Privacy Policy
Last updated July 31, 2026.
VidGolf is operated by Roey Zvi Graif, Bareket 19, Zichron Ya'akov, Israel — the data controller for everything described here. Questions, requests, or complaints: support@vidgolf.com.
What we collect
- Your email address. VidGolf uses email sign-in, so your address is your account identifier. We store it to keep you signed in and to show you your own past traces.
- Sign-in codes. When you request a code we email you six digits and store only a cryptographic hash of it, never the code itself. It expires after 15 minutes and allows six attempts. Your browser then holds a signed session token, valid 30 days — we do not store that token on our side.
- The videos you upload, and the traced videos we produce from them.
- A record of each trace — the time, a job identifier, and the result — so your video history works.
- Technical logs — request times, file sizes, IP address, processing outcomes and errors. We need these to run the service, enforce upload limits, and stop abuse.
We do not use advertising trackers, analytics profiling, or third-party cookies on this site.
How long we keep it
| Data | Deleted after |
|---|---|
| Uploaded original video | 7 days, automatically |
| Traced output video | 90 days, automatically |
| Your trace history records | 90 days, automatically |
| Sign-in codes | 15 minutes |
| Technical logs | 30 days |
| Email address / account | Until you ask us to delete it |
These are enforced automatically by the storage system, not by anyone remembering to do it.
Your videos
Uploaded and traced videos are stored privately and are used only to produce and deliver your traced video. We never publish, share, sell, or use your videos for marketing — not on social media, not on this site, not anywhere — unless you separately and explicitly give us permission for a specific video.
Processing is automated: our software tracks the golf ball, not the person. We do not run face recognition or any other biometric identification, and we do not attempt to identify anyone appearing in a video.
A person may occasionally view a video when you ask us for help with it, when a trace fails and we are diagnosing why, or where we reasonably suspect illegal or abusive content. Other than those cases, nobody watches your uploads.
Why we're allowed to process it (legal bases)
- To perform our contract with you — processing your video, delivering the result, keeping you signed in, handling purchases.
- Our legitimate interests — keeping the service secure, enforcing rate limits, preventing fraud and abuse, and diagnosing failures.
- Legal obligation — retaining transaction records where tax or accounting law requires it.
- Your consent — only where we ask for it separately, such as permission to feature a video. You can withdraw consent at any time.
Payments
Purchases are processed by Paddle (Paddle.com Market Ltd), acting as merchant of record and as an independent data controller for checkout data. Paddle collects and handles your payment details and billing information directly — we never see or store your card details. Paddle's own privacy notice governs that data and is available at paddle.com/legal/privacy. We receive from Paddle only what we need to fulfil the order and keep proper accounts.
Who else processes your data
We keep the list deliberately short:
- Amazon Web Services — storage, processing, email delivery and logging, in the US East (N. Virginia) region.
- Paddle — payments, as described above.
That's it. We do not sell your personal data, and we do not share it with advertisers or data brokers.
Where your data goes
VidGolf is operated from Israel and your data is stored on AWS servers in the United States. If you are in the European Economic Area or the UK: Israel is recognised by the European Commission as providing an adequate level of data protection, and transfers to AWS in the US rely on Standard Contractual Clauses under our agreement with AWS.
Your rights
Wherever you live, you can ask us to:
- tell you what data we hold about you, and give you a copy;
- correct anything that's wrong;
- delete your account and everything attached to it;
- export your data in a portable format;
- restrict or object to a particular use;
- withdraw any consent you previously gave.
Email support@vidgolf.com and we'll action it within 30 days. There's no charge and we won't make it difficult — most of it self-deletes anyway.
If you are in the EEA or UK and think we've handled your data badly, you may also complain to your national data protection authority. In Israel, the relevant regulator is the Privacy Protection Authority (הרשות להגנת הפרטיות).
Children
VidGolf is not intended for children under 16, and you must be 18 to buy anything. If a video shows an identifiable child, the person uploading it must be their parent or guardian, or have that person's permission. If you believe a child's data has reached us, email us and we'll delete it.
Security
Videos are stored in private storage with public access blocked; uploads only enter through short-lived signed links. Sign-in codes are stored hashed, session tokens are signed, and access to systems is limited to what each part needs. No system is perfect — if a breach ever affects your data, we will tell you and the relevant regulator as required by law.
Changes
If we change this policy, the new version appears here with a new date. If a change is significant and we hold your email address, we'll tell you directly.