Privacy

Public browsing and technical information

You can browse public history pages without signing in. Serving pages involves processing your requests, including requested URLs and any search or filter values, your IP address and browser request information. These requests are separate from optional Google Analytics.

The application uses server-side sessions. Its database session storage records session data, last activity, IP address and browser user-agent information, and an account identifier when signed in. Application errors can be recorded in diagnostic logs. The production server’s access logging and log handling still need to be confirmed for this draft.

Optional Google Analytics

We use Google Analytics to understand visits to public pages only if you accept analytics and the site administrator has enabled it. The site does not load its analytics script before acceptance. Rejecting analytics does not prevent normal site use, including access to this page. Authentication and admin pages are excluded from this site’s analytics integration.

Page URLs sent by this site to analytics contain the origin and path, without query strings or fragments. Its page-view events use a fixed page title and an empty page referrer. These measures do not mean Google receives no technical identifiers or personal information.

Google provides the analytics service and processes analytics information. According to its documentation, this includes cookie identifiers, device and browser information, website activity and IP addresses during collection. Google states that Analytics does not log or store IP addresses. Google operates servers worldwide, so information may be processed outside New Zealand or the country where you live.

Read Google’s Analytics data safeguards, GA4 cookie documentation, Privacy Policy and data transfer information.

Your analytics preference

Your accepted or rejected choice is remembered in this browser’s local storage under nzleague.analytics-consent.v1. It applies to this browser, rather than every device you use. If storage is unavailable, the choice applies to the current document. Clearing browser site data removes the remembered choice.

Use Analytics preferences below or in the footer to change your choice at any time. Rejecting after acceptance stops this site’s tracking, attempts to remove accessible Google Analytics cookies and reloads the page if analytics was loaded. This does not erase information already sent to Google.

Cookies and browser storage

• Analytics consent uses local storage as described above. With consent and analytics enabled, Google Analytics may set first-party cookies such as _ga and _ga_<identifier> to distinguish browsers and maintain session information.
• A Laravel session cookie connects requests to server-side session data. The XSRF-TOKEN cookie supports protection against forged requests. These are separate from analytics consent.
• The appearance local storage entry and cookie remember the display theme. The admin interface can use a sidebar_state cookie to remember whether its sidebar is open.
• Signing in with “Remember me” can set an authentication cookie. Account features process names, email addresses, hashed passwords, password reset information and, where configured, two-factor authentication information. Login rate limiting uses the submitted email address and IP address.
• The progressive web app’s service worker caches a static offline fallback document in browser Cache Storage. It does not cache visited public pages or account pages for offline reading.

Historical player information

Player profiles, match appearances and other rugby league records are historical website content. They are distinct from information collected about visitors browsing the site. Viewing a player profile does not create a visitor account for that player or identify you as that player.

Operator and contact

NZLeague is operated by Jason Ross. For questions about this privacy notice or how your personal information is handled, contact privacy@nzleague.co.nz.

Details awaiting review

This notice remains a draft pending review. Hosting and service-provider details, processing locations, production logging, retention and deletion practices, and Google Analytics account settings also need confirmation before the notice is finalised.