Privacy policy
Last updated: 13 November 2026
1. Who we are
Green Window Lab ("the site", "we", "us") is run privately from Sweden. We are responsible (the "data controller") for the personal data described here. It's an unofficial fan tool and isn't affiliated with, endorsed by or connected to 2K, Take-Two Interactive or the NBA.
Questions about this policy: greenwindowlab@gmail.com.
When you browse
- Requests to our server. Like every website, ours sees your IP address when your browser asks it for data. We use it only briefly, against misuse (see below), and don't store it.
- Settings in your browser. A few choices, such as your height group, are saved on your device.
- A login cookie, if you log in. See section 5.
We don't use analytics, advertising or tracking cookies.
If you create an account
Signing up gives you a free account. We store:
- your email address and when you signed up;
- your password, in a scrambled form that can't be turned back into the password;
- your login sessions (see section 5);
- the jumpshots you save in MyShots;
- with a free account, what you revealed in the last 24 hours, to count your free reveals.
If you become a member
Memberships are sold through Link, the checkout of our payment provider Stripe, which is the seller of record for your payment. Stripe collects your payment details under its own privacy policy. We receive your name, email address, billing country, plan, its status and your billing history, never your card number.
We also record when you ticked the two boxes at checkout (accepting the terms, and asking for access to start straight away), as proof of your choice.
Protection against misuse
To stop scraping, spam and password guessing, we briefly count requests per IP address, and emails and wrong passwords per account. These counts are deleted within an hour.
If you email us
Your email address and your message.
- To run the site and show you the plot and jumpshot details.
- To protect the site from automated copying and attacks.
- To run your account and membership, take payments and send receipts.
- To send the emails you ask for, such as sign-up and password emails.
- To tell you about changes to your membership, price or these policies.
- To answer your messages.
We don't sell your personal information, and we don't share it for advertising.
4. Legal bases (EU, EEA and UK visitors)
- Contract: running your account and membership.
- Legitimate interests: keeping the site secure, and keeping the record of what you agreed to at checkout, in case a payment is disputed.
- Legal obligation: keeping the records tax law requires.
- Consent: if we ever add analytics or similar tools, we'll ask you first.
5. Cookies and similar technologies
- Login cookie. When you log in, one cookie keeps you logged in for 30 days, or until you log out. It's needed for your account, so it doesn't require your consent.
- Local storage. The choices described in section 2, kept on your device. You can clear them in your browser's settings.
- Our hosting provider Cloudflare may set a security cookie to tell visitors from automated attacks.
- When you pay, you're on Stripe's checkout page (Link), which uses its own cookies under Stripe's policy.
We don't use analytics, advertising or tracking cookies, so there's no cookie banner. If we ever add something that needs your consent, we'll ask first and update this policy.
6. Who we share data with
Only the services that run the site:
- Cloudflare hosts the site and protects it from attacks (privacy policy).
- Stripe (through its checkout, Link) sells the membership, takes payments and handles payment support (privacy policy).
- Resend sends our emails (privacy policy).
We may also share information if the law requires it, or to protect the site, our rights or other people's safety.
7. How long we keep data
- IP addresses: not stored.
- Account data: while your account is open. It's deleted when you close your account (see the Terms of use, section 3).
- Login sessions: 30 days, or until you log out.
- Limit counters: at most an hour.
- The record of the boxes ticked at checkout: as long as the payment records it belongs to.
- Payment records: as long as tax law requires.
- Emails: until your question is answered and we no longer need them.
- Settings in your browser: until you clear them.
8. Your rights
You can ask us to see, correct, export or delete the data we hold about you, to restrict or object to how we use it, or to withdraw your consent. Write to greenwindowlab@gmail.com. We may ask you to confirm who you are first.
You can also complain to a data protection authority: in Sweden the Swedish Authority for Privacy Protection (IMY), or the one where you live.
9. Children
The site isn't aimed at children under 13, and we don't knowingly collect their data. To create an account you must be 18, or have a parent's or guardian's permission (Terms of use, section 3). If you think a child has given us data, write to us and we'll delete it.
10. International transfers
Our providers may process data outside your country, including in the United States. For visitors from the EU, EEA and UK, they use safeguards such as standard contractual clauses.
11. Security
The site uses HTTPS, and we keep what we collect to a minimum. No method is completely secure.
12. Changes to this policy
If this policy changes, we update the date at the top. Important changes are also announced on the site.
Green Window Lab, Sweden, greenwindowlab@gmail.com. See also our Terms of use.