Privacy Policy

1. Introduction

Naked and Afraid Fan Database ("we", "us", or "the site") is an independent, fan-built reference site available atnakedandafraidfan.com. We respect your privacy and have written this policy to explain, in plain language, what we collect when you visit, how it is used, who else processes it, and the choices you have. By using the site you agree to the practices described here.

The site is operated by Brad Said. You can reach us atbradsaid@gmail.comor through the contact form.

This site is not affiliated with, endorsed by, or sponsored by Discovery Communications or the producers of Naked and Afraid.

2. Information We Collect

2.1 Information you give us

Most visitors do not give us any information at all. The exceptions are:

• When you use the contact form, we receive your name, email address, and message so that we can reply.
• If you are a contributor with an editor or admin account, we store your email address, a hashed password, and the changes you make to records (so we can audit edits).

2.2 Information collected automatically

• Server logs: IP address, browser type, device type, referrer URL, and access times. Used for security, abuse prevention, and performance monitoring. Retained for up to 90 days.
• Site analytics: We use Google Analytics and a small in-house page-view counter to understand which pages are popular and how visitors navigate the site. Analytics data is aggregated and not used to identify individuals.
• Cookies and similar technologies: see the dedicated section below.

3. Cookies and Tracking Technologies

Cookies are small text files stored by your browser. We and our service providers use them for the following purposes:

• Essential cookies (always on): required for the site to function — for example, a session cookie that keeps an admin signed in, or a CSRF token that protects forms from forgery. These cannot be disabled because the site would not work without them.
• Analytics cookies (optional): Google Analytics (g.gtm cookies, _ga, _gid, _gat) collect aggregated usage statistics so we can improve the site. You can decline these.
• Advertising cookies (optional): Google AdSense and its partners may set cookies to deliver ads, measure ad performance, and (where you have consented) to personalize ads based on your prior browsing on this and other sites. Common cookies includeIDE,DSID,__gads, and__gpi. You can decline these.

For visitors in the European Economic Area, the United Kingdom, Switzerland, and California, we display a consent banner (powered byGoogle's Funding Choices, Google's IAB-TCF-compliant consent management platform) the first time you visit. The banner lets you accept all cookies, reject non-essential cookies, or manage individual categories. Your choice is stored in a cookie and respected on subsequent visits. You can change your choice any time by clickingManage privacy preferencesin the site footer.

You can also opt out of personalized advertising directly with Google atadssettings.google.com, and from broader online advertising atyouradchoices.com(US) oryouronlinechoices.eu(EU). All major browsers also let you block or delete cookies in their settings.

4. Advertising

This site displays advertising fromGoogle AdSense. Google and its partners use cookies and similar technologies (as described above) to serve ads based on your visits to this site and other sites on the internet. If you have not consented to personalized advertising, ads will still be served but will be contextual rather than personalized.

We may also include affiliate links (for example, to products on Amazon.com through theAmazon Associatesprogram). When you click an affiliate link and complete a purchase, we may earn a commission at no extra cost to you. Affiliate links do not change the content or recommendations on the site. As an Amazon Associate we earn from qualifying purchases.

5. How We Use Information

We use the limited information we collect to:

• Operate and maintain the site, including authenticating contributors and recording audit trails of edits.
• Respond to messages sent through the contact form.
• Understand which pages and features are useful (aggregated analytics).
• Serve advertising as described in Section 4.
• Detect, prevent, and respond to abuse, fraud, or security incidents.
• Comply with applicable laws.

6. Who We Share Information With

We do not sell personal information. We share limited data only with the following categories of service providers, who act on our behalf and are bound to confidentiality:

• Hosting: Heroku (Salesforce) — application hosting, request logs.
• File storage: Amazon Web Services S3 — images uploaded for the site.
• Email delivery: Gmail SMTP — sending password resets and contact-form replies.
• Analytics: Google Analytics — aggregated traffic statistics.
• Advertising: Google AdSense and its certified partners — ad serving, measurement, and (with consent) personalization.
• Consent management: Google Funding Choices — recording your cookie preferences.

We may also disclose information if required by law, legal process, or to protect the rights, property, or safety of users or the public. In the unlikely event of a business transfer (merger, acquisition, or asset sale), data may transfer to the new operator under this same policy.

7. Data Retention

• Server logs: up to 90 days, then deleted.
• Page-view records (aggregated, non-identifying): indefinitely.
• Contributor accounts and edit history: retained while the account is active; deleted within 30 days of an account closure request.
• Contact form submissions: retained for up to 12 months for reference, then deleted unless an ongoing conversation requires longer retention.

8. Your Rights and Choices

Depending on where you live, you have some or all of the following rights:

• Access: ask what information we hold about you.
• Correction: ask us to fix inaccurate information.
• Deletion: ask us to delete your information, subject to legal retention requirements.
• Restriction or objection: limit how we use your information, or object to specific uses.
• Portability: request a copy of your information in a portable format.
• Withdraw consent: change or withdraw your cookie consent at any time using theManage privacy preferenceslink in the footer.

California residents have additional rights under the CCPA / CPRA, including the right to know what categories of personal information we collect, the right to delete it, and the right to opt out of "sale" or "sharing" of personal information for cross-context behavioral advertising. We do not sell personal information for money, but the use of advertising cookies may qualify as "sharing" under California law; you can opt out at any time through the consent banner.

To exercise any of these rights, emailbradsaid@gmail.com. We will respond within 30 days.

9. Children

This site is not directed at children under 13, and we do not knowingly collect information from children under 13. If you believe a child has provided us with information, contact us and we will delete it.

10. International Transfers

The site is hosted in the United States. If you access it from outside the US, your information will be transferred to and processed in the US, which may have different data-protection laws than your country. Where required, we rely on Standard Contractual Clauses or equivalent safeguards offered by our service providers.

11. Security

We use reasonable technical and organizational measures to protect the information we hold, including HTTPS everywhere, hashed passwords (bcrypt), and least-privilege access to administrative tools. No system is perfectly secure, and we cannot guarantee absolute security.

12. Third-Party Links

The site links to external pages such as Amazon product listings, survivors' personal sites, podcasts, and books. We are not responsible for the privacy practices of those third parties. Please review their policies separately.

13. Changes to This Policy

We may update this policy from time to time. Significant changes will be reflected in the "Last updated" date at the top of the page and, where appropriate, announced through the consent banner. Continued use of the site after a change indicates acceptance of the updated policy.

14. Contact

For privacy questions or to exercise any of the rights described above, emailbradsaid@gmail.com.