1. Information we collect

• Email address (for sign-in, managing the free trial, and payment)
• Scoring and training records (measurements, scores, dates and times, etc. entered by the User)
• The network (IP) address used to request a free trial, in a form that cannot be turned back into the address (see 2-2)
• Payment information (card numbers and other payment details are collected and managed by Lemon Squeezy; the Operator does not keep them)
• Athletes’ information that an organizer enters or publishes with the competition features (see 2-3)

2. Purposes of use

• Providing the Service, authentication, and account management
• Providing the scoring and analysis features
• Billing and support
• Improving the Service and creating statistics (in a form that does not identify individuals)

2-2. Information handled for the free trial

• When you start the free trial (30 days), we record your email address and the start and end dates of the trial.
• Purposes: managing the trial period, preventing a second trial with the same email address, an email when the trial starts (with your trial key) and a notice 3 days before it ends (one email only; no advertising). If the same email address is entered again, we send the trial key again only to that email address (it is not shown on screen).
• To prevent large numbers of improper requests, we count the trial requests per day from each network, using the IP address converted into a form that cannot be turned back (a hash). We do not store the IP address itself, and this record is deleted after 2 days.
• Retention: your email address is erased 30 days after the trial ends. After that, only an identifier converted into a form that cannot be turned back into the address (a hash) and the trial dates are kept for 1 year after the trial ends to prevent repeat trials, and are then erased.
• On the device used for the trial, information showing this (your email address) is saved in the browser’s storage.
• For users who buy a license, sign-in and cloud backup are handled in the same way as for other users.
• If you live in the EU/EEA: this processing is based on providing the free trial (GDPR Article 6(1)(b)) and on our legitimate interest in preventing improper repeat trials and mass requests (Article 6(1)(f)). Requests for erasure and objections are accepted at the contact below.

2-3. Information handled by the competition features

The Service includes features with which a competition organizer handles athletes’ information. The organizer is the one who handles that information and is responsible for it. The Operator provides the mechanism and handles the information only as far as needed, as described below.

(1) Personal result sheets, personal QR codes and share links

• A personal result sheet printed by the organizer, and the QR code / share link on it, contain that athlete’s name, bib number, class, country, state/region, ranks and scores, measurements, anonymous comparison averages, and the event name, date, venue and organizer name. They contain no other athlete’s name or contact details.
• This information sits inside the link itself. Opening the link does not send it to the Operator’s servers, and the Operator does not store it. The result page (terra-tx-jp.com) shows the content only inside the device that opened it.
• Anyone who has the link can see its content. Hand the sheet to the athlete and leave sharing the link to the athlete.
• Content an athlete imports into their own app is stored on that device (and, if the athlete uses cloud backup, is included in it).

(2) Entry form (registering for a competition)

• What an athlete types into an organizer’s entry form (name, class, country, state/region, affiliation, equipment, and — if the organizer chose to ask — email address and year of birth, plus any fields the organizer added) is encrypted on the athlete’s device before it is stored. The key that decrypts it exists only inside the organizer’s app; the Operator cannot read the content.
• It is stored on Firebase (Google LLC; see 3 below) and is deleted automatically 30 days after the event date. What the organizer has imported into their own app remains on the organizer’s device.
• The Operator does not email athletes who register. Questions about a registration, and requests to correct or delete it, go to that competition’s organizer (the Operator cannot read the content and therefore cannot act on it).
• Persons under 18 cannot register through this form. Please contact the organizer directly with a parent’s or guardian’s consent.
• To prevent abuse, the sending network’s IP address is converted into a form that cannot be turned back (a hash) and used to count submissions over a short period. That record is deleted after 2 days.

(3) Live results page

• For an event where the organizer has switched on live publishing, athletes’ names (in the form the organizer chose: full name, initial and surname, or bib number only), class, country, state/region, ranks and scores, and announcements written by the organizer are shown on a web page.
• The page’s URL is an unguessable string and is not submitted to search engines. Anyone with the URL can view it.
• It is stored on Firebase (Google LLC; see 3 below) and is deleted automatically 7 days after the event date (the organizer can delete it earlier).
• Choosing “follow this athlete” on the page is remembered only inside the viewer’s device and is not sent to the Operator.

(4) For athletes

• Whether your name and results are handled with these features is decided by the competition organizer. If you want a display stopped or corrected, please ask that organizer first. If you cannot reach the organizer, contact the Operator (section 9). What the Operator can delete itself (a live results page, entries on the server) the Operator will delete.
• If you live in the EU/EEA: for athletes’ information handled by the competition features, the competition organizer is the controller and the Operator is the processor.

3. Sharing with and entrusting to third parties

The Operator uses the services of the following companies, and information is handled by them to the extent needed to use those services.

• Netlify, Inc. (hosting of the Service, storage of cloud backup data (Netlify Blobs), and payment and authentication processing (Netlify Functions))
• Resend (sending sign-in links and free-trial emails)
• Lemon Squeezy (payment and tax processing)
• Google LLC (Firebase Hosting / Firestore: hosting of the Service’s information pages, legal pages and result page; storage of entry-form and live-results data)

Except as required by law, we do not provide personal information to any third party other than the above without the User’s consent.

4. Transfer of information outside Japan

Because of the nature of the services above, Users’ information may be handled on servers outside Japan.

5. Security

The Operator takes reasonable security measures to prevent unauthorized access to, loss of, and leakage of personal information.

6. Requests for disclosure, correction and deletion

Users may request disclosure, correction or deletion of their personal information. Please contact support@terra-tx-jp.com. After confirming your identity, we will respond within a reasonable period.

7. Cookies and analytics

The Service uses the browser’s storage features (cookies, local storage, etc.) for authentication and convenience.

8. Changes

This policy may be revised when necessary. The revised content takes effect when it is posted on the Service.

9. Contact

TERRA TX — person in charge: Shintaro Kanda — Email: support@terra-tx-jp.com