Privacy Policy

Who is responsible for your data

The controller of the personal data described in this policy is Tennis Ninja LTD (ЕИК 206673557), registered at Kichevo, Chernomorska Panorama, PI 37099.510.650, which operates NinjaTrack and this website.

You can reach us about anything in this policy at contact@ninjatrack.app or +359 88 733 8601.

What this policy covers

This policy covers the NinjaTrack marketing website only — the pages you are reading now. It does not cover the NinjaTrack application itself, which is a separate service governed by its own terms and privacy notice.

What we collect and why

This website has no accounts, no analytics and no advertising. The only personal data it collects is what you type into one of its forms, plus the minimum technical detail attached to that submission.

Demo request forms. When you submit your email address to start a demo, we record:

• your email address;
• which form you used and which language version of the site you were on, so we can reply in the right language;
• the date and time of the submission;
• the IP address the submission came from and the country your network resolves to, which Cloudflare provides with the request.

Contact form. When you send us a message, we record your name, your email address, the message itself, the language version of the site, the date and time, and the IP address the submission came from.

We use this data to answer you, to set up the demo you asked for, and to keep a record that we received your enquiry. We do not use it to build a profile of you, and we do not sell it or share it for anyone else's marketing.

We keep the IP address and country for one reason: the forms are public and are targeted by automated spam, and that detail is what lets us tell a real enquiry from a bot.

Our legal basis for using it

Under Article 6(1) GDPR we rely on:

• Steps taken at your request before entering into a contract (Art. 6(1)(b)) — when you ask for a demo or a trial, processing your email is what lets us provide it.
• Our legitimate interests (Art. 6(1)(f)) — replying to enquiries sent through the contact form, and protecting the forms against automated abuse. We have weighed these against your interests and consider them proportionate: the data is minimal, you supplied it deliberately, and we use it only to do the thing you asked for.

We do not send marketing email on the basis of a demo request alone. If we later want to send you news or offers, we will ask for your consent first, and you will be able to withdraw it at any time.

Who we share it with

We use two service providers, both acting as processors on our instructions:

• Cloudflare, Inc. — hosts this website, serves it, and runs the form endpoints. Submissions are stored in Cloudflare's key-value storage. Cloudflare also processes the connection data (including IP address) needed to deliver the site and to protect it from attack.
• Resend (Plus Five Five, Inc.) — delivers the notification email that tells us you got in touch. The contents of your submission are in that email.

Beyond that, we disclose personal data only where we are legally required to — for example in response to a lawful request from a public authority.

Transfers outside the EEA

Both providers above are established in the United States, so your data may be processed outside the European Economic Area. Each is engaged under the European Commission's Standard Contractual Clauses, which is the safeguard provided for in Article 46(2)(c) GDPR. You can ask us for a copy of the relevant clauses using the contact details above.

How long we keep it

• Demo requests — up to 24 months from your last contact with us, then deleted.
• Contact form messages — up to 24 months after the enquiry is closed, then deleted.
• Submissions identified as spam — deleted as soon as we have confirmed them as such.

If you ask us to erase your data sooner, we will, unless we are required to keep it for a legal reason (in which case we will tell you what that reason is).

Your rights

Under the GDPR you have the right to:

• ask what personal data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data erased;
• restrict or object to how we use it — including objecting at any time to processing based on our legitimate interests;
• receive the data you gave us in a portable, machine-readable format;
• withdraw consent at any time, where we relied on consent, without affecting anything we did before you withdrew it.

To exercise any of these, email contact@ninjatrack.app. We will respond within one month. There is no charge unless a request is manifestly unfounded or excessive.

If you believe we have handled your data improperly, you can complain to the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, cpdp.bg, or to the supervisory authority in your own country of residence.

Cookies and tracking

This website sets no cookies. It has no analytics, no advertising pixels, no social media trackers and no third-party scripts that follow you between sites. Nothing is stored in your browser, so there is no cookie banner and nothing for you to consent to or turn off.

Embedded video

The homepage shows a promotional video. Until you click play, it is a still image served from this site and nothing is requested from YouTube — no request, no cookie, no data about you leaves the page.

When you click play, the player loads from youtube-nocookie.com, YouTube's privacy-enhanced mode. At that point Google receives your IP address and information about your device, and its own privacy policy applies to that. Choosing not to press play is enough to avoid it entirely.

Security

The site is served over HTTPS only, and form submissions are encrypted in transit. Stored submissions are accessible only to the people who need to act on them. No system is perfectly secure, but the amount of data here is deliberately small — the best protection against a breach is not holding data we do not need.

Children

This website is aimed at coaches, clubs and academies, not at children, and we do not knowingly collect personal data from anyone under 16 through it. If you believe a child has submitted data to us, tell us and we will delete it.

Changes to this policy

If we change how we handle personal data, we will update this page and change the date at the top. Where a change materially affects you, we will do more than update the page — we will tell the people affected directly.