Privacy Policy

1. Controller

The controller responsible for data processing on this website is:

2. Data We Collect

When you create an account or use our Service, we collect the following personal data:

• —Full name
• —Email address
• —Date of birth
• —Nickname (optional, chosen by you)
• —Profile photo / avatar (optional, uploaded by you)
• —Subscription and billing information (processed via Stripe)
• —If you sign in with Google: your Google account name, email address, and profile picture

We do not collect any other personal data unless you contact us directly via email.

3. Purpose of Processing

The data you provide is used exclusively to:

• —To create and manage your account
• —To provide access to the video library and subscription content
• —To process payments and manage your subscription via Stripe
• —To send transactional emails (account confirmation, password reset, subscription updates) via Resend
• —To send marketing communications if you have subscribed to our waitlist via Kit (ConvertKit)
• —To display your profile information (nickname, avatar) within the platform

4. Legal Basis

The legal basis for processing your personal data is your freely given, specific, informed and unambiguous consent pursuant to Art. 6(1)(a) of the General Data Protection Regulation (GDPR).

For the performance of your subscription contract, the legal basis is Art. 6(1)(b) GDPR. For sending transactional emails, the legal basis is Art. 6(1)(b) GDPR (contractual necessity). For marketing communications, the legal basis is Art. 6(1)(a) GDPR (consent).

You may withdraw your consent at any time by clicking the unsubscribe link in any email we send you, or by contacting us at privacy@thefencingroom.com. Withdrawal of consent does not affect the lawfulness of processing carried out prior to withdrawal.

5. Third-Party Service Providers

Kit (ConvertKit)

We use Kit (formerly ConvertKit), operated by ConvertKit, LLC, 750 N San Pedro St, Laramie, WY 82072, USA, to manage our email list and send communications. When you submit the waitlist form, your name and email address are transmitted to and stored on Kit's servers.

Kit may process data on servers located in the United States. Data transfers to the US are safeguarded by Standard Contractual Clauses (SCCs) adopted by the European Commission pursuant to Art. 46(2)(c) GDPR. For more information, see Kit's privacy policy at kit.com/privacy.

Vercel

Our website is hosted by Vercel Inc., 440 N Barranca Ave #4133, Covina, CA 91723, USA. Vercel may process technical data (such as IP addresses and access logs) on servers located in the EU and/or US as part of providing its hosting infrastructure. Standard Contractual Clauses apply for any US transfers. For more information, see vercel.com/legal/privacy-policy.

Supabase

We use Supabase (Supabase Inc., 970 Toa Payoh North, #07-04, Singapore 318992) for authentication, database storage, and file storage (profile photos). Your account data, profile information, and avatar images are stored on Supabase's infrastructure. Data may be processed on servers in the EU and/or US. Standard Contractual Clauses apply for any US transfers. See supabase.com/privacy.

Stripe

Payment processing is handled by Stripe Payments Europe, Ltd., 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, Ireland. When you subscribe, your payment information is transmitted directly to Stripe. We do not store your card details. Stripe processes data in accordance with PCI-DSS standards. See stripe.com/privacy.

Resend

We use Resend (Resend Inc., 2261 Market Street #4008, San Francisco, CA 94114, USA) to send transactional emails such as account confirmation, password reset, and subscription notifications. Your email address is transmitted to Resend for this purpose. Standard Contractual Clauses apply for US transfers. See resend.com/legal/privacy-policy.

Google OAuth

If you choose to sign in with Google, we receive your name, email address, and profile picture from Google LLC, 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. This data is used solely to create and manage your account. See policies.google.com/privacy.

6. Data Retention

We retain your personal data for as long as your account is active. If you delete your account, your personal data will be permanently deleted from our systems within 30 days, except where we are required by law to retain certain records. Profile photos stored in Supabase storage are deleted immediately upon account deletion. Subscription and billing records may be retained for up to 7 years for tax and accounting purposes as required by Austrian law.

7. Cookies

This website uses only technically necessary cookies — for example, to remember your cookie consent preference. We do not use any tracking, analytical, or advertising cookies. No personal data is collected through cookies.

8. Your Rights

Under the GDPR, you have the following rights regarding your personal data:

• —Right of access (Art. 15 GDPR) — you may request confirmation of whether we process your data and obtain a copy.
• —Right to rectification (Art. 16 GDPR) — you may request correction of inaccurate data.
• —Right to erasure (Art. 17 GDPR) — you may request deletion of your data where no legal obligation requires its retention.
• —Right to restriction (Art. 18 GDPR) — you may request that we restrict processing of your data in certain circumstances.
• —Right to data portability (Art. 20 GDPR) — you may request your data in a structured, machine-readable format.
• —Right to object (Art. 21 GDPR) — you may object to processing based on our legitimate interests.

To exercise any of these rights, please contact us at privacy@thefencingroom.com. We will respond within 30 days.

9. Right to Lodge a Complaint

You have the right to lodge a complaint with the Austrian data protection supervisory authority:

10. Changes to This Policy

We may update this privacy policy from time to time. The current version will always be available at this URL. We encourage you to review it periodically.