Privacy Policy

This policy explains what Rebirthed LLC, trading as Rebirthed Group (“ViralMMA”, “we”, “us”) collects when you use https://viralmma.com, why we collect it, and what you can do about it. It applies to the website, our email, and any related pages we publish.

1. The short version

• You can read the entire site without an account and without telling us who you are.
• We do not sell or share your personal information, and we do not use it for cross-context behavioural advertising.
• We collect what an account and a comment section need to work, and not much else.
• You can see, correct, export or delete your data. You can delete your account yourself, from your profile.
• Our newsletter is double opt-in and every issue has a one-click unsubscribe that needs no sign-in.
• If you send an anonymous tip, we discard your name, email and phone before storing it — but see section 5, because that is not the same as technical anonymity.

2. Who we are

Rebirthed LLC is the controller of the personal information described here. [Street address], [City], [State] [ZIP], United States. Privacy enquiries: [email protected].

3. What we collect

3.1 Information you give us

What	When	Why we need it
Display name, email address, password	Registration	To create and secure your account. Passwords are stored only as a salted hash — we never see the original.
Date of birth	Registration	To check you meet the minimum age of 13. We store the date and use it for nothing else.
Referrer (who invited you)	Registration, optional	To credit the member who referred you.
Profile details — bio, location, website, pronouns, favourite fighter and division, avatar and banner images	When you add them	To display your public profile. All optional, and your profile can be set private.
Comments, story submissions, poll votes	When you post	To publish them and to moderate the site.
Tips, including any attachment	When you send one	Editorial use. See section 5.
Email address and signup source	Newsletter signup	To send the newsletter, and to record that you confirmed it.
Two-factor secret and recovery codes	If you enable 2FA	To verify your second factor. Both are encrypted at rest.
Linked-account handles and OAuth tokens	If you connect a social account	To display the link on your profile and confirm you control it. Tokens are encrypted at rest.

3.2 Information we collect automatically

• IP address. Recorded against comments, tips and newsletter signups, and used transiently for rate limiting and abuse prevention.
• Request data. Standard server logs — URL requested, timestamp, browser user agent, referring page — kept for security and diagnostics.
• Session data. A session cookie so you stay signed in, and a CSRF token so forms cannot be submitted from elsewhere.
• Aggregate counts. How many times a story is read or a clip is watched. Article reads are counted per day in aggregate and are not linked to your account. Video views are counted once per browser session and are not linked to you.

We do not use third-party analytics, advertising trackers, or cross-site tracking pixels.

3.3 What we deliberately do not collect

We do not ask for payment details, government identifiers, precise location, contacts, or any special-category data (health, biometrics, race, religion, sexual orientation, political opinion, trade-union membership). Please do not send us any of it — including in a tip or a comment.

4. Why we use it, and our legal basis

Purpose	Legal basis (GDPR Art. 6)
Running your account and publishing what you post	Performance of a contract
Sending transactional email — password resets, verification, security and content notifications	Performance of a contract
Sending the newsletter	Consent, which you give by confirming, and may withdraw at any time
Moderating comments and preventing abuse, spam and fraud	Legitimate interests — keeping the site usable and safe
Security, rate limiting and diagnosing faults	Legitimate interests — protecting the service
Journalism, including publishing and archiving what we report	Legitimate interests, and the journalistic exemptions available under applicable law
Meeting legal obligations and responding to lawful requests	Legal obligation

Where we rely on legitimate interests we have considered whether those interests are overridden by your rights, and you may object — see section 11.

5. Tips and source protection

If you send a tip and tick the anonymous option, we discard the name, email address and phone number you entered before the tip is written to our database. They are not stored and hidden from staff; they are not kept at all.

We do not publish a named source’s identity without asking first, and we will resist compelled disclosure so far as the law allows. We cannot promise to defeat a valid court order. Our fuller commitments are in our ethics policy.

6. Cookies and local storage

We use a small number of strictly necessary cookies and no advertising cookies. Because they are strictly necessary, they do not require consent under the ePrivacy rules.

Name	Purpose	Life
Session cookie	Keeps you signed in and remembers form state.	Until you sign out, or 2 hours of inactivity
CSRF token	Stops a form on another site being submitted as you.	Session
Remember-me token	Set only if you ask to stay signed in.	Up to 5 years, or until you sign out

We also use your browser’s local storage for two conveniences that never reach our servers: which two-factor recovery codes you have ticked off as used, and small interface preferences. Clearing your browser data removes them and costs you nothing.

Embedded video players may set their own cookies when you press play — see the next section.

7. Who we share it with

We do not sell your personal information. We share it only as follows:

Service providers

Companies that host our site, send our email, and protect our forms from bots. They act on our instructions, may use the data only to provide the service to us, and are bound by contract.

