Privacy policy

Last updated 3 November 2026

Who we are

Drift Analytics ApS (CVR 46306317), Aarhus, Denmark, is the data controller for the personal data described in this policy, except for the match videos customers upload, which we process on their behalf (see Match videos and the people in them).

Questions and requests about your data: hello@courtcast.tech.

What we collect and why

Your account

Your email address, your password (stored by our authentication provider, Supabase, only as a one-way hash), when you signed in, and your role. We use it to sign you in, keep your account secure and show you your own matches and videos.

Legal basis: providing the service under our agreement with you or your organisation (Article 6(1)(b) GDPR), and our legitimate interest in keeping it secure (Article 6(1)(f)).

Match videos and the people in them

When you upload a match, we store the video and create what CourtCast is built on: rally clips, shuttle and player tracking (hits, shots and court positions), shot types, an excitement score for each rally, and overlay videos. You can name the two players in a match. To keep the right name on the right player across rallies, CourtCast compares the players’ appearance within that match; it does not try to recognise who they are. You can also add images and music to highlight videos.

These videos show identifiable people. For this content we act as a data processor for the customer who uploaded it: the customer decides what to upload and is responsible for having the right to do so, including any consent needed from the players (see our terms of service). We process it only to provide CourtCast to that customer.

Metricool

You can connect your own Metricool account and send highlight videos to one of its brands. They arrive as drafts in the brand’s planner, and you schedule and publish them from Metricool. When you connect, we store your Metricool API token, your Metricool user ID and, for the brand you choose, its ID, name, picture, timezone and the networks it has connected. The token is encrypted at rest and never sent to your browser. If Metricool stops accepting the token, we delete it and the brand details at once.

We use the connection only for what you ask us to do:

• to list your account’s brands and the networks each one has connected, so you can choose where a video goes, and, when you tick TikTok, the privacy settings TikTok allows for that account;
• when you press Send to Metricool, to send the video you chose with its caption, hashtags, title, visibility and the networks you ticked. Metricool fetches the video through a temporary link to our storage, or we upload it to Metricool;
• if a send is interrupted, to look in the brand’s planner around the draft’s date for the draft we started, so the retry doesn’t create a second one, and to delete a draft of ours that ended up without its video.

For each video we keep the Metricool post’s ID and its link in the planner, so you can open it from CourtCast. We don’t use anything else in your Metricool account, such as its analytics or inbox, and nothing is published until you schedule or publish it in Metricool.

Metricool is a service you choose and contract with yourself, not one of our processors. Once a video reaches Metricool, Metricool’s terms and privacy policy apply to it, including to how it is published to your networks.

Legal basis: carrying out what you ask us to do (Article 6(1)(b) GDPR).

Technical data

Our servers log requests (time, IP address and what was requested) to run, secure and debug the service; these logs are kept for a limited period. The CourtCast app stores your sign-in session and display preferences, such as theme, in your browser, because it can’t work without them. We use no tracking or advertising cookies, and this website uses no cookies or analytics at all.

When you contact us

If you email us, we use your message and email address to answer you.

Access by our team

Our team can access account data and content when that is needed to support you, investigate a problem or keep the service working. Everyone with access is bound by confidentiality.

Where your data is processed

We use these providers, each bound by a data processing agreement:

• Supabase: sign-in and our database. In the EU.
• Google Cloud Storage: video, image and music files. In the EU.
• Fly.io: our application servers. In the EU.
• Runpod: GPU processing of match videos (splitting into rallies, tracking and rendering). This can run in data centres outside the EU/EEA, including the United States. These transfers are covered by the European Commission’s Standard Contractual Clauses in Runpod’s data processing agreement.

When you send a video to Metricool, Metricool receives the video and post details. From then on, Metricool’s own privacy policy applies to it. Metricool is a service you choose, not one of our processors (see Metricool).

We don’t sell personal data, and we don’t share it with anyone else except where the law requires us to.

How long we keep it

• Your account: as long as you have one. Ask us to delete it and we do so within 30 days.
• Matches, analysis and highlight videos: until you delete them in CourtCast or your account is deleted. Deleting a match deletes its video, rally clips, analysis, overlays and the highlight videos made from it.
• Metricool connection: until you disconnect, which deletes the API token and brand details immediately. If Metricool stops accepting the token, we delete the token and brand details at once and keep only a note that the connection needs reconnecting, for up to 30 days.
• Videos sent to Metricool: we keep the Metricool post’s ID and planner link with the highlight video. The draft, and anything you publish from it, stays in Metricool until you delete it there.
• Server logs: a limited period, then they are deleted.

Deleted data can remain in backups for a limited period before the backups are overwritten.

How to delete your data explains each step.

Your rights

Under the GDPR you can ask for access to your personal data, and have it corrected, deleted or restricted. You can ask for a copy in a portable format, and object to processing that is based on our legitimate interests. Email hello@courtcast.tech; we reply within one month. If your request concerns a match video we process for one of our customers, we pass it on to that customer and help them answer it.

You can complain to the Danish Data Protection Agency, Datatilsynet, or to the data protection authority where you live.

Changes to this policy

When we change this policy, we update this page and the date at the top. If a change is significant, we also tell account holders by email before it takes effect.