Skip to main content

Privacy Policy

Last Updated: May 14, 2026

1. Introduction

Referee Studio is committed to protecting your privacy and ensuring transparency about how we collect, use, and process your personal data. This Privacy Policy explains our data practices in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Please read this Privacy Policy carefully. If you do not agree with our practices, you may not use the Platform. Your use of Referee Studio constitutes your acceptance of this Privacy Policy.

2. Data Controller

Data Controller:
Tommaso Tani
The Netherlands
Email: sp@tommasotani.it

3. What Personal Data We Collect

We collect the following categories of personal data:

3.1 Information You Provide Directly

  • Account Registration: Your email address, full name, and account credentials
  • Profile Information: Location (country/region), preferred language, profile picture
  • User-Generated Content: Any rules notes, annotations, or content you create within the Platform

3.2 Information Collected Automatically

  • Device Information: Device type, operating system, browser type and version
  • Network Information: IP address, internet service provider
  • Usage Data: Pages visited, content accessed, time spent on specific rules or plays, search queries, interaction patterns
  • Cookies and Similar Technologies: Unique identifiers and session data (see Section 10)

4. Why We Collect Your Data (Legal Basis)

Under GDPR, we process your personal data based on the following legal grounds:

4.1 Performance of Contract (Article 6(1)(b))

We process your data to:

  • Create and maintain your account
  • Provide access to Referee Studio's features and content
  • Deliver the services you have requested
  • Respond to your inquiries and support requests

4.2 Legitimate Interest (Article 6(1)(f))

We process your data for the following legitimate interests:

  • Platform Improvement: Understanding how users interact with Referee Studio to improve functionality, user experience, and content
  • Security and Fraud Prevention: Protecting against unauthorized access, abuse, and violations of our Terms of Use
  • Service Analytics: Analyzing usage patterns to optimize performance and identify technical issues
  • Compliance and Legal Obligations: Maintaining records for legal and regulatory compliance

5. How We Use Your Data

5.1 Service Delivery

  • Creating and managing your account
  • Providing access to rules, analysis tools, and educational content
  • Storing your preferences, language selection, and account settings
  • Sending you service-related communications (account notifications, security alerts, policy updates)

5.2 Analytics and Improvement

  • Analyzing usage patterns to understand which features and content are most valuable
  • Identifying and fixing technical issues or bugs
  • Optimizing Platform performance and user experience
  • Conducting research to improve our services

5.3 Security and Compliance

  • Detecting and preventing fraud, abuse, or violation of our Terms of Use
  • Protecting the security and integrity of the Platform
  • Complying with legal obligations and law enforcement requests
  • Maintaining audit trails and system logs

5.4 Marketing and Communication (if applicable)

  • We do not send marketing emails without your prior consent
  • Service communications and policy updates are sent based on contractual necessity
  • You may opt out of non-essential communications at any time

6. Google Analytics

6.1 What Data Google Analytics Collects

Referee Studio uses Google Analytics to track and analyze how users interact with the Platform. Google Analytics collects:

  • Pageviews and user journey data
  • Device type, browser, and operating system
  • Geographic location (country/region level)
  • Traffic sources
  • User interactions with content

6.2 Data Processing

Google Analytics is a data processor on our behalf. Google Analytics data is stored in the United States under Google's standard contractual clauses (SCCs) and adequacy agreements with the EU.

6.3 Your Privacy in Google Analytics

  • Google Analytics uses cookies to identify users (see Section 10 on Cookies)
  • Google does not identify you personally through Analytics data
  • We do not link Google Analytics data to your Referee Studio account
  • Google's use of data is subject to Google's Privacy Policy

6.4 Opting Out

You can opt out of Google Analytics tracking by:

7. Data Sharing and Processing

7.1 Data Processors

We share your personal data with the following data processor on your behalf:

Supabase (Data Processor)
Purpose: Database hosting, authentication, and data storage
Location: Germany (European Union)
Data Processing Agreement: Supabase processes personal data under a Data Processing Agreement (DPA) in compliance with GDPR
Data Processed: Email, name, location, account preferences, usage logs
Supabase's Privacy Policy: https://supabase.com/privacy

7.2 Third-Party Video Hosting (Not a Processor)

Videos linked through Referee Studio are hosted on third-party platforms (primarily YouTube). These platforms operate independently and are not our data processors:

  • Your interaction with third-party video platforms is governed by their privacy policies
  • We do not share your personal data with these platforms
  • Your IP address may be visible to the video host when you access content

7.3 Law Enforcement and Legal Obligations

We may disclose your personal data if required by:

  • Applicable law or legal process
  • Court order or government request
  • Protection of our legal rights or safety
  • Prevention of fraud or security threats

7.4 Data Sharing Restrictions

We do not sell, rent, lease, or otherwise transfer your personal data for commercial purposes. We do not share your data with any third parties except where necessary for the operations described above.

8. Data Retention

8.1 Account Data

  • Active Accounts: Personal data is retained for as long as your account is active
  • Deleted Accounts: Upon your request to delete your account, all personal data (email, name, location, preferences) is permanently deleted within 30 days

8.2 Analytics Data

  • Google Analytics: Data is retained according to Google's retention settings (default: 26 months)
  • Server Logs: Technical logs (IP addresses, error traces) are retained for 30 days for security and troubleshooting purposes

8.3 Legal or Regulatory Retention

If we are required by law to retain personal data (e.g., tax law, fraud investigation), we will retain only the minimum data necessary for the period required by law.

9. Your Data Protection Rights (GDPR Articles 15-22)

Under GDPR, you have the following rights:

9.1 Right of Access (Article 15)

You have the right to request a copy of all personal data we hold about you. We will provide this information in a structured, commonly-used, machine-readable format within 30 days.