Anything you publish

Your display name, profile and comments are public by design. A private profile is hidden from other readers but remains visible to you and to our staff.

Legal requests

Where we are legally required to, or where disclosure is necessary to protect our rights, safety, or the safety of others. Where we are permitted to tell you about a request, we will.

Business transfer

If the site is sold or merged, your information may transfer with it. We will give notice, and the acquirer remains bound by this policy until it is properly changed.

8. Third parties on our pages

The site embeds and connects to services we do not control. When you interact with them, they may collect information about you under their own policies, not ours.

• Embedded video. We load YouTube through its privacy-enhanced youtube-nocookie.com domain and Vimeo through its player. They may still set cookies and record a view when you press play.
• Social sign-in. If you connect an account, that provider tells us the profile details you authorise and knows you connected it.
• Bot protection. Our forms are protected by a captcha service, which receives your IP address in order to assess the request.
• Fonts. Typefaces are served by Google Fonts, which receives your IP address as part of the request.
• Licensed sports data. Fighter and event records are imported from a licensed provider. That is a one-way import by our servers and sends nothing about you.

9. How long we keep it

Data	Kept for
Account and profile	Until you delete your account
Published comments and stories	Indefinitely, as part of the published record
Removed comments	Retained internally with the reason and moderator, so a decision stays reviewable
Newsletter subscription	Until you unsubscribe. We keep a suppression record afterwards so a later import cannot resubscribe you
Tips	As long as editorially necessary, then deleted
Server and security logs	Normally no more than 90 days
Backups	Rolling, normally no more than 35 days

Deleting your account removes your profile and uploaded images. Content already published may remain as part of the editorial record — see section 3.4 of the Terms of Service.

10. How we protect it

• The site is served over HTTPS.
• Passwords are stored only as a salted hash and are never recoverable, by us or anyone else.
• Two-factor secrets, recovery codes and OAuth tokens are encrypted at rest.
• Recovery codes are shown only behind a password confirmation, and are never listed on the settings page.
• Forms are protected against cross-site request forgery, and sensitive actions are rate limited.
• Access to production data is limited to staff who need it.

No system is perfectly secure. If we become aware of a breach affecting your personal information we will notify you and the relevant regulator where the law requires it.

11. Your rights

Wherever you live, you may ask us to:

Access

Give you a copy of the personal information we hold about you.

Correct

Fix anything inaccurate. Most of it you can edit yourself in your profile.

Delete

Erase your information. You can delete your account yourself; email us if you want more than that.

Port

Provide your information in a portable, machine-readable format.

Restrict or object

Pause or stop a particular use, including anything we do on the basis of legitimate interests.

Withdraw consent

Stop the newsletter at any time, from the link in any issue. Withdrawing does not affect what we sent before.

Email [email protected]. We reply within 30 days, and will tell you if we need longer. We may need to verify your identity first, and we will not charge you or treat you differently for exercising a right.

Some rights have limits. In particular, rights of erasure and objection are constrained where information is processed for journalism — we are not obliged to unpublish accurate reporting on request. Where we decline, we will say why, and you may complain to a regulator.

12. If you are in the EEA or the UK

You have the rights above under the GDPR and the UK GDPR, and you may lodge a complaint with your national supervisory authority — in the UK, the Information Commissioner’s Office. We would rather you came to us first, but you do not have to.

We do not use automated decision-making or profiling that produces legal or similarly significant effects.

13. If you are in California

Under the CCPA as amended by the CPRA you may request to know, delete and correct the personal information we hold, and to opt out of its sale or sharing.

In the past twelve months we have collected the categories described in section 3: identifiers, customer records, commercial-adjacent information such as your content and preferences, internet activity, and audio/visual information you upload. We collect it from you, automatically, and from any provider you choose to connect, for the purposes in section 4, and disclose it only as described in section 7. We do not use or disclose sensitive personal information for purposes requiring an opt-out right.

We will not discriminate against you for exercising these rights. You may use an authorised agent; we may ask for proof of authorisation. Email [email protected].

We honour the Global Privacy Control signal where your browser sends one. Because we do not sell or share personal information, there is nothing for it to switch off, but we treat it as a valid opt-out.

14. Children

The Service is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has given us information, email [email protected] and we will delete it and close any associated account.

15. International transfers

We operate from the United States, and your information is stored and processed there. If you are outside the United States, using the Service involves transferring your information across borders, including to a country whose data-protection law may differ from your own. Where we transfer personal information out of the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses, together with the UK Addendum where applicable.

16. Changes to this policy

We may update this policy. We will change the “last updated” date above, and for material changes we will give notice on the site or by email before they take effect. If a change requires your consent, we will ask for it.

17. How to reach us

Rebirthed LLC

[Street address]
[City], [State] [ZIP]
United States

Privacy

[email protected]

Everything else

[email protected]