Privacy policy
Last updated 30 July 2026
This explains what we collect when you use hbms.co, why we collect it, who else sees it, and how to have it removed. It is written to be read, not to be survived.
Two things are still missing and only you can supply them: the registered mailing address for Heartbeat Media Solutions Inc., which anti-spam law requires in both this policy and every marketing email, and a review by a lawyer. Everything below accurately describes what the site actually does, but accuracy is not the same as legal sufficiency.
Who we are
Heartbeat Media Solutions Inc. is the data controller for the information described here. You can reach us at raymond@hbms.co for anything in this policy, including requests to see or delete your data.
Registered address: to be completed.
What we collect
When you create an account
Your name and email address, the page you signed up from, and the page that referred you. If you tick the marketing box we also record the exact wording you agreed to and the moment you agreed, because we have to be able to prove consent rather than simply assert it.
When you play a game in the fan club
Your score, which game it was, and when you played, stored against your account. This is how the leaderboard works.
When you use the site
If, and only if, you accept analytics cookies: standard usage measurement through Google Tag Manager, such as pages viewed and general location. Decline and none of it loads. You can change your mind at any time using the cookie link in the footer.
What we do not collect
We do not ask for payment details, we do not buy data about you from anyone, and we do not track you across other websites.
Why we are allowed to hold it
| What | Why we may hold it |
|---|---|
| Account name and email | To give you the account you asked for. Without it there is nothing to sign in to. |
| Game scores | Same reason. A leaderboard without scores is not a leaderboard. |
| Marketing emails | Your consent, given by ticking the box. You can withdraw it at any time and we stop. |
| Analytics | Your consent, given through the cookie banner. |
| Enquiries you send us | Our legitimate interest in answering you. |
Who else sees it
We use a small number of services to run the site. They process your data on our instructions and are not permitted to use it for their own purposes.
- Netlify hosts the site and receives form submissions.
- Attio and Twenty are the customer records where accounts and scores are stored.
- n8n, on our own infrastructure, routes signups between those systems.
- Google Tag Manager measures site usage, only after you accept.
Some of these operate outside Canada, including in the United States and the European Union, so your data may be processed there. We never sell your data, and we never hand individual records to sponsors. Sponsors receive the size and the shape of an audience segment, never a list of people.
The short version: we sell a described audience and a fun way to reach it. We do not sell you.
How long we keep it
Account details and scores are kept while your account is open, and for up to twelve months after you ask us to close it so we do not accidentally re-add you. Marketing consent records are kept for three years after consent is withdrawn, because anti-spam law requires us to be able to demonstrate that consent existed. Analytics data follows Google Tag Manager's own retention, which is currently fourteen months.
Your rights
Wherever you live, you can ask us to do the following, and we will do it without charge:
- Tell you what we hold about you, and give you a copy.
- Correct anything that is wrong.
- Delete it. Unless we are legally required to keep something, we delete it.
- Stop sending you marketing, immediately and permanently.
- Object to how we are using it, or ask us to restrict that use.
Email raymond@hbms.co and we will respond within thirty days. If you are in the UK or the EU and you are not satisfied with our answer, you may complain to your national data protection authority. In Canada, you may complain to the Office of the Privacy Commissioner.
Marketing emails
We only email you about our services if you ticked the box when you signed up. Every one of those emails identifies us, gives our contact details, and carries a working unsubscribe link. Unsubscribing takes effect immediately, and in any case no later than ten business days, which is the limit set by Canadian anti-spam law.
Messages about your own account, such as a password or a change to this policy, are not marketing and are sent regardless.
Cookies
The site sets no analytics cookies until you accept them. We also use your browser's local storage to remember that you are signed in and what you chose about cookies. That never leaves your device and is not used for tracking.
Children
This site is aimed at people working in sport and media, and is not intended for children under sixteen. We do not knowingly collect their data. If you believe a child has given us information, tell us and we will remove it.
Changes
If we change how we handle your data in a way that affects you, we will update this page and change the date at the top. If the change is significant and you have an account, we will email you.