Privacy
Last updated 24 August 2026.
BattleFits is run from Italy, so the GDPR applies. This page is written to be read, not to be survived.
What we collect, and why
- Your Google account
- Posting a result needs an account, and accounts come from signing in with Google. We ask Google for three things — your name, your email address and your profile picture — and nothing more. Signing in tells Google you use this site; if that bothers you, you can read every board without an account. We never sell your email and we never pass it to a sponsor.
- Your username, display name, profile picture and video link
- These appear publicly on the leaderboard — that is the whole point of submitting. They come from the public post you linked, or from what you typed in. We keep a copy of the profile picture on our own storage instead of hot-linking it, so that visiting the board doesn't tell the platform who is looking.
- Date of birth, sex and country
- Optional, always. If you leave them blank nothing is shown and nothing is stored. We ask so the board can be filtered. Your date of birth is never published— the board only ever shows an age range, and we keep the date so that range stays right as you get older. It also lets us check the minimum age of 16 for real instead of taking your word for it. We do not ask for your weight, your height, or anything else about your body.
- Your IP address
- Never stored in the clear. We keep a salted hash of it, only to stop one person flooding the form or the report button. It cannot be turned back into your address.
Your video
Normally we store only a link. The video stays on YouTube, TikTok, Instagram or X, under their terms and yours. Delete it there and it disappears from here too — a nightly check removes entries whose video is gone. Video players are click-to-load: nothing is requested from those platforms until you press play.
If instead you upload the file to us, we publish it as an unlisted video on the BattleFits YouTube channel, which means Google hosts it and its own terms apply to it. Ask us and we delete it from the channel; we also delete it ourselves if we reject the entry. Everything else on this page works the same either way.
Analytics
We use DataFast to count visits and understand which pages people reach, in its cookieless mode: it sets nothing in your browser. Visits are counted using a hash of your IP address, browser and our domain, mixed with a value that changes every day — so the same person on two different days isn't linked into one profile. That is also why you don't see a cookie banner here: we don't set any. For the same reason, video players only load when you press play.
Who else sees your data
- · Vercel — hosting
- · Neon — the database
- · Resend — sending our emails
- · DataFast — analytics
- · Google — sign-in, and hosting for videos uploaded to our channel
They process data on our instructions, not for their own purposes. Sponsors get a slot and a click count. They never get your email, and they never get told who clicked.
Getting it removed
Your account page has one button that deletes the account: it takes your entries off the boards, anonymises what is left, and signs you out everywhere. No form to fill, no reason to give, no waiting for us to answer. For anything else, write to privacy@battlefits.com from the address you signed up with.
You can also ask for a copy of what we hold, ask us to correct it, or object to how we use it. Same address. If we get it wrong you can complain to the Garante per la protezione dei dati personali.
How long we keep it
Entries stay while they are on the board. Removed entries keep only a technical record with no personal data attached. Rate-limiting hashes expire within a day. Payment records are kept as long as tax law requires.
Age
You must be 16 or older to submit. If you believe someone younger has an entry here, tell us and we will take it down.