What the 11Wickets Editorial Desk collects, why, how long it is kept and how to request removal — explained in plain language, with no legalese.
What we collect
The desk collects three categories of data: (a) server logs (IP address, request URL, user agent) retained for 30 days for security and abuse prevention; (b) cookies required for site operation (preferences, language); (c) messages you send via the contact form, retained until you request removal or for 24 months, whichever is sooner.
Why we collect it
Server logs
Security, abuse prevention, debugging. Retained 30 days.
Cookies
Site operation, language preference. No third-party tracking cookies.
Contact messages
Reading and responding. Retained 24 months or until you request removal.
Third parties
We do not embed third-party trackers, advertising pixels or analytics scripts. If you follow an affiliate link on the site, the destination operator may collect data under its own privacy policy; we do not control that collection.
Your rights
Right to access
You can ask what data we hold on you. We respond within 30 days.
Right to deletion
You can ask us to delete your contact messages. We confirm deletion within 7 days.
Right to correct
You can ask us to correct data we hold on you. We make the correction within 7 days.
How to make a privacy request
Send your request via the contact page. We verify the request, perform the action and confirm in writing. If you are not satisfied with the response, you can escalate to the relevant data-protection authority.
Cookies — what we use and why
The site uses first-party cookies only. A session cookie keeps you logged in if you have an account. A preferences cookie remembers your language and reading-position. We do not use third-party analytics cookies, third-party advertising cookies or cross-site tracking cookies. If you clear cookies, you will lose your preferences; the site will continue to work.
Children’s data
The site is intended for adults 18+. We do not knowingly collect data from children under 18. If you believe a child has provided data to us via the contact form, contact us and we will delete the data within 7 days.
Data retention, by category
Server logs are retained for 30 days for security and debugging; after that they are aggregated or deleted. Cookies expire with the session or with a 30-day preference cookie for language. Contact-form messages are retained for 24 months or until you request deletion, whichever is sooner. We do not retain analytics or advertising data because we do not collect it.
Security measures
The site is served over HTTPS only. The server runs with a strict content-security policy that disallows third-party scripts. Server logs are aggregated after 30 days. Contact messages are stored in an encrypted database. We do not store payment data, PAN, Aadhaar or any financial information; if you send such data via the contact form by mistake, we delete it on receipt and notify you.
Lawful basis for processing
The desk processes reader data on three lawful bases: (1) consent — for contact-form messages and cookies; (2) legitimate interest — for server logs and security; (3) legal obligation — for retention of financial records where applicable. We do not process special-category data; we do not collect data from children under 18; we do not use reader data for automated decision-making.
Cross-border transfers
Reader data is stored on servers in India. We do not transfer reader data across borders. Where a third-party service (e.g. a CDN) operates across borders, we use providers with published data-residency commitments and contracts that limit access to the data.
Contact form data — in detail
When you submit the contact form, we receive the message body, the name and email address you provide, and the timestamp. We retain the message for 24 months or until you request deletion, whichever is sooner. We do not share contact-form messages with third parties; we do not use them for marketing; we do not add you to a mailing list without explicit consent.
Analytics — or the lack of them
The site does not use Google Analytics, Facebook Pixel, or any third-party analytics script. We do not embed third-party trackers. We do not use advertising networks. If you see a third-party tracker on this site, please report it via the contact form; it is a bug.
Changes to this notice
We update this notice when our data practices change. Each update includes a date stamp; the previous version is available on request. If a change is material, we summarise it on the homepage for at least 30 days. Material changes are those that affect what we collect, why we collect it, how long we keep it, or how to request removal.
Your choice not to share
You can choose not to share data with us. The site will continue to work for browsing; you will not be able to send us a contact-form message. If you have already sent a contact-form message and wish to withdraw it, contact us and we will delete it within 7 days.
Your rights, in practice
The three rights below are practical; the desk honours them without question. Access: you ask what data we hold, we reply within 30 days. Deletion: you ask us to delete contact-form messages, we confirm deletion within 7 days. Correction: you ask us to correct data, we make the correction within 7 days. The rights apply to contact-form messages; server logs are deleted on their own schedule and are not individually accessible.
Children and this site
The site is for adults 18+. We do not knowingly collect data from children under 18. If you believe a child has provided data via the contact form, contact us; we will delete the data within 7 days and notify you. The site does not contain content targeted at children; the editorial content is intended for an adult fantasy-cricket audience.
What a good privacy page looks like
A good privacy page has four parts: what data is collected, why it is collected, how long it is kept, and how to request removal. It also names the lawful basis for processing and lists third-party services that may have access to the data. The desk’s privacy page follows this format; if you read a privacy page that does not, treat it as a yellow flag.
Questions readers ask
Do you sell my data?
No. The desk does not sell, rent or trade reader data. Affiliate links do not transfer personal data to the operator unless you complete a transaction.
How long do you keep server logs?
30 days. After that, logs are aggregated or deleted.
Can I opt out of cookies?
Yes — clear cookies in your browser settings. The site will continue to work; you will lose your preferences.
Open the editorial app entry
Verify the current offer in your own account, then play only what you can afford to lose.