Privacy

Last updated 20 October 2026.

BattleFits is run from Italy, so the GDPR applies. This page is written to be read, not to be survived.

What we collect, and why

Your Google account
Posting a result needs an account, and accounts come from signing in with Google. We ask Google for three things (your name, your email address and your profile picture) and nothing more. Signing in tells Google you use this site; if that bothers you, you can read every board without an account. We never sell your email and we never pass it to a sponsor.
Your username, display name, profile picture and video link
These appear publicly on the leaderboard, which is the whole point of submitting. They come from the public post you linked, or from what you typed in. We keep a copy of the profile picture on our own storage instead of hot-linking it, so that visiting the board doesn't tell the platform who is looking.
Date of birth, sex and country
Optional, always. If you leave them blank nothing is shown and nothing is stored. We ask so the board can be filtered. Your date of birth is never published.The board only ever shows an age range, and we keep the date so that range stays right as you get older. It also lets us check the minimum age of 16 for real instead of taking your word for it. We do not ask for your weight, your height, or anything else about your body.
Your IP address
Never stored in the clear. We keep a salted hash of it, only to stop one person flooding the form or the report button. It cannot be turned back into your address.

Your video

Normally we store only a link. The video stays on YouTube, TikTok, Instagram or X, under their terms and yours. Delete it there and it disappears from here too: a nightly check removes entries whose video is gone. Video players are click-to-load: nothing is requested from those platforms until you press play.

If instead you upload the file to us, we host it ourselves on Bunny Stream, a European video host, and it plays from our own player, not from anyone's social account. It isn't listed anywhere except next to your entry. Ask us and we delete it; taking your entry off the board deletes it too, and so does a rejection. Everything else on this page works the same either way.

When you record with the coach in our app, the app also uploads a second copy of the same attempt without the graphics on top, together with technical data about the movement: the measures of your body position that the coach computes to count, frame by frame. We use them only to make the rep counting better, by replaying real attempts against new versions of the counter. They are never shown publicly, they sit in a separate private library on Bunny, only we can open them, and they are deleted after 90 days (sooner if you delete your account). The legal basis is our legitimate interest in improving the service.

When you record with the coach, the app can also make a game version of your attempt: the same footage, recolored, with fighting-game graphics and sounds on top (score bars, combo, K.O.). It is made on your phone, from the copy without graphics, before that copy leaves it. It is uploaded and hosted like your video, it is public on the attempt like your video, and it is deleted with it. You can turn it off in Preferences; attempts already uploaded keep theirs until you delete them.

Reactions and comments

Signed-in athletes can react to an attempt and leave comments picked from a fixed list (no free text). They are public on the attempt: anyone who opens it sees who reacted and who commented, with name and photo. In a private battle only people with the link see them. You can remove your own reaction or comment at any time; on your attempts you can hide a comment and block a person. Deleting your account deletes your reactions and comments too.

When someone reacts or comments on your attempt we keep a notification for you (the bell on the site and in the app), and once a day at 7 pm Italian time we send you one email with what is new, only if there is something. You can turn it off from your account or from the link in the email. If you allow them, push notifications on iPhone go through Apple's push service, which receives a device token and the text of the notification, and you can turn them off in the app or in iOS settings. The legal basis is the service you asked for by signing up.

Analytics

We use DataFast to count visits and understand which pages people reach, in its cookieless mode: it sets nothing in your browser. Visits are counted using a hash of your IP address, browser and our domain, mixed with a value that changes every day, so the same person on two different days isn't linked into one profile. That is also why you don't see a cookie banner here: we don't set any. For the same reason, video players only load when you press play.

Error reports

When something breaks, on the site or in the app, we want to find out before you have to tell us. For that we use Sentry, run by Functional Software Inc., with the data stored in the EU (Frankfurt). An error report holds the technical details of what went wrong (the page or request, the error itself, the browser or app version) and, if you are signed in, your account identifier, your email address and your name, so we can tell whose problem it is and fix it for you. Nothing else from your account, and no recording of your screen. Reports are deleted after 90 days, Sentry's retention period. The legal basis is our legitimate interest in keeping the service working.

What the app does on your phone

When you are signed in, the BattleFits app sends us a short log of technical events: when it opens and closes (and whether the last run ended abnormally), when a screen or a coach session starts and ends, how the upload of an attempt and the making of its game version went, and whether notifications could be set up. Each event carries the app version, the iOS version, the phone model and your account identifier, plus a few technical values (durations, counts, error codes). No free text, no location, no contacts, no video or audio. We use it only to find and fix what goes wrong on real phones. Events are stored on our database and are deleted after 30 days (sooner if you delete your account). The legal basis is our legitimate interest in keeping the service working.

Who else sees your data

They process data on our instructions, not for their own purposes. Sponsors get a slot and a click count. They never get your email, and they never get told who clicked.

Getting it removed

Your account page has one button that deletes the account: it takes your entries off the boards, anonymises what is left, and signs you out everywhere. No form to fill, no reason to give, no waiting for us to answer. For anything else, write to privacy@battlefits.com from the address you signed up with.

You can also ask for a copy of what we hold, ask us to correct it, or object to how we use it. Same address. If we get it wrong you can complain to the Garante per la protezione dei dati personali.

How long we keep it

Entries stay while they are on the board, and attempts below your best stay in your own history. Removed entries keep only a technical record with no personal data attached. The copy of an attempt without graphics and the movement data from the coach are deleted after 90 days. Rate-limiting hashes expire within a day. Error reports are deleted after 90 days. App event logs are deleted after 30 days. Payment records are kept as long as tax law requires.

Age

You must be 16 or older to submit. If you believe someone younger has an entry here, tell us and we will take it down.

See also the terms and the rules.