Privacy Policy

Who we are

This site is operated for Subculture Jiu-Jitsu, a private jiu-jitsu training group led by Steve Silvers. The members vault is an invite-only area where recordings of our own training sessions are shared with members of the group. Questions about this policy, or requests about your data, go to dan@webfu.com.

[PENDING: the operating legal entity name, its registered business address, and the long-term contact address for privacy requests. dan@webfu.com is the interim developer contact, not an academy address, and no verified public email for the academy exists yet.]

What we collect

• Account data. Your email address and, if you sign in with Google, your name and your Google account identifier. If you sign in with Google, we also store the OAuth tokens Google issues for that sign-in (access token, refresh token, ID token, and the granted scope) so the sign-in can be kept and renewed. If an admin invited you, we store who invited you and when.
• Access records. Each video view and each video download is recorded with your account, the date and time, your IP address, and your browser user agent string. Views are throttled: watching, pausing, and re-watching the same video inside a 30-minute window is recorded once, not once per action, so this is a record of distinct 30-minute viewing windows, not a count of every play or page load. We do not keep a separate log of sign-ins; the only trace of when you last used the vault is a single "last active" timestamp on your account (see below), updated at most once an hour and without an IP address or user agent attached.
• Viewing behavior, in detail. While you watch a video in the vault we record which portions of each video you played and when: the start and end point of every played interval, in seconds, tagged with an ID for that particular play session in your browser. From those intervals we calculate how much of the video you have covered, your total watch time, and how many separate sittings you came back for. We also combine intervals across members into a curve showing which moments of a video are most replayed.
• Last active date. We store the date and time you most recently used the vault, updated at most once an hour. Admins see this next to your name, labeled "Last here."
• Notes you write. Notes are stored with your account, their timestamp in the video, and their visibility setting. Notes are visible to the group by default and are shown to other members alongside the video. A note you mark as private is not shown to other members, though it still sits in the database that admins operate.

The vault carries no third-party analytics, advertising pixels, or advertising cookies. The only cookie set is the one that keeps you signed in.

Who can see this activity

All of the above, including the per-second viewing records, is visible to vault admins, by member and by video. Admins use it to see which training material the group actually uses. It is not sold, is not shared with advertisers, and is not used for advertising.

While a video plays, your own email address is overlaid on the picture. Only you see that overlay in your own player. It is there to discourage sharing of screen recordings.

The videos themselves

Vault videos are recordings of real training sessions and contain footage of identifiable people: instructors, members, and training partners. Access is restricted to invited members. If you appear in a video and want it, or your appearance in it, reviewed or removed, contact us at the address above.

Service providers

We use these processors and infrastructure providers to run the site:

• Google OAuth, for sign-in with Google.
• Gmail SMTP (webfu.ai@gmail.com), for delivery of sign-in links, invite emails, and contact-form mail.
• Cloudflare R2, for private video storage. Videos are served only through short-lived signed links.
• Neon, for database hosting of accounts, notes, and activity records.
• Vercel, for application hosting.

Retention and deletion

Account data is kept while you are a member. Access logs and viewing records are kept so admins can review historical activity. You can ask us to delete your account data and your notes at the contact address above.

[PENDING: no retention period has been decided. Fill in how long access logs, viewing records, and notes are kept after a membership ends, and how long a deletion request takes to honor.] [ATTORNEY REVIEW: retention periods, deletion-request handling, and whether any of this data must be preserved rather than deleted.]

Your choices and rights

You can ask for a copy of the data we hold about you, ask us to correct it, or ask us to delete your account, at the contact address above. Steve is based in California, so California residents are plainly among our members.

[ATTORNEY REVIEW: whether the CCPA applies to an operation of this size, and if so what rights language, request-handling process, and notices are required. We are not asserting a threshold determination here.]

Children

The vault is not directed at children and membership is not offered to anyone under 13.

[PENDING: confirm with Steve whether any person appearing in vault footage was under 18 at the time of filming, and whether any prospective member is under 18.] [ATTORNEY REVIEW if the answer to either is yes.]

Changes to this policy

If this policy changes in a way that matters, members will be told by email at the address on their account before the change takes effect.

Contact

Privacy questions, data requests, and requests about footage you appear in: dan@webfu.com.