Privacy Policy

Last Updated: March 12, 2026

TRICKEST ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our skateboarding challenge platform.

1. Information We Collect

Account Information

• Email & Password: For account creation and authentication
• Profile Data: Name, username, photo, gender, birthdate
• Skate Profile: Skate setup, location, social media links

Activity Data

• Submissions: Video URLs, scores, feedback
• Engagement: Votes, comments, team memberships
• Performance: Challenge completion, points earned

Analytics Data

• Google Analytics 4: Page views, sessions, device info, geolocation
• Microsoft Clarity: Session recordings, heatmaps, click behavior

2. How We Use Your Information

• Provide and maintain the platform functionality
• Process challenge submissions and evaluations
• Improve user experience through analytics
• Ensure platform security and prevent fraud
• Communicate about platform updates and features
• Comply with legal obligations

3. Legal Bases for Processing (GDPR)

• Contract Performance: Account management, submissions, scoring
• Legitimate Interest: Analytics, security, platform improvement
• Consent: Profile completion, social features, marketing

4. Your Rights (GDPR & CCPA)

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate data
• Right to Erasure: Request deletion of your account and data
• Right to Portability: Export your data in a machine-readable format
• Right to Object: Object to data processing based on legitimate interest
• Right to Withdraw Consent: Revoke consent at any time

5. Data Security

We implement industry-standard security measures:

• Encryption: TLS 1.3 for data in transit, AES-256 for data at rest
• Password Hashing: bcrypt with 10 rounds
• Access Control: Role-based access (skater, judge, admin)
• SQL Injection Protection: Prisma ORM parameterized queries
• XSS Protection: React automatic escaping

6. Data Retention

• Account Data: Until account deletion
• Analytics (GA4): 14 months
• Session Recordings: 30 days
• Server Logs: 30 days

7. Third-Party Services

We use the following services:

• Google Analytics 4: User behavior analytics
• Microsoft Clarity: Heatmaps and session recordings
• Google OAuth: Authentication service
• YouTube: Video hosting for submissions
• Supabase: Database hosting
• Vercel: Application hosting

8. International Data Transfers

Your data may be transferred to and processed in countries other than your own, including the United States. We ensure adequate protection through: Standard Contractual Clauses (SCC) and GDPR Adequacy Decisions.

9. Children's Privacy

Our platform is not intended for children under 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us.

10. Contact Us

For privacy inquiries, contact us at:

📧 privacy@trickest.com