# Privacy policy | Pilotariak

> Pilotariak privacy policy: no cookies, no analytics, no tracking on pilotariak.com. What Cloudflare hosting and the Azkena MCP server process.

Privacy

# Privacy policy

This page explains what personal data pilotariak.com and the Pilotariak services process. Short version: the website sets no cookies, runs no analytics and asks you for no information.

Last updated: 2026-10-27

## The website

- No cookies, local storage or tracking pixels are used.
- No analytics, advertising or third-party scripts are loaded; fonts are served from pilotariak.com itself.
- There are no forms, accounts or newsletters, so we never ask for your name or email address. 

## Hosting and server logs

The site and APIs run on Cloudflare. To deliver pages and protect against abuse, Cloudflare processes technical request data such as IP address, user agent and requested URL, as described in the [Cloudflare privacy policy](https://www.cloudflare.com/privacypolicy/). We do not combine this data with any other source and only look at aggregated traffic statistics.

## APIs and the MCP server

The Frontis GraphQL API needs no account and stores nothing about callers. The Azkena MCP server uses OAuth: it stores the registered client (name and redirect URLs) and the access and refresh tokens it issues, so it can authenticate later requests. Tokens can be revoked at any time.

Competition data comes from results published by the Basque pelota leagues and contains club names and, for some matches, player lineups.

## Your rights

Under the GDPR you can ask to access, correct or delete personal data that concerns you — for example your name in a published lineup. Use the contact listed in our [security.txt](/.well-known/security.txt); we answer within one month. You can also complain to your data protection authority (in France, the CNIL).

## Changes

We update this page when our practices change. The history of every change is public in the [website repository](https://github.com/Pilotariak/website).