Privacy and video data notice

Controller and contact

Controller identity, address, and a monitored privacy contact must be configured and published before commercial subscriptions or public marketing begin.

Data and purposes

Account email, password hash, verification status, player-profile nicknames, analysis history, uploaded videos, generated reports, technical video metadata, and limited security logs are processed to provide and protect the movement-analysis service. Passwords are stored only as one-way hashes.

Authorized administrators can access a limited account directory for service administration and support. It contains a partially masked email address, registration date, email-verification status, active-account status, and analysis count.

Service delivery and account management are processed because they are necessary to provide the requested service. Abuse prevention and security logging rely on the operator's legitimate interest in protecting users and the platform. Optional model-improvement review and optional Vercel analytics are based on a separate choice and are not required to use the analyzer.

Videos, permission, and retention

Upload only a recording of yourself or a recording for which you have permission and a lawful reason to process the people shown. Team and coach accounts remain responsible for informing players and obtaining any permission required, especially where children are involved.

Uploaded videos and generated analysis files are scheduled for automatic deletion no later than two days after the upload. A user can delete a completed or failed analysis earlier. Account and analysis-history metadata remain until the user deletes the individual analysis or account, subject to narrowly applicable legal obligations.

Result files in private object storage are delivered through short-lived signed links. Anyone who receives a still valid signed link may be able to use it until it expires, so download links should not be shared.

Optional model improvement

A video is not included in administrator model-improvement exports unless the uploader explicitly selects that optional choice. Consent can be withdrawn from the result page without deleting the analysis, or by deleting it. Withdrawal does not affect processing that took place before withdrawal.

Service providers and transfers

Vercel hosts the frontend, Hetzner hosts backend processing and the database, Cloudflare R2 stores temporary private objects, and Resend delivers account emails. Redis is used for the internal analysis queue. These providers may act as processors or subprocessors. Their data-processing terms, subprocessor lists, locations, and safeguards for transfers outside the EEA must be kept under review by the controller.

Analytics preferences

Essential session and security processing is required for login and private results. Vercel Web Analytics and Speed Insights load only after the user allows anonymous analytics. Result identifiers and other URL query parameters are removed before an analytics page-view event is sent.

Your rights

Depending on the legal basis and circumstances, individuals may request access, correction, deletion, restriction, portability, or object to processing. Account holders can already download a JSON account-data copy, download result files, delete analyses, withdraw optional model-improvement consent, and delete their account. Requests concerning a person shown in a coach-uploaded video must also be handled by the controller.

Individuals may lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or another competent EEA supervisory authority. Movement-consistency scores are informational sports feedback and are not used for decisions that produce legal or similarly significant effects.

Security and changes

The service uses HTTPS, private object storage, short-lived download links, access controls, rate limits, password hashing, and automatic file retention. No internet service can promise absolute security. This notice should be updated whenever processing purposes, providers, retention, subscriptions, or model-training practices change.

Notice version: 2026-07-17