Privacy Policy

• Account: email address, the role you sign up under (parent, coach, club manager, athlete), and the timestamp and version of the terms you accepted.
• Profile: display name, public username (handle), avatar, and for player profiles: date of birth, gender, country, dominant foot, position, team tier, optional shoe size.
• Family location (parents only): country, optional region and city. Used for surfacing local tournaments and events.
• Parental consent records (for under-16 profiles): the parent's legal name, email, the Stripe payment-intent ID used for adult verification, and the consent version stamped on the record.
• Clips: the video file, generated thumbnail, caption, duration, and hashtags.
• Drills: the raw capture video, calibration data, generated overlay video, and computed performance metrics.
• Social activity: comments, likes, follows, blocks, reports.
• Notifications: the events sent to your bell.
• Usage: aggregated, anonymized pageviews and product events via our analytics provider. Error reports via our error-monitoring provider. Both are gated on your cookie-consent choice.
• Payment-related: our payment processor handles payment processing and the parental-consent verification card hold. We do not store full card numbers on our servers.

• To provide the platform: hosting, video processing, metric computation, the social feed, the notification bell.
• To let coaches and parents linked to a player view that player's clips and metrics.
• To verify parental consent for under-16 players via a temporary card authorization that is immediately released.
• To run platform safety: content moderation (an AI provider is used for text moderation; no video is sent), reports queue, blocking, and manual review.
• To improve the platform via aggregated, anonymized analytics. Raw videos are never used for model training.
• To respond to support requests and send transactional emails (welcome, account-deletion confirmation, consent verification, account-deletion reminder).

We use a small set of cookies and storage entries. Each category appears in the cookie banner on your first visit, and you can change your mind anytime from the Cookie Preferences link in the footer.

• Necessary: the login session cookie and CSRF-protection cookies. The site cannot function without these.
• Analytics: our analytics provider fires anonymized pageviews and named events to help us see which features are used. No personal identifiers, no cross-site tracking. Off until you accept.
• Error reporting: our error-monitoring provider captures crash reports and performance data. Off until you accept.

We do NOT use advertising or behavioral-targeting cookies.

For anyone under 16 we require verified parental consent before any data collection begins. A parent creates and manages the child's profile from their own account.

• The parent provides their legal name and verifies they are an adult via a temporary $0.50 card authorization through Stripe. The card is never charged.
• Profile defaults to private. Making it public requires a separate, explicit parental consent action.
• The parent can at any time: pause the account (instant freeze of data collection), export all data tied to the child (GDPR Article 20), or delete the account.

• Cloud infrastructure providers: authentication, database, file storage, video processing, web hosting.
• Payment processor: parental-consent card-authorization verification (no charge) and any future club billing.
• Email delivery provider: transactional emails (welcome, deletion confirmation, parental-consent verification).
• Error-monitoring provider: crash and performance reports (off until you accept the error-reporting cookie category).
• AI content-moderation provider: text-only moderation of comments, usernames, and report submissions. No videos are sent to this provider.
• Analytics provider: anonymized pageviews and product events (off until you accept the analytics cookie category).
• Coaches and clubs:coaches with an approved membership at a player's club can see that player's metrics and clips. This is the core product.
• Legal: we may disclose data when required by law or to protect against fraud, abuse, or harm.

• Active account data is retained while your account is active.
• When you request account deletion, the account is locked and recoverable for 30 days, then permanently deleted: every Firestore record, every video file in Cloud Storage, every comment you wrote anywhere, and the underlying Firebase Auth user.
• Parental-consent records are retained for as long as the child's account exists, then deleted with the account.
• Aggregated, anonymized analytics with no personal identifiers may be retained longer to improve the service.

• Access the personal data we hold about you (export from settings or contact us).
• Rectify inaccurate data (edit from settings).
• Eraseyour data ("Delete account" in settings, with the 30-day grace).
• Restrictprocessing ("Pause" toggle in settings for parent-managed kids).
• Port your data to another service (data export from settings, GDPR Article 20).
• Object to processing for non-essential purposes (decline the analytics / error-reporting cookies).
• Withdraw consentat any time (cookie banner re-opens from the footer; consent for kids' accounts can be withdrawn by deleting the profile).
• Lodge a complaintwith your local privacy regulator. In Canada: the Office of the Privacy Commissioner. In the EU: your national data protection authority. In the UK: the Information Commissioner's Office.

Most rights can be exercised directly from your settings page. For anything else, email contact@footyskillz.com and we'll respond within 30 days.