Privacy Policy

We collect the following categories of data:

• Registration Data: Name, email address, encrypted password.
• Social Sign-In Data: When you sign in with Google or Facebook, we receive the name, email address, and profile picture attached to that account.
• Facility Data: Facility and field name, location, phone number, number of cameras, and capture schedule.
• Enquiry Data: When a facility owner submits the facility registration request form, we collect the facility name, contact name, email address, phone number, city and neighborhood, message, and the plan and field count requested.
• Video Data: Recorded match videos, clipped highlights (Goal, Save, Skill, Highlight).
• Interaction Data: Likes, comments, view counts.
• Technical Data: IP address, browser type, session data.

We use your data for the following purposes:

• To operate and deliver platform services.
• To process and store match recordings and to publish them on the platform's match and clip pages.
• To run capture schedules and link every recording to the field and the time window it belongs to.
• To review facility registration requests and manage facility owner subscriptions.
• To improve user experience and develop new features.
• To send service-related notifications, such as account, password, and subscription emails.
• To comply with legal and regulatory obligations.

This platform exists to publish match footage, so part of what we hold is visible to everyone. Please read this section carefully:

• Match recordings from a participating facility are published on public pages and can be watched by anyone, with or without an account.
• By playing at a participating facility you may appear in these recordings. The facility is responsible for installing the cameras and for informing players that recording is taking place.
• Any registered player can cut a clip from a published match and share it; the clip appears on their profile and in public listings under their name.
• A clip stays public even after the original recording has been deleted or the facility has left the platform, because a clip belongs to the player who created it.
• Your display name is shown beside the clips, likes, and comments you publish.
• Recordings and clips are served from public file links so they can be cached and played back quickly. Such a link is not secret — anyone who has it can open the file directly — and hiding a match on the platform does not invalidate a link already obtained. The file stops being reachable when it is deleted under the retention rule below.
• If you — or a child in your care — appear in a recording or a clip and you want it removed, email us at the address at the end of this page and we will review the request and take it down.

We do not sell your personal data. We share it only with the service providers we need in order to run the platform, and in the cases set out below:

• Cloud storage providers (Cloudflare R2 or an S3-compatible provider), which hold match recordings and clips.
• Our email delivery provider (Resend), which receives your name and email address in order to send you account and service emails.
• Google and Facebook, when you choose to sign in through them. While you are signed out, our pages also load Google's quick sign-in prompt, so Google receives your IP address, your device and browser details and the page you are on, even if you do not use it.
• Google Analytics, which receives the pages you visit and the actions you take on them — such as sharing a clip or signing in — together with your device and browser type and an approximate location derived from your IP address. We use it only to see which parts of the platform are used, so we know what to improve; advertising features are turned off, and we never send it your name, email address or account ID.
• YouTube (Google), which streams the promo video on the About page. Nothing is sent to it until you press play; then it receives your IP address and your device and browser details, under Google's privacy policy.
• These providers operate servers outside the Syrian Arab Republic, so your data may be stored and processed abroad.
• Judicial or governmental authorities when required by a binding legal order.
• In emergency situations to protect the safety of individuals.

We implement strict security measures to protect your data:

• Data is stored on secure servers with SSL/TLS encryption.
• Passwords are hashed using strong algorithms (bcrypt) and are never stored in readable form.
• API access is protected via modern JWT mechanisms, and any page that is not public — such as the facility owner dashboard — requires you to be signed in.
• Recordings are transferred by the facility straight to storage over upload links that expire, so they never pass through an unprotected channel.
• Match recordings are kept for a period set by the facility's plan — currently between 30 and 90 days — and are then deleted automatically. When a facility leaves the platform, its recordings are purged after a further 30 days. Clips created by players are not deleted by this process.

Under applicable regulations, you hold the rights listed below. To exercise any of them, email us at the address at the end of this page; we will respond within 30 days.

• Right of Access: Request a copy of your personal data held by us.
• Right to Rectification: Correct inaccurate or incomplete data.
• Right to Erasure: Request deletion of your account and personal data ('Right to be Forgotten') subject to legal conditions. Removal of footage you appear in is handled as described above.
• Right to Object: Object to processing of your data for certain purposes.
• Right to Data Portability: Receive your data in a machine-readable format.
• Right to Withdraw Consent: Withdraw your consent at any time without retroactive effect.

We set one cookie to remember that you are signed in, and we keep your session token and interface preferences — such as the theme you chose — in your browser's local storage. Both are cleared when you sign out. We also use Google Analytics cookies to count visits and understand how the platform is used; we do not use advertising cookies. You may control or block cookies and site data through your browser settings or a content blocker — blocking the analytics cookies changes nothing about how the platform works, while blocking the sign-in cookie will stop you from staying signed in.