tajziyaat

Privacy policy

Last updated

Tajziyaat (tajziyaat.com) is Pakistan cricket's analytics app: fixtures, results, scorecards and PCB news in one place. It is run by LojicLoop Sdn Bhd, a company in Malaysia ("we"). This page explains what we learn about you, why, how long we keep it and how to delete it. Write to [email protected] with any question.

Reading without an account

You can read the public pages without signing in. We set no cookies of our own on them and keep nothing about you. Cloudflare, which delivers and protects the site, counts visits with Cloudflare Web Analytics, which uses no cookies and does not follow you across other sites. It may set a strictly necessary security cookie (such as __cf_bm) to tell people from bots.

Signing in with Google

Google is the only way to sign in. When you choose Continue with Google, Google asks you to share your basic profile with Tajziyaat. We ask only for the openid, email and profile scopes, and from them we receive:

  • your Google account ID, a number that lets us recognise you the next time you sign in;
  • your email address, and whether Google has verified it (we accept only verified addresses);
  • your name.

We never see your Google password. We do not ask for or get your Gmail, contacts, calendar, Drive, photos or any other Google data. Google also hands over a short-lived access token with the sign-in; we discard it unused and keep no Google token of any kind.

What we keep, and why

  • Your account: your Google account ID, email address and name, when the account was made and when you last signed in. We use them to recognise you, to greet you and to show them to you on your Profile. Your email address and name are refreshed from Google each time you sign in.
  • Your sessions: each signed-in browser holds a random code in a cookie. We keep only a one-way fingerprint of that code (a hash), when it was made and when it ends, 30 days later. The fingerprint alone cannot sign anyone in.
  • Logs: our server's logs record the time, the page address and the result of each request, and the account number (never the name, email address or a token) when someone signs in or out or deletes an account. They do not hold your IP address. Older entries are overwritten automatically.
  • Abuse protection: to stop floods of sign-in attempts, the server counts requests from each IP address for one minute, in memory only; the count is never written down.

We use this information only to provide the account you asked for and to keep the service secure. We do not use it for advertising or profiling, and we do not sell, rent or trade it.

Cookies

  • __Host-sid keeps you signed in for 30 days, or until you log out. Scripts on the page cannot read it.
  • __Host-login lives for 10 minutes while you sign in, so we can check that Google's answer belongs to the sign-in you started.

Both are strictly necessary for signing in. There are no advertising or tracking cookies.

Google user data

Tajziyaat's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use it only to sign you in and show it to you, we never use it to serve ads or to train AI models, and no person reads it except where you ask us to, for security, or where the law requires.

Who else handles it

  • Google confirms who you are when you sign in, under Google's privacy policy.
  • Cloudflare carries every request to and from the site and protects it from attacks, which means it handles your IP address and browser details, under Cloudflare's privacy policy.
  • Amazon Web Services hosts our server and its database in Sydney, Australia, where your account is stored.

We share your information with no one else, unless the law requires it.

How long we keep it

Your account stays until you delete it. A session ends after 30 days, when you log out, or when you log out on every device. Deleting your account removes it and all its sessions at once and for good; signing in again later starts a new account.

Your choices and rights

  • See what we hold on your Profile, which shows your name, email address and the date your account was made.
  • Log out, or log out on every device, from your Profile.
  • Delete your account from your Profile at any time.
  • Remove Tajziyaat's access in your Google Account, under third-party connections.
  • Ask us for a copy of your data, or to correct or delete it, at [email protected]. Depending on where you live, laws such as Malaysia's Personal Data Protection Act 2010 or the GDPR give you these rights, and the right to complain to your data protection authority.

Security

The whole site runs over HTTPS. Session cookies are secure and closed to scripts, sessions are stored only as hashes, and every action that changes your account must come from Tajziyaat's own pages.

Children

Tajziyaat is not meant for children under 13, and we do not knowingly keep their data. If you believe a child has an account, write to us and we will delete it.

Changes

If what we keep or how we use it changes, we will update this page first and change its date above.