state and club, including the supporter map.
• To send account emails, like confirming your address, sign-in links, resetting your password, or telling you a sign-in setting changed.
• To send bid news, only if you ticked “Email me bid news and updates.”
• To review player updates and library suggestions before anything is published.

If you ticked “Count me as a supporter of the Territory Lightning bid.”, you're included in totals, such as the number of supporters in each state or for each club, and on the public supporter list as “Anonymous” with your state (or country) and the date you joined. We may show those totals publicly or to football bodies and governments as part of the bid. We never share your name, email or postcode without asking you first for that specific purpose.

Dots on the supporter map sit at the main suburb or town of your postcode (the most populated one), never at your address, and everyone from that postcode shares one dot that shows how many supporters it stands for. Overseas supporters aren't on the map.

If you tick “Add my name to the public supporter list.”, the name you chose, where you're from (your suburb, your state, or nothing, as you choose) and the date you first supported appear on the public list on the Interest Map page. It's off unless you turn it on, and unticking it in My account takes you off straight away. Moderators can hide a name that breaks the rules.

When you use the fan forum, we pass it your email address, your forum username and display name, and your Google profile photo if you have one. Not your real name. What you post on the forum is public.

The NTFL hub publishes players' names, clubs and match statistics from official match records, and player profiles built from details supporters send in. A moderator checks every update before it appears. Dates of birth are kept for checking who's who and are never shown publicly.

If you're a player (or a player's parent or guardian) and want something corrected or removed, including a photo, email privacy@lightningrod.com.au and we'll deal with it promptly.

• Database: Snowflake, in Sydney.
• Website hosting and photos: Vercel, a US company. The site runs in Sydney, but Vercel may process data in the United States.
• Email delivery: Brevo, in France (European Union).
• Fan forum: Discourse software on a DigitalOcean server in Sydney, behind Cloudflare (US), which protects it from attacks.
• Google sign-in: Google (United States), if you choose to use it.
• Maps: map tiles come from CARTO, which sees the address of the device loading them.
• News pictures: some news items show pictures loaded from the publisher's own site, which sees the address of the device loading them.

So some of your information may be handled outside Australia, mainly in the United States and the European Union. We only use providers that protect it under their own privacy commitments.

We use a cookie to keep you signed in, on lightningrod.com.au and, once you've signed in there, on ntfl.au. We don't use advertising cookies. Stadium poll votes are stored against your account, one each, and only the tally is shown.

We count page visits without cookies: the site records which page was viewed, the name of the site that sent you (if any), and a daily visitor code made by scrambling your IP address and browser with that day's date. The code can't be turned back into your IP address, changes every day, and is never linked to your account. Our host's analytics (Vercel) counts visits the same way, without cookies.

We keep your account and choices while your account exists. If you ask us to delete your account, we delete it, your supporter details and your choices, and close your forum account. Some records can remain after that: posts you made on the forum (shown without your name) and the log of emails we sent you. Ask and we'll remove those too, where we can.

• Change your details, or untick any of your choices, any time in My account.
• Unsubscribe from bid emails using the link in any email. You don't need to sign in.
• Ask for a copy of your information, ask us to correct it, or ask us to delete your account, by emailing us.

Questions, requests or complaints: privacy@lightningrod.com.au. We'll reply within 30 days. If you're not happy with how we handle your information, you can contact the Office of the Australian Information Commissioner.

See also our terms of use.