1. Data Controller
The data controller for whitebeltclub.com is Gust Oy, Malagankatu 6, 00220 Helsinki, Finland. You can reach us at whitebeltclub@gmail.com.
2. Data We Collect
We collect minimal personal data, only what is necessary to provide our service:
Email address — collected when you sign up for an account. Used for authentication and sending functional emails.
Name — optionally provided by you via profile settings. Not required to use the service.
Game plan data — content you create using the game plan tool, stored privately in your account.
If you do not create an account, we do not collect any personal data from you.
3. How We Use Your Data
We use your personal data for the following purposes:
Account authentication via one-time password (OTP) sent to your email. Sending functional emails, currently only OTP verification codes. Managing your account and storing your game plans.
We do not sell, share, or use your data for marketing purposes.
4. Third-Party Services
We use the following third-party services to operate the Website:
Neon (Database)
We use Neon as our PostgreSQL database provider to store user accounts, sessions, and game plan data. Our database is located in Frankfurt, Germany (EU).
Resend (Email)
We use Resend to send transactional emails. Currently, this is limited to one-time password (OTP) verification codes for authentication. We do not send marketing emails.
Plausible Analytics
We use Plausible for website analytics. Plausible is a privacy-friendly analytics tool that does not use cookies, does not collect personal data, and does not track individual users. All data is aggregated and no personally identifiable information is processed.
5. Cookies
We use a single, essential cookie for authentication:
| NAME | PURPOSE | DURATION | TYPE |
|---|---|---|---|
| wbc-session | Session authentication | 7 days | HttpOnly, essential |
This cookie is only set when you sign in to your account. We do not use any tracking or advertising cookies.
6. Data Storage & Security
Your data is stored in a PostgreSQL database hosted by Neon in Frankfurt, Germany, within the European Union. All connections to the database are encrypted. We implement reasonable security measures to protect your personal data from unauthorized access, alteration, or destruction.
7. Your Rights (GDPR)
Under the General Data Protection Regulation (GDPR), you have the following rights regarding your personal data:
Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate data.
Right to erasure — request deletion of your personal data.
Right to data portability — request your data in a structured, machine-readable format.
Right to object — object to the processing of your personal data.
To exercise any of these rights, please contact us at whitebeltclub@gmail.com.
8. Account Deletion
You can delete your account and all associated data through your profile settings. Upon deletion, all your personal data, including your email address, name, game plans, and session data, will be permanently removed from our database. You may also request account deletion or a copy of your data by emailing whitebeltclub@gmail.com.
9. Data Retention
Your account data (email, name, game plans) is retained for as long as your account exists. OTP verification codes expire automatically after 10 minutes. Login sessions expire after 7 days. When you delete your account, all associated data is permanently removed.
10. Children's Privacy
White Belt Club is not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us and we will promptly delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. We encourage you to review this page periodically.
12. Contact
If you have any questions about this Privacy Policy or how we handle your data, please contact us at whitebeltclub@gmail.com.