Privacy Policy

ScoutMePlay is operated from Denmark. For all questions about this Privacy Policy or how we handle your personal data, please reach us through our message form.

• Account data — your full name, email address and password (stored hashed; we never see your plain-text password).
• Video data — the football videos you upload, the screenshot of the moment you marked your player, and metadata such as the player's age and position.
• Payment data — when you pay, Stripe processes your card details on their secure servers. We only see the transaction ID, the amount, and a brand/source tag (we never see your full card number).
• Usage data — basic technical information such as your IP address, browser and what pages you load. Used to keep the service running and detect abuse.

• Contract performance (GDPR art. 6(1)(b)) — to deliver the analysis report you purchased.
• Legitimate interest (GDPR art. 6(1)(f)) — to improve the AI scoring engine, prevent fraud, and run our scout review queue.
• Legal obligation (GDPR art. 6(1)(c)) — to retain accounting records for payment transactions (Danish bookkeeping law requires 5 years).
• Consent (GDPR art. 6(1)(a)) — only for optional marketing emails (if you opt in).

• Stripe (payment processor) — processes your card details and stores your transaction history. See stripe.com/privacy.
• Google Gemini (AI provider) — your uploaded video is sent to Google's Gemini API for analysis. Google does not use your video to train their models when accessed via the paid API. See policies.google.com/privacy.
• Hosting infrastructure — our servers run on European-region data centers.

We have data-processing agreements with each of these providers as required by GDPR. Some processing may take place outside the EU/EEA (notably with Google) — we rely on the EU Standard Contractual Clauses for those transfers.

• Reports and uploaded videos: kept while your account is active, or up to 12 months after your last login.
• Payment transaction records: 5 years (Danish bookkeeping requirement).
• Account data: deleted when you ask us to delete your account.

You have the right to:

• Access — get a copy of the personal data we hold about you.
• Rectification — correct inaccurate personal data.
• Erasure ("right to be forgotten") — request that we delete your account and reports.
• Restriction — ask us to pause processing while a dispute is resolved.
• Portability — receive your data in a structured machine-readable format.
• Objection — object to processing based on legitimate interest.
• Withdraw consent — at any time, where consent is the legal basis.

To exercise any of these rights, email scoutmeplay@gmail.com from the email address tied to your account. We respond within 30 days.

We use only the technical cookies strictly necessary to keep you logged in. We do not run third-party advertising cookies, retargeting pixels, or behavioural tracking. If we add analytics in the future, we'll update this policy and ask for your consent first.

ScoutMePlay is intended for players aged 13 and up — but younger players use the service through a parent or guardian account. If you're under 13, please ask a parent to create the account on your behalf. If you believe we hold data for a child under 13 without parental consent, email us and we'll delete it immediately.

Passwords are stored with bcrypt hashing. Payment details never touch our servers — Stripe handles all card processing. All connections use HTTPS / TLS 1.2+.

If you believe we've handled your data unlawfully, you have the right to complain to the Danish Data Protection Agency (Datatilsynet), or your local data-protection authority in the EU/EEA.

We may update this policy from time to time. The "Last updated" date at the top tells you when. Material changes will be communicated by email to all active users.