Privacy Policy
Last updated September 12, 2026.
VidGolf is operated by Roey Zvi Graif, Bareket 19, Zichron Ya'akov, Israel, the data controller for everything described here. Questions, requests, or complaints: support@vidgolf.com.
What we collect
- Your email address. VidGolf uses email sign-in, so your address is your account identifier. We store it to keep you signed in and to show you your own past traces.
- Sign-in codes. When you request a code we email you six digits and store only a cryptographic hash of it, never the code itself. It expires after 15 minutes and allows six attempts. Your browser then holds a signed session token, valid 30 days. We do not store that token on our side.
- The videos you upload, and the traced videos we produce from them.
- A record of each trace. The time, a job identifier, and the result, so your video history works.
- Technical logs. Request times, file sizes, IP address, processing outcomes and errors. We need these to run the service, enforce upload limits, and stop abuse.
- Usage events. Which pages and features you use (e.g. uploaded a video, saw a result, saved it), recorded first-party under a random visitor identifier stored in your browser, and linked to your email once you sign in. We use this only to understand and improve VidGolf; it never goes to advertisers.
We do not use advertising trackers, analytics profiling, or third-party cookies on this site.
How long we keep it
| Data | Deleted after |
|---|---|
| Uploaded original video | 7 days, automatically |
| Traced output video | 90 days, automatically |
| Your trace history records | 90 days, automatically |
| Sign-in codes | 15 minutes |
| Technical logs | 30 days |
| Email address / account | Until you ask us to delete it |
These are enforced automatically by the storage system, not by anyone remembering to do it.
Your videos
Uploaded and traced videos are stored privately and are used only to produce and deliver your traced video. We never publish, share, sell, or use your videos for marketing. Not on social media, not on this site, not anywhere, unless you separately and explicitly give us permission for a specific video.
Processing is automated: our software tracks the golf ball, not the person. We do not run face recognition or any other biometric identification, and we do not attempt to identify anyone appearing in a video.
A person may occasionally view a video when you ask us for help with it, when a trace fails and we are diagnosing why, or where we reasonably suspect illegal or abusive content. Other than those cases, nobody watches your uploads.
Why we're allowed to process it (legal bases)
- To perform our contract with you: processing your video, delivering the result, keeping you signed in.
- Our legitimate interests: keeping the service secure, enforcing rate limits, preventing fraud and abuse, and diagnosing failures.
- Your consent: only where we ask for it separately, such as permission to feature a video. You can withdraw consent at any time.
Who else processes your data
We keep the list deliberately short:
- Amazon Web Services: storage, processing, email delivery and logging, in the US East (N. Virginia) region.
- Google Cloud (Gemini API): in two cases we send still images from your video (never the full video file, never audio) to Google's Gemini API. First, when our automatic tracing fails to find the ball, we send a single frame so tracing can retry. Second, when you press "Try again with AI" on a result, we send a small set of frames (about a dozen, spanning the shot) so the AI can locate your ball's flight for a new trace. We use the paid API tier, under which Google acts as a service provider and does not use your content to train its models.
That's it. We do not sell your personal data, and we do not share it with advertisers or data brokers.
Where your data goes
VidGolf is operated from Israel and your data is stored on AWS servers in the United States. If you are in the European Economic Area or the UK: Israel is recognised by the European Commission as providing an adequate level of data protection, and transfers to AWS in the US rely on Standard Contractual Clauses under our agreement with AWS.
Your rights
Wherever you live, you can ask us to:
- tell you what data we hold about you, and give you a copy;
- correct anything that's wrong;
- delete your account and everything attached to it;
- export your data in a portable format;
- restrict or object to a particular use;
- withdraw any consent you previously gave.
Email support@vidgolf.com and we'll action it within 30 days. There's no charge and we won't make it difficult. Most of it self-deletes anyway.
If you are in the EEA or UK and think we've handled your data badly, you may also complain to your national data protection authority. In Israel, the relevant regulator is the Privacy Protection Authority (הרשות להגנת הפרטיות).
Children
VidGolf is not intended for children under 16. If a video shows an identifiable child, the person uploading it must be their parent or guardian, or have that person's permission. If you believe a child's data has reached us, email us and we'll delete it.
Security
Videos are stored in private storage with public access blocked; uploads only enter through short-lived signed links. Sign-in codes are stored hashed, session tokens are signed, and access to systems is limited to what each part needs. No system is perfect. If a breach ever affects your data, we will tell you and the relevant regulator as required by law.
Changes
If we change this policy, the new version appears here with a new date. If a change is significant and we hold your email address, we'll tell you directly.