Privacy

Your account. Your email address, your hashed password (we never see it), and the optional profile details you choose to add: name, photo, belt and stripes, academy, training background, and what you want coaches to know about your game.

At sign-up. Your date of birth (see §8). The internet address, the browser and a rough signature of the device you signed up from, so we can tell when one person opens many accounts; only we see them, and they go when the account does. If you sign up with Google, Google gives us your name, email address and profile photo.

How you found us. Your answer to “How did you hear about us?” on the sign-up form, if you give one. If you allowed cookies, also the ad or link that first brought you to the site: the campaign name in its address, the website you came from and the page you landed on, never your browsing anywhere else. We use it only to see which ads and posts bring members, and it goes when the account does.

Your footage and breakdowns. The video files you upload, the external links you paste, and all the analysis, timestamped notes and voiceovers your coach produces from them.

Payments. Stripe handles and stores your card details directly; your card number never reaches us. We keep your Stripe customer id, your purchase history and what each purchase cost, and Stripe’s records of each payment event, which include the card brand, its last four digits and expiry, and a fingerprint Stripe gives the card so we can tell when the same card is used again (for example, to keep a first-purchase discount to one per person).

Gifts. If you buy a gift, we hold your email address, the recipient’s name and email address, and the note you write, whether or not you have an account. The recipient sees your name and your note, never your email address.

Feedback. Your responses to the post-breakdown survey, and any written comment you leave.

Site visits. Which pages people visit, the type of device and browser, and the country or city a visit comes from. We use this only to see how people use the site and to improve it. Section 7 explains how we collect it.

During review, your submission is visible to you, to the coach reviewing it, and to administrators. Once the breakdown is delivered and checked by the team, the video walkthrough goes into the public library, where anyone can watch it. Your name, as it is on your profile, shows on the library page and on the video. Your written report, the summary and the assigned drill stay private to you. A breakdown you chose to keep private at submission is never public. The database enforces all of this, not just the interface.

A few public breakdowns are also posted on the Grappling Breakdown accounts on Instagram, Facebook and YouTube, with the name the video carries. We tag your Instagram, or your gym’s, on those posts only if you asked for that on the submission form. A private breakdown is never posted there. To have a post of yours taken down, write to support@grapplingbreakdown.com.

Survey answers go to us. Only admin staff read individual answers, scores and comments. The coach who reviewed you never sees them: what reaches a coach is an average across enough responses that no single one can be picked out of it, plus anything an administrator decides to pass on, which does not name you unless you have given permission. We never publish scores, and no coach carries a public rating built from them. We quote your comment publicly only if you check the box to allow it, and it is off by default.

We use a small number of services, each for one job:

• Supabase: the database and sign-in.
• Mux: video hosting and playback. We store submission footage with signed playback, so a link cannot be passed around.
• Stripe: payments and coach payouts.
• Resend: transactional email.
• Vercel: hosting, a check that a sign-up comes from a person, and visit counts that use no cookies.
• Cloudflare: the security check on the sign-up and sign-in forms.
• Google: signing in with Google, only if you choose it.
• Google Analytics: visit statistics, only if you accept cookies.
• Daily.co: video calls, for live 1:1 sessions only.

We do not sell your data, and we do not share it with advertisers.

We email you about things that happen to your account: a breakdown delivered, a payment that failed, a refund, the post-breakdown survey. Those are part of the service.

Two kinds of email are yours to turn off, on your account page or with the link at the foot of each one. Reminder emails, when a notice waits on your account for a few days unopened or a survey is still unanswered, start on. Emails about a guest coach you bought from (a new breakdown of theirs, or a nudge to send them your next roll) go only to people who bought from that coach, and every one has a link to stop them. Announcements appear on the bell on the site; we do not email them.

If somebody sends you a gift, we email you about it, and remind you before the day it can no longer be claimed. Each reminder has a link to stop them.

If you join a guest coach's waitlist, we keep the email address you give us, with or without an account, only to tell you about a spot with that coach. Every email about a spot has a link to leave the waitlist. We stop emailing you about it when you leave, and after one last note when your place closes.

We keep delivered breakdowns for as long as your account exists, so every report and voiceover stays available to you. That is a deliberate promise (see §5 of the Terms).

Taking a breakdown out of the public library hides its public page. It does not delete the breakdown, which stays in your account for as long as it exists. The file you uploaded is deleted from Mux 30 days after the breakdown is delivered (later while a report about it is still open), whether or not it is public; the coach’s breakdown video, which carries your footage, stays. If you withdraw a submission before it is reviewed, we delete the video from Mux right away. We keep payment records only as long as tax and accounting laws require.

An account whose email address is never confirmed is removed 7 days after sign-up.

We keep a log of the emails we send for 90 days: when, to which address, the subject line, and whether it arrived. It does not keep what the email said. The one exception is an email that failed to go, which we keep whole for up to 7 days so we can send it again, and then delete.

If you apply to coach, we keep your application and the agreement you signed with it: your name, the address we answer you at, your rank and who promoted you, what you told us about yourself, and the words you signed with the date, the time and your typed name. An application we declined, or one you withdrew, is deleted with your account when you delete it, the signed agreement included. Once an application is accepted, the agreement that coach signed is kept: it is the record of what we both agreed to.

When your account is deleted, we keep only what the law asks us to keep, such as the record of what you paid, and a note that the account was deleted. That note keeps your name and email address for 90 days, in case the deletion was a surprise, and then only the amounts and the payment reference, for 7 years.

You can edit your profile directly on your account page, make a public breakdown private from its own page, or ask for your account to be deleted from your account page. We write to you to confirm it within 7 days, and you can take the request back until then. Anyone who appears in a breakdown can ask us to take it out of the public library at any time, with the Request removal link on its page, with or without an account. A parent or guardian asking for the person in it is never charged. Deleting the account cancels your subscription, permanently removes your breakdowns and your footage, and we take down our posts of them.

Depending on your local privacy laws, you may also have the right to request a copy of your data, to correct it, or to object to how we use it. To exercise any of these rights, write to support@grapplingbreakdown.com and we will do it within 30 days.

A few cookies are always on, because the site needs them to work. They keep you signed in, and they remember that you’ve signed in on this browser before, so next time we show you the sign-in page instead of sign-up.

If you say yes on the cookie notice, we also use Google Analytics to see how many people visit and which pages they read. Its cookies last up to two years. It stays off until you click Accept, and we’ve turned off Google’s ad features, so this data is never used for ads.

When you allow analytics, we also remember which ad or link first brought you to the site, for up to 30 days. If you create an account, we save it with your account (see section 1). If you don’t, it simply goes away.

We also count page views with Vercel Web Analytics. It doesn’t save anything in your browser and doesn’t know who you are.

We don’t use advertising or cross-site tracking cookies. You can change your mind any time with Cookie settings, here or at the bottom of any page.

This service is not intended for children under 13, and we do not knowingly collect personal information from them. An account for a member aged 13 to 15 is opened and held by a parent or guardian, who remains the account holder and is responsible for it. We ask for a date of birth at sign-up and use it only to apply these age rules; coaches do not see it. If you learn that a child under 13 has created an account of their own, tell us and we will remove it and the information with it.

Privacy questions go to support@grapplingbreakdown.com.