Privacy policy

Who is responsible

Reuse Engineering by Martinez, pending: street and number, 3014 Bern (“JudgeLog”). For any question about your data: privacy@judgelog.app.

Scope

This policy covers the judgelog.app website, the my.judgelog.app app and the platform for organisations and events. It is governed by the Swiss Federal Act on Data Protection (FADP) and, for people in the European Economic Area (EEA), by the General Data Protection Regulation (GDPR).

Shop orders have their own policy: Shop privacy.

When we are controller and when processor

• We are the controller for your account, subscriptions and payments, use of the website and your judging hours record.
• We are a processor for each event’s data (invited judges, heats, logs and athletes): we process it on behalf of the organisation that creates the event and following its instructions. You can exercise your rights over that data with the organisation or with us, and we will pass your request on.

What data we process

• Judges and other users: email address, name, language, sports and role; the events you take part in and in which role; your judging logs (manoeuvres, marks, notes and their time) and the hours calculated from them.
• Organisations: name and type, and the contact details of whoever manages it; the events it creates (name, venue, dates and sport) and the invitations it sends (the invitee’s email and role).
• Athletes: the data the organisation enters or imports for an event (name or bib, jersey colour, category and the logs and scores of their waves or runs). JudgeLog does not ask athletes to create an account.
• Subscribers: plan, period, amounts and payment reference. Card details are handled by Stripe: we neither see nor store them.
• Website visitors: the technical data of any visit (IP address, browser, page requested and time), to serve the website and protect it from abuse.

The app’s practice sheet works without an account: what you log there stays on your device and never reaches us.

Purposes and legal bases

• Providing the service you ask for: your account, the judge sheet, events and your hours record (contract; Art. 6(1)(b) GDPR).
• Processing event data on behalf of the organisation (Art. 28 GDPR).
• Sharing your hours record with the body you choose, only when you decide to (your consent; Art. 6(1)(a) GDPR).
• Sending you news and offers by email, only if you switch it on under Account; you can switch it off at any time (your consent; Art. 6(1)(a) GDPR).
• Billing and bookkeeping (legal obligation; Art. 6(1)(c) GDPR).
• Keeping the service secure, preventing abuse and improving it with technical data (legitimate interest; Art. 6(1)(f) GDPR).

We do not sell data or use it for advertising. We do not make automated decisions that significantly affect you.

What is published

Only what an organisation chooses to make public: for each published event, its name, venue, dates, sport, the organisation and, if it has one, the LiveHeats link. We never publish individual judges’ notes or logs, emails, members or billing data. The website fetches these events through our own intermediate server, which returns only those fields.

Minors

You must be at least 16 to create an account. If an organisation records data about underage athletes, it is responsible for obtaining their parents’ or guardians’ authorisation where required.

Service providers

We work with these providers, which process data only to provide their service to us:

• Supabase: database, sign-in and storage, in the European Union (Frankfurt, Germany).
• Cloudflare: hosting of the website and the app, the events intermediate server, attack protection and email forwarding (Cloudflare, Inc., USA; global network).
• Resend: sending the app’s emails, such as sign-in codes and invitations (Resend, Inc., USA).
• Stripe: payments and subscriptions (Stripe Payments Europe, Ireland, with transfers to the USA).
• Printful: production and shipping of shop orders (facilities inside and outside the European Union).
• Google: the mailbox where we receive the emails you send us (Google, USA).
• Browser speech recognition (Google in Chrome and Android, Apple in Safari and iOS): only if you switch on voice input in the app, after a notice. The audio of what you say while holding the microphone is processed by your browser’s provider and may be processed outside Switzerland and the EU; JudgeLog only receives the recognised text, which becomes manoeuvres on your sheet (your consent; Art. 6(1)(a) GDPR).

Transfers outside Switzerland and the EEA

When a provider processes data in a country without a recognised adequate level of protection, we rely on appropriate safeguards: the European Commission’s standard contractual clauses, recognised by the Federal Data Protection and Information Commissioner (FDPIC), or the Swiss-U.S. and EU-U.S. Data Privacy Framework where the provider is certified.

How long we keep data

• Account: while it exists; once closed, we delete its data within 30 days.
• Event data: up to 12 months after the event ends, unless the organisation asks for earlier deletion.
• Hours record: as long as you have an account.
• Billing: ten years, as required by Swiss accounting law.
• Technical logs: 90 days.

Security

Encryption in transit (HTTPS); access control in the database itself, so each record is visible only to those with permission; passwordless sign-in with one-time codes; and internal access limited to those who need it. If a security breach affected you, we would let you know and report it to the authority where the law requires.

Your rights

You can ask to access your data, correct it, delete it, restrict or object to its processing, receive it in a portable format and withdraw your consent where that is the basis. Write to us at privacy@judgelog.app: we reply within 30 days. You can also delete your account in the app itself, under Account.

You can lodge a complaint with the Federal Data Protection and Information Commissioner (FDPIC) in Switzerland or with the data protection authority of your country in the EEA.

Cookies and storage on your device

We do not use advertising or tracking cookies. The app stores your sheets, settings and session on your device so it works offline, and the shop stores your cart. Cloudflare may use technical cookies to protect the website from abuse.

Changes

If we change this policy, we will publish the new version here with its date and, if the change is significant, let you know in the app or by email.