How MuayThaiTime handles your data. Short version: we do not sell personal data, your camp plan stays in your browser, analytics cookies need your consent in the EU/EEA, UK and Switzerland, and affiliate links pay for the site.
Who we are
Who looks after your data: MuayThaiTime (muaythaitime.com). For any question or request about your data, email hello@muaythaitime.com.
Last updated:
What we collect and why
- Usage events. When you view a page (profiles, guides, directories, rankings and the home page), share a page, click an outbound or affiliate link, see or click an ad, or use the camp planner, our server records the page path, the referring site, campaign tags (UTM), your country code, the link or ad placement, and time. With your consent (or outside the EU/EEA, UK and Switzerland unless you reject) the event also carries your random visitor ID. Without it, events are stored with no ID.
- Affiliate clicks. Partner links go through our own redirect (for example
/agoda). We log the click as above and add a short random click ID and placement name to the partner link, so we can reconcile commissions. - Camp plan. The planner saves your plan in your browser. When you finish a plan, we store your planning choices (such as destination, dates, trip length and budget level) to power the public enrollment counter and improve the planner. No name, email or payment details.
- Plan by email. If you ask us to email your camp plan, your address and the plan go to Brevo to send that one email. We store only a one-way hash of the address (to stop repeat sends), the destination, trip length, whether you ticked the camp tips box, whether the email went out, and your random visitor ID if you allowed analytics. We do not store the address itself, and we add you to the newsletter only if you tick that box.
- Newsletter. If you subscribe (in the footer, or by ticking the camp tips box when you email your plan), your email goes to Brevo to send the newsletter. From the plan email we also pass your destination, trip length, start date and level, so tips fit your trip.
- Owner accounts. If you claim a gym or fighter profile, we store your login ID, email, the profile you claimed and the details you submit for review.
- Instagram DMs and email. Whatever you send us by Instagram DM or by email.
- Technical data. Our host processes your IP address to serve pages and detect your country. We use it briefly in memory to rate-limit abuse; we do not store IP addresses in our database.
- Fight and gym data. Profiles, records and rankings come from public sources and verified submissions, not from anything you do on the site.
- Fighter profiles and photos.Our fight cards come from public fight posters and the stadiums' own pages. For each fighter we show what those cards show: name, flag, camp, weight and the fights they appeared on, plus a photo taken from the poster. To keep each fighter's fights and photos on the right profile, we compare the faces on new posters with the photos we already have. For that we store a face pattern (a set of numbers made from the photo) next to each photo. We use it only to match fighters on our own site, never to identify anyone elsewhere, and we never sell or share it. Fighters, their camps, and parents of young fighters can ask us to correct a profile, remove a photo (with its face pattern), or remove a profile: email hello@muaythaitime.com or message us on Instagram with the page link.
How we make money
MuayThaiTime is free to use and paid for by affiliate commissions and advertising. Some links are affiliate links: if you book or buy through them, we may earn a commission at no extra cost to you.
- Affiliate links include flight, stay, ticket (Klook, Tiqets), eSIM, insurance and gear partners, mostly through the Travelpayouts network. The footer of every page carries this notice, and pages with booking or ticket buttons add a short note near them.
- Paid image ads are labeled "Ad" and affiliate banners "Sponsored".
- Links a gym or fighter adds to their own profile are labeled as partner links. Those may pay the profile owner, not us.
- Fight records and rankings are calculated from fight data, not from commercial relationships.
Interested in a placement? See advertise with us.
Who we share data with
We do not sell personal data. The one advertising share is the Meta Pixel (below): with your consent, or outside the EU/EEA, UK and Switzerland until you opt out under Privacy choices. We use these service providers:
- Vercel. Hosts the site and runs our server code. Processes your IP address and request data to deliver pages, detect your country and protect the service. Also provides Vercel Web Analytics and Speed Insights: cookieless page-view and performance statistics.
- Supabase. Our database. Stores fight and gym data, the analytics events described above, camp plan submissions, and owner accounts.
- Umami (cloud.umami.is). Cookieless page statistics: page, referring site, browser, device type, screen size, language and country. Umami states it does not use cookies or store IP addresses.
- Google Analytics 4 (Google). Visit and click statistics after your consent (or where consent is not required): pages, referring site, device, approximate location and the events listed in the cookie table, tied to a random ID. IP addresses are not stored. Advertising features and data sharing for ads are off.
- Meta Pixel (Meta Platforms). After your consent (or where consent is not required, until you opt out under Privacy choices): the pages you view and the actions listed in the cookie table, with your IP address, browser details and Meta's cookies, so we can measure and target our ads on Instagram and Facebook. We send no names or email addresses. Meta uses the data under its own policy.
- Travelpayouts and affiliate partners. When you click a partner link (for example flights, stays, tickets, eSIMs, insurance or gear) the partner receives the click, a short random click ID and the placement name, so commissions can be matched. What you do on the partner site is covered by their privacy policy and cookies.
- Brevo. Sends our newsletter and the camp plan emails you ask for. For a plan email it receives your address and the plan in that email (Brevo keeps its own sending logs). Newsletter subscribers are kept until they unsubscribe.
- Auth0 (Okta). Sign-in for gym and fighter owners who claim a profile. Processes your email address and login details.
- Instagram (Meta). Feedback, corrections and profile updates come to us as Instagram DMs. Meta processes the messages you send us under its own policy.
Some of these providers process data outside your country, including outside the EEA and UK (for example in the United States). Where the law requires it, we rely on the safeguards they offer, such as adequacy decisions or the EU Standard Contractual Clauses.
Legal bases (EU/EEA and UK)
- Consent: the visitor ID and campaign cookies, the Travelpayouts Drive script, and the newsletter. You can withdraw consent any time with Privacy choices in the footer, or by unsubscribing.
- Legitimate interests: keeping the site secure and working, rate-limiting abuse, cookieless page statistics, and logging clicks without a visitor ID so we can reconcile partner commissions. You can object by emailing us.
- Contract / your request: owner accounts and profile claims, emailing you the camp plan you asked for, and replying to your messages.
How long we keep data
- Usage and click events: 14 months, then deleted.
- Finished camp plan records: the planning choices stay for the public enrollment counter, but any visitor ID in them is removed after 14 months.
- Plan email requests (hashed address, destination, trip length, opt-in): 14 months, then deleted.
- Newsletter: until you unsubscribe.
- Owner accounts and claims: while the account is active, or until you ask us to delete it.
- Emails and form replies: as long as needed to handle your message.
- Cookies and local storage: see the table above.
Your rights
Depending on where you live (for example under the GDPR, UK GDPR or Swiss law), you can ask for access to your data, a copy of it, correction, deletion, or restriction, and you can object to processing based on legitimate interests. Email hello@muaythaitime.com and tell us what you want. For analytics data, include the visitor ID shown in the cookies section above (if you have one); without it we cannot link events to you. We reply as soon as we can, and within one month at the latest.
You can also complain to your local data protection authority.
Children
Some fight cards include young fighters. Their fights stay on the record, but we don't feature them anywhere. A parent or their camp can ask us to remove a photo or a profile: just email hello@muaythaitime.com.
Changes to this page
We update this page when what we collect or who we work with changes, and change the date at the top. If a change needs your consent again, the cookie banner will ask.