Who is responsible
Punch Volley is responsible for the personal information described in this policy. Postal contact: NOTICE, operator of Punch Volley, 1147 W Ohio St., Chicago, IL 60642, United States. Privacy requests may be sent to privacy@punchvolley.com.
This policy applies to punchvolley.com and the Punch Volley weekly email. It does not govern independent publishers, event operators, retailers or research databases linked from our pages.
Information we process
When you use the site, hosting and security systems may process an IP address, browser and device information, requested URL, referring page, timestamp and diagnostic information. When you subscribe, we process your email address, confirmation status, signup source and subscription or suppression timestamps.
Our delivery network supplies an ISO country code with a page request. We may use that code at request time to select a direct-sold display advertisement for that country; we do not use it to build an advertising profile. If no valid creative is configured for that exact country and placement, no advertisement is shown.
For requests that CloudFront identifies as originating in the United States, Google Analytics 4 may process page views, device and browser information, approximate location and interaction events. The Google tag is not loaded for requests identified as originating outside the United States. Punch Volley disables advertising storage and personalization, does not sell personal information and does not share it for cross-context behavioral advertising.
Purposes and legal bases
We use necessary technical data to deliver, secure and diagnose the site based on our legitimate interests in operating a reliable publication. We use the request country code for geographically relevant, direct-sold contextual advertising without building an advertising profile. Where applicable, you may object by contacting privacy@punchvolley.com.
We send the weekly briefing only after affirmative double opt-in consent. You may withdraw consent at any time through the unsubscribe control in each email.
For United States traffic, limited analytics helps us understand readership and newsletter conversion. We do not load Google Analytics for requests identified as originating outside the United States and do not offer a control that silently enables it there.
Retention
Pending confirmation records expire after 24 hours. Confirmed subscription data is retained while the subscription remains active. Unsubscribe-link records expire within 60 days, and campaign or delivery audit records expire within 180 days. When a reader unsubscribes, we retain only the information reasonably needed to honor and document the suppression request.
Security and diagnostic logs are generally retained for 30 days unless a longer period is required to investigate abuse or meet a legal obligation. Analytics retention is controlled in the applicable Google Analytics property.
Service providers and transfers
Amazon Web Services provides hosting, databases, queues and email delivery. Google provides analytics only for traffic identified as originating in the United States. Direct-sold advertisements use first-party image files and direct links rather than third-party advertising scripts, pixels or cookies.
Necessary hosting and email information may be processed in the United States. Where required for EEA or UK transfers, we rely on applicable contractual safeguards, adequacy decisions or another lawful transfer mechanism.
Your choices and rights
Depending on location, you may request access, correction, deletion, restriction, portability or objection, and may withdraw consent. EEA and UK visitors may also complain to their local supervisory authority. California residents may request to know, correct or delete covered information and may exercise rights without discriminatory treatment.
Punch Volley does not sell or share personal information as those terms are defined by California privacy law. Submit requests to privacy@punchvolley.com; identity verification may be required.
Children and security
The site and newsletter are not directed to children under 13, and we do not knowingly collect their personal information. A parent or guardian who believes a child submitted information should contact us.
We use reasonable administrative and technical safeguards, but no online service can guarantee absolute security. Material policy changes will be posted here with a revised effective date.