9.2 Right to Rectification (Article 16)

You have the right to correct inaccurate or incomplete personal data. You can update your profile information directly in your account settings, or contact us for assistance.

9.3 Right to Erasure (Article 17)

You have the right to request deletion of your personal data in certain circumstances, including:

  • When data is no longer necessary for its original purpose
  • When you withdraw consent (if consent was the legal basis)
  • When you object to processing and there is no overriding legitimate interest
  • When data has been unlawfully processed

Important: Deletion of your account will result in permanent removal of all personal data associated with that account. This action cannot be undone.

9.4 Right to Restrict Processing (Article 18)

You have the right to restrict how we process your personal data in certain situations, such as when you dispute the accuracy of data or when you object to processing.

9.5 Right to Data Portability (Article 20)

You have the right to receive your personal data in a structured, commonly-used, machine-readable format and to request that we transmit that data to another data controller.

9.6 Right to Object (Article 21)

You have the right to object to processing based on legitimate interest, including:

  • Analytics: You can opt out of Google Analytics tracking (see Section 6.4)
  • Service Improvements: You may request that we not use your data for analytics purposes (though this may limit our ability to improve the service)

9.7 Rights Related to Automated Decision-Making (Article 22)

Referee Studio does not use automated decision-making or profiling to make decisions that have legal or similarly significant effects on you. You have no automated decisions to object to.

9.8 Exercising Your Rights

To exercise any of these rights, please contact us at:

Email: sp@tommasotani.it
Subject Line: "[Your Right] Request - Referee Studio"

Include:

  • Your full name and email address associated with your account
  • A clear description of your request
  • Proof of identity (for security purposes)

We will respond to your request within 30 days. If your request is complex or if we receive multiple requests, we may extend this timeline by an additional 60 days (we will notify you of any extension).

10. Cookies and Similar Technologies

10.1 What Are Cookies?

Cookies are small text files stored on your device that allow us and third parties to recognize you and remember your preferences. We use cookies for:

  • Authentication: Keeping you logged in to your account
  • Functionality: Remembering your language preference and account settings
  • Security: Protecting against fraud and unauthorized access

10.2 Types of Cookies We Use

  • Essential Cookies: Authentication, account management, security (session-based or up to 90 days)
  • Functional Cookies: Remembering language, theme, and user preferences (up to 1 year)

10.3 Managing Cookies

You can manage cookies through your browser settings:

Browser Controls

You can also control cookies through your browser settings:

  • Most browsers allow you to refuse cookies or alert you when cookies are being sent
  • Disabling cookies may affect your ability to use certain features of Referee Studio
  • First-party cookies (from Referee Studio) can be deleted by clearing your browser cache

Browser Controls by Browser:

  • Chrome: Settings > Privacy and Security > Cookies and other site data
  • Firefox: Preferences > Privacy & Security > Cookies and Site Data
  • Safari: Preferences > Privacy > Manage Website Data
  • Edge: Settings > Privacy and Security > Clear browsing data

11. Data Security

11.1 Security Measures

We implement industry-standard technical and organizational measures to protect your personal data from unauthorized access, alteration, disclosure, or destruction.

11.2 Limitation of Security

While we strive to protect your personal data using reasonable security measures, no system is completely secure. We cannot guarantee absolute security against all risks, including:

  • Sophisticated cyberattacks or zero-day exploits
  • Unauthorized access due to compromised credentials
  • Physical theft or destruction of infrastructure

You are responsible for maintaining the confidentiality of your account credentials.

12. International Data Transfers

12.1 Our Location Policy

Referee Studio is operated from the Netherlands. All personal data is stored within the European Union to ensure compliance with GDPR and to limit international transfers.

12.2 No Transfer Outside the EU/EEA

We do not intentionally transfer your personal data outside the European Economic Area (EU/EEA). However, some third-party services we use (such as Google Analytics) may process data in the United States under:

  • Standard Contractual Clauses (SCCs): Legal frameworks approved by the European Commission
  • Adequacy Decisions: Where applicable
  • Your Consent: Implied by your use of the Platform

For information about how Google processes data transferred to the US, see Google's Privacy Policy and Google's International Data Transfer.

13. Changes to This Privacy Policy

13.1 Updates and Modifications

We may update this Privacy Policy at any time to reflect changes in our practices, technology, legal requirements, or other factors. We will post the updated Privacy Policy on this page with an updated "Last Updated" date.

13.2 Material Changes

If we make material changes to how we process your personal data, we will notify you either by:

  • Email to the address associated with your account
  • In-app notification
  • Prominent notice on our website

13.3 Your Consent to Changes

Your continued use of Referee Studio following the posting of changes constitutes your acceptance of the updated Privacy Policy. If you do not agree with changes, you may request deletion of your account.

14. Contact Information

14.1 Data Subject Inquiries

For questions about this Privacy Policy, to exercise your data protection rights, or to report privacy concerns, please contact:

Email: sp@tommasotani.it
Subject Line: "Privacy Inquiry - Referee Studio"

14.2 Supervisory Authority

You have the right to lodge a complaint with the relevant data protection authority in your country. In the Netherlands, this is:

Autoriteit Persoonsgegevens (Dutch Data Protection Authority)
Website: https://autoriteitpersoonsgegevens.nl
Email: info@autoriteitpersoonsgegevens.nl

15. Additional Information

15.1 Relationship to Terms of Use

This Privacy Policy is separate from our Terms of Use. The Terms of Use govern your use of Referee Studio, while this Privacy Policy governs how we handle your personal data. Both documents apply to your use of the Platform.

15.2 Acknowledgment

By using Referee Studio, you acknowledge that you have read and understood this Privacy Policy and consent to our collection and processing of your personal data as described herein.