Draft — to be reviewed by a lawyer specialized in privacy law before launch. This text is not legal advice. References to statutory sections are marked "to be verified" until confirmed on LégisQuébec. The French version prevails in Québec.
UFStats analyzes ultimate frisbee match videos uploaded by teams and turns them into statistics. This policy explains, in plain language, what information we process, why, with whom, for how long, and how you can exercise your rights. It applies to ufstats.tech and to the app.ufstats.tech application.
Effective date: [date d'entrée en vigueur à remplir].
1. Who is responsible
[Nom légal de l'entreprise à remplir] (Québec enterprise number [NEQ à remplir]), [Adresse postale d'affaires à remplir], Québec, Canada, operates UFStats.
Person in charge of the protection of personal information: [Nom du fondateur à remplir], Founder and Privacy Officer (person in charge of the protection of personal information). Email: confidentialite@ufstats.tech. Mailing address: [Adresse postale d'affaires à remplir], Québec, Canada.
Send any question, request or complaint about your personal information to this person. If you are not satisfied with our answer, you may contact the Commission d'accès à l'information du Québec (cai.gouv.qc.ca).
Teams and organizations. A team's videos, roster and statistics are uploaded by the client organization (club, school, league). That organization decides to film, chooses who is on the roster and, when needed, collects consent from players and parents. UFStats processes this information to provide the service to the organization and under this policy. Requests about this data can be sent to the organization or directly to us; we cooperate with it.
2. What we collect
| Category | Examples | Source |
|---|---|---|
| Account | email, account identifier, creation date, last sign-in, two-factor authentication factor (TOTP secret encrypted at Supabase) | you |
| Organization and team | club or school name, team name, division, level, privacy settings | the organization's administrator |
| Roster | first name or display name, jersey number, declared category for mixed play (only if the team enters it), consent status | the team |
| Videos | uploaded match files: images of players, opponents, officials and sometimes spectators | the team |
| Derived data | positions and trajectories in metres, game events (passes, catches, points), statistics, corrections made by the team | computed by UFStats |
| Billing | plan, subscription status, Stripe customer ID. We never see or store your card number: Stripe processes it. | you, Stripe |
| Security | audit log (who viewed a video, who exported data, settings changes), browser user agent | automatic |
| Technical logs | server HTTP requests with truncated IP address, without cookies or tokens | automatic |
We do not collect players' dates of birth, addresses or phone numbers. We never ask for a minor's contact information.
3. Why we use it
- Provide the service: create your account, analyze videos, show statistics to your team, enable corrections, produce exports.
- Bill the subscription and enforce plan quotas.
- Secure the service: access control, audit log, abuse detection, two-factor authentication for administrators.
- Communicate with you: sign-in links, important notices about the service or your data (no marketing without your consent).
- Improve our analysis models, only if your team consents (section 7).
- Meet legal obligations (tax, responding to requests, incident register).
We do not use your information for other purposes without your consent, except where the law allows it.
4. What we do not do
- No facial recognition. Players are linked to a jersey number and to what the team declares, not to their face.
- No inference of gender, age or origin from images.
- No database of body signatures across matches: appearance features used for tracking are computed for one match, then deleted (see the biometrics note).
- No sale or rental of personal information; no targeted advertising; no advertising or analytics cookies.
- Opponents' individual statistics are visible only to the team that uploaded the match and are never published.
5. Service providers and hosting locations
We rely on providers bound by contract who only access what they need. Some are located outside Québec; before disclosing information to them, we carry out a privacy impact assessment and require adequate protection.
| Provider | Role | Data location |
|---|---|---|
| Supabase | database, authentication | Canada (AWS ca-central-1 region, Montréal); US company |
| Hostinger (virtual private server) | web application, CPU video processing, storage of videos and viewing copies | [Hostinger VPS data centre to be confirmed] |
| Modal | GPU computing (player and disc detection); frames are processed then deleted | United States |
| Stripe | payment and billing | Canada and United States |
| Resend | sign-in emails and notices | United States |
| Google (optional) | sign-in with a Google account, if you choose it | per Google |
The up-to-date list and agreement status are on the "Service providers" page. The Institution plan can keep the database and videos in Canada.
6. How long we keep it
| Data | Retention |
|---|---|
| Original uploaded video | 7 days after analysis (Discovery), 14 days (Tournament pass), 30 days (paid plans), then automatic deletion; paid option to keep it longer |
| Viewing copy of the video | per plan: 30 days (Discovery), 1 year (Tournament pass, Team), 2 years (Pro, Club), per contract (Institution); account without a subscription: no later than 90 days after the subscription ends or the end of the last plan's period |
| Statistics, events, trajectories | as long as the organization's account exists |
| Deleted account | organization data destroyed (if you are its only owner), then backup copies expire within 7 days |
| Audit log | 12 months |
| Server logs | 14 to 30 days |
| Incident register | at least 5 years |
| Billing records | as required by tax law (to be confirmed) |
Details are in the "Retention and destruction policy". At the end of the period, information is destroyed or anonymized.
7. Videos and model training
Improving detection with real matches is central to the product, but it is off by default:
- an owner or coach can turn it on for their team in Settings > Privacy and turn it off at any time (future matches are no longer used; models already trained cannot "forget" a past contribution, but retained images are deleted);
- never images from a team in youth mode or at youth level, or from a roster where a player refused consent: at most, non-identifying derived data (trajectories in metres, events);
- public broadcasts and videos with uncertain rights never enter training.
8. Minors
- Accounts are reserved for adults and young people aged 14 and over. A player under 14 can appear on a roster without an account.
- For a minor under 14, consent is given by the person having parental authority or the tutor (Act respecting the protection of personal information in the private sector, s. 4.1, to be verified). The organization collects it; we give it a bilingual form template and a per-player "consent" field.
- Youth mode (turned on when the organization declares minors): public sharing blocked, profiles visible to the team only, no images used for training, and individual statistics of a player without parental consent are not displayed.
- The most protective settings are on by default.
9. Your rights
Free of charge, you can:
- access your information and get a copy;
- receive your data in a structured format (JSON and CSV, ZIP archive): Settings > Privacy > Export my data;
- have inaccurate information corrected (most of it can be corrected directly in the app);
- withdraw consent (model training, a player's consent);
- have your account deleted: Settings > Privacy; deletion runs after 7 days (you can cancel it until then);
- have your individual player data removed: the player (from their account) or the team can remove the roster entry; individual statistics are then deleted, team statistics remain;
- complain to us, then to the Commission d'accès à l'information.
We answer within 30 days of receiving the request. We may ask you to confirm your identity. Requests sent by email to confidentialite@ufstats.tech are recorded in the same register as in-app requests.
10. Security
Per-team access isolation enforced by the database itself, encryption in transit and at rest, short-lived signed video playback links, two-factor authentication for owners and administrators, audit log, daily backups. No measure is perfect: if a confidentiality incident presents a risk of serious injury, we notify the Commission d'accès à l'information and the people concerned.
11. Cookies
We only use essential cookies: the sign-in session and display language. The light or dark theme is kept in your browser. No advertising or analytics cookies. Details: "Cookies" page.
12. Changes
We publish any change on this page with its date. If an important change affects how your information is used, we will tell you in advance by email or in the app.