Privacy Policy

Effective date: September 4, 2026 · Last updated: September 4, 2026

1. Introduction

This Privacy Policy explains how A Cup of Crime (“we”, “us”, “the Site”) collects, uses, discloses and safeguards your information when you visit. It applies to every visitor.

By using the Site, you acknowledge that you have read and understood this policy and agree to the collection and use of information described. If you do not agree, please do not use the Site.

This policy is designed to comply with applicable U.S. federal and state privacy laws — including, where it applies to you, the California Consumer Privacy Act (CCPA), the California Privacy Rights Act (CPRA), the Colorado Privacy Act, the Connecticut Data Privacy Act, the Virginia Consumer Data Protection Act and other state privacy statutes — and with the General Data Protection Regulation (GDPR) for visitors in the European Union.

2. Information the site collects

A Cup of Crime is a reader-supported review site with no accounts, no purchases and no newsletter. It collects far less than most websites, and this section is honest about exactly what it holds.

2.1 Information you provide

There is no account registration and no checkout, so the only information you actively provide is a vote on a review page: a one-to-five-star rating, or a “fair / unfair” verdict, or both.

2.2 Information collected automatically

When you vote, the Site records a one-way hash of your IP address. It is salted and hashed before it is stored (see section 8), never stored as a readable address, and used only to stop one person inflating the tallies and to enforce the per-device daily vote cap.

Your browser also stores small bits of data entirely on your own device when you use the Top 5 tool or vote on a rating — see the Cookie Policy.

3. How the site uses your information

The Site uses the information it holds only for these purposes:

To operate and maintain the Site, including showing accurate vote tallies on reviews.
To understand which pages are most used, in aggregate, so the Site can be improved. Tallies are shown as overall averages and counts; individual votes are not published.
To prevent fraud, abuse and inflated voting, and to keep the Site secure.
To comply with legal obligations and to protect the Site’s rights.

It does not use your information for advertising, profiling or marketing of any kind.

4. How the site shares your information

The Site does not sell, rent or trade your personal information, and it shares information only in the narrow circumstances below:

4.1 Service providers

The Site is hosted by a web hosting provider that maintains the server and database on our behalf. That provider is contractually required to use the data only to host the Site and to keep it secure.

4.2 Legal requirements

The Site may disclose information if required by law, in response to a valid request from a public authority, to comply with a subpoena or court order, or to protect its rights, prevent fraud or ensure safety.

4.3 Business transfers

If the Site were ever sold or merged, the data held on its server (aggregate vote records and hashes) could transfer to the new owner. You would be notified of any such transfer, and your rights in this policy would continue to apply.

5. Cookies and tracking technologies

The Site uses local storage on your own device to remember your votes and your Top 5 list. It loads its display fonts from Google Fonts, which involves a request to Google’s servers. It does not use advertising cookies, analytics cookies, web beacons or pixels, and it does not currently integrate any advertising or social-media tracking.

The Cookie Policy explains this in fuller detail, including how to clear or control this storage in your browser.

6. Your privacy rights

Depending on where you live, you may have the following rights over the personal information the Site holds:

Right to know / access — to ask what personal information the Site holds about you.
Right to delete — to ask that it be removed, subject to legal exceptions.
Right to correct — to ask that inaccurate information be fixed.
Right to data portability — to receive your information in a structured, machine-readable form.
Right to non-discrimination — the Site will not treat you differently for exercising your rights.

Because the Site stores only salted, one-way hashes of IP addresses, it generally cannot identify or retrieve the votes linked to a particular individual — the whole point of hashing is that the address cannot be recovered. If you want no identifiable footprint at all, vote in a private window or clear your browser’s site data afterwards.

If you are in the European Union, you have the right to access, rectify, erase, restrict and object to processing, and to data portability. Contact us below to exercise these.

Do Not Track

The Site does not track you across websites, so it has nothing to change in response to “Do Not Track” signals. You can manage site data through your browser at any time.

How to exercise your rights

To make any request, contact us using the details at the bottom of this page. The Site will respond within the timeframe the law requires — generally 45 days under the CCPA, extendable once more where needed. It never asks you to create an account to make a request.

7. Data retention

Vote records and the hashes that accompany them are kept for as long as the tallies they power are useful — effectively for as long as a review page is live — and then deleted when they are no longer needed. There are no account records, payment details or correspondence databases to retain.

8. Data security

Vote integrity and visitor privacy are protected by design:

IP addresses are salted and hashed (SHA-256) and never stored or echoed in readable form.
The database sits behind a deny rule so it cannot be downloaded or browsed.
The Site is served over HTTPS, encrypting data in transit.
Error output is suppressed so failures cannot leak details.

No method of transmission or storage is 100% secure. If the Site learned of a breach affecting personal information, it would investigate, take reasonable steps, and notify affected users and authorities as the law requires.

9. Children’s privacy

The Site is not directed at children under 13, publishes reviews of television made for adults, and does not knowingly collect personal information from children. If it becomes aware that a child under 13 has submitted personal information, that information will be deleted. See the Children’s Privacy notice for more detail, and parents can contact us using the details below.

10. International visitors

The Site is hosted in the United States. If you visit from outside the United States, your information — in practice, a hashed IP tied to a vote — is processed in the United States. The Site will take reasonable steps to keep that information treated securely and in line with this policy.

11. Changes to this policy

The Site is small and its practices may change as it grows — for example, if comments or an analytics tool are ever added. This policy will be updated to reflect that, with a new “last updated” date at the top. Material changes will be flagged. Reviewing this page from the footer now and then keeps you current; continuing to use the Site after a change means you accept the updated policy.

12. Third-party links

Reviews link out to other websites. The Site is not responsible for the privacy practices of those third-party sites, and their own policies apply once you leave. If you follow an external link, it is worth reading the destination’s policy.

13. Contact us

David O’Connell
A Cup of Crime
Email: admin@acupofcrime.com
Phone: (631) 956 4581