Privacy Policy

Contact inquiries

For service inquiries, feedback, and support, the Contact form collects your email address and message. Vercel processes the request, including IP address and related request metadata used to deliver and protect the service. Resend delivers the message to support@mydeltafolio.com, using the email address you enter as Reply-To after format validation. Fastmail stores the support email and handles the operator’s manual replies. Contact form data is not stored in the Product database or application logs. This does not mean it is never stored: email content, delivery records, infrastructure logs, and backups may be processed and retained by the providers. The form accepts no attachments and sends no automatic reply. Do not include passwords or authentication tokens.

Operator and contact

The operator/controller is Naoya FUKUDA, an individual operator responsible for privacy requests. The operator’s address will be disclosed without delay upon request from the individual concerned, in accordance with applicable law. Contact support@mydeltafolio.com for address inquiries, privacy requests, disclosure requests, or complaints.

Account and authentication

We process your name, email address, email verification state, authentication account records, sessions, session expiry, IP address, User-Agent, and related creation/update timestamps to create, authenticate, and protect your account. Passwords are hashed for storage. We also process a profile image URL if one is registered. Authentication includes verification and password-recovery records and tokens.

Your performances and identity

We process Product Account and Athlete identifiers and names, including your display name, to identify and manage your records. To store, display, edit, and delete performances, we process discipline, date, time of day, round, wind, primary and measured results and units, result status, day title, place, note, and associated ownership and creation/update information.

CSV import

When you use Basic Import, the supported CSV file is uploaded to and processed transiently by Deltafolio for validation and import. Deltafolio does not retain the raw CSV after the request or place it in Product database or object storage. If you confirm a valid import, the resulting canonical Performance, Shoe, Evidence, external video URL, Field Attempt, and related Product records are stored for the existing Product purposes described here. Import introduces no new provider or external processor.

Evidence

We store Evidence identifiers, associations with performances, who attached it and when, and external HTTPS video URLs. Deltafolio currently does not upload or store video files. When you open an external link, the external service’s rules apply.

Cookies and technical information

We use authentication/session cookies and a language-preference cookie to operate the service. The language cookie lasts about one year; the normal authentication cookie has a default seven-day lifetime and may be renewed. We store the accepted legal revision and acceptance time on your Account, separately from your optional YouTube purpose version, allow/deny choice, choice time and expiry. Your optional choice is valid for up to 180 days. Expiry disables optional content; it does not automatically delete the Account record. We keep the latest legal acceptance and optional choice for your Account, replacing prior values when they change, until the Account is deleted. We do not keep a complete change history. Acceptance survives signing in again and other devices for this Account until a substantive document revision; another Account does not inherit it. Optional permission additionally needs a signed HttpOnly first-party choice cookie scoped to this browser and Account; an Account allow does not authorize another browser or device. The cookie has the same maximum expiry and survives ordinary re-sign-in on this browser. Missing or invalid browser receipts keep embeds off. Rejecting or disabling revokes the Account permission and invalidates earlier browser permits; allowing again does not revive those old receipts. These choice cookies remember requested privacy preferences and are separate from essential authentication/language cookies. Missing, expired or old-purpose choices keep embeds off. You can decline or withdraw in External media settings; legal acceptance does not authorize optional storage. These Product records are deleted with your Account. Request information is processed by our hosting infrastructure to deliver and protect the service. Deltafolio does not use its own advertising or analytics cookies; the optional Google/YouTube processing described below is separate.

Optional YouTube content and third-party processing

Only after current legal acceptance and a separate explicit optional YouTube choice in a separate bottom banner or Account settings after legal acceptance does Deltafolio send validated supported video IDs from your Evidence references to Google through the YouTube Data API. The server transiently obtains titles, thumbnail URLs and availability/status metadata, without storing a metadata cache in the database. Opening a performance then automatically loads the standard YouTube player near the visible area for eligible references. Its own poster, title, Play control and branding are provided by YouTube. Opening a page does not start playback; use the native Play control to watch. Player assets, posters, advertisements and third-party identifiers may be requested before Play. We do not guarantee zero video-data transfer before Play. Browser or YouTube restrictions may prevent playback. Google receives the video ID and server request information for the API request. Player requests may disclose your IP address, browser/device and request information, cookies or similar identifiers to Google. The initial iframe request includes the site origin, not the private performance path or query; subsequent requests within the player follow Google/YouTube’s policies. YouTube’s privacy-enhanced player still contacts Google and may serve third-party content, including advertisements. Google’s processing is governed by its own Privacy Policy and YouTube’s terms, separately from our contracted infrastructure providers. Deltafolio does not upload or store the original video. Declining preserves core features and external links. Disabling in External media settings stops future automatic loads and removes mounted players where possible; it does not automatically erase data Google already received. A substantive legal revision requires legal reacceptance once, independently of the optional choice. A changed optional purpose version or an expired choice requires a new optional choice. Withdrawal in another tab/device takes effect on focus or on the next periodic check (about one minute), subject to sleep, network and timer delays; a saving failure needs retry and may leave an earlier server choice valid. Opening an external link independently contacts that external service under its rules.

Google Privacy Policy

YouTube Terms of Service

External service providers

Vercel provides hosting, runtime, and related request infrastructure. Processing may occur in the United States, Singapore, and other operating locations; the current function region requires confirmation. Neon provides PostgreSQL storage for authentication and Product data; the identified Neon project is configured in Singapore, while support and related operations may involve other countries. Resend processes recipient addresses, verification/password-recovery and Contact message content, Contact Reply-To addresses, and delivery information. Resend stores customer data in the United States. Sending regions, including Tokyo, are separate from storage; our current sending region and open/click tracking settings require confirmation. Fastmail handles support emails, attachments, and replies to respond to inquiries. Fastmail is an Australian provider and offers primary mailbox storage in the United States or the European Union, with replicas and backups, logs, and debug systems also in the United States. Our current primary mailbox residency requires confirmation. A configured region does not limit all backup, support, or subprocessor handling to that region.

Overseas handling and safeguards

Personal data is processed by the overseas providers described above. Contact support@mydeltafolio.com for information about applicable contracts, safeguards and relevant foreign legal systems, or to make a privacy request. Where applicable law requires continued safeguards, we will take necessary action if they cannot be ensured, including stopping the relevant provision of personal data.

Security

We use encrypted web connections, authentication, hashed passwords, and account-based access controls for performances and evidence. The operator manages administrative access and privacy-request procedures. Email delivery uses TLS depending on the receiving server’s support; encryption is not guaranteed across all email delivery paths.

Retention and requests

We retain information for operating your account and records, responding to inquiries, and applicable legal obligations. You can delete individual Performances and Evidence in the Product, or delete your whole account from Account after confirming your current password and acknowledging the deletion. Whole-account deletion removes operational authentication and Product account data and cannot be recovered in Deltafolio. You can download your basic Performance History as a CSV file from Account. This basic CSV does not include legal acceptance or optional-choice records; we encourage export before deletion, but the CSV does not restore your whole account. Contact support@mydeltafolio.com for broader privacy requests, access, correction, deletion, or other privacy assistance. Contact and support emails are not automatically erased by account deletion. The operator confirms your identity and the scope and responds manually under applicable law. Do not send passwords or authentication tokens. We do not guarantee instant erasure from all providers. Deleted operational data may remain temporarily in provider restore history, backups, or logs; Provider restore-history, message, log, and backup retention periods differ and require confirmation for the applicable environment.