Privacy Policy
What SportsLive24 collects, why we have it, who can see it, and what you can do about it.
This policy explains what SportsLive24 collects, why, who can see it, and what you can do about it. It covers this website, the SportsLive24 mobile app, and the streaming service behind them.
It describes the product as it actually works today, including the parts that are not yet where we want them. Where something is a known limitation rather than a deliberate design, it says so plainly.
1. The short version
- We do not track you. No cookies, no analytics, no advertising pixels, no third-party tracking SDKs — not on this website, and not in the app.
- We do not sell your personal information, and we do not share it for advertising. We have never worked with an advertiser, a data broker or an analytics company.
- You can delete your account from inside the app, and we will show you exactly what that removes before you confirm.
- Video links are not secret. Anyone holding the URL of a stream, clip or reel can watch it, account or no account. Treat a link as public — section 4 explains why.
- We film sport, which means people who never signed up for anything appear on camera. Section 5 covers who is responsible for that, and how to have footage removed.
- Our servers are in the United States, on Google Cloud, even though we are a Canadian company.
2. What we collect
Everything we hold about you, where it comes from, and why. There is nothing collected that is not on this list.
| What | Where it comes from | Why we have it | How long |
|---|---|---|---|
| First and last name, email address, phone number, and whether you are a coach, instructor, athlete or parent | The preregistration form on this website | So we can tell you when early access opens | Until you ask us to remove it |
| Email address and password | Creating an account | To sign you in. The password is stored only as a salted hash — we never hold the plain text and cannot recover it for you | Until you delete your account |
| Display name, handle, bio, position, team and league | Your profile, all of it optional beyond a name | To build your athlete card, if you choose to publish one | Until you change or delete it |
| Video: live streams, recordings, clips, reels and files you upload | Your encoder, or uploads from the app | It is the product | Until you delete it, or we act on a takedown request |
| Sponsor or club banner artwork | Uploaded in the streamer console | Burned into the reels built from your events, as attribution | Until you replace or remove it |
| Which events you watched, and during which minutes | The app, automatically, while you are watching | So a streamer can see how many people watched their event and for how long | 400 days |
| IP address, app or browser version, and request timing | Automatically, with every request | To keep the service running, to rate-limit abuse, and to debug failures | Held in rolling server logs, not retained long-term |
| Delivery records for email we send you | When we send a verification, password reset or notification | To know whether the message arrived | Held by our mail provider — see section 8 |
3. What we do not collect
This section is short, and it is true as of the effective date at the top of this page. We would rather state it than leave you to assume the usual.
- No cookies. This website sets none at all. There is no consent banner because there is nothing to consent to.
- No analytics. No Google Analytics, no Meta pixel, no Segment, no PostHog, no Plausible, no attribution or advertising SDK, anywhere on this site or in the mobile app.
- No location data. The app never asks for your location and never receives it.
- No contacts, no photo library scanning, no background microphone or camera access. The app touches a file only when you deliberately choose it for upload.
- No advertising identifiers and no cross-app tracking. The app shows no App Tracking Transparency prompt because there is nothing we would use it for.
- No sale of personal information, and no sharing of it for cross-context behavioural advertising, as those terms are defined under California law.
4. Your video, and who can see it
This is the section most likely to surprise you, so it is near the top and it is blunt.
Streams, clips, reels and banner images are served from URLs that are not access-controlled. There is no sign-in check on the video itself. Anyone holding the link can watch it — whether or not they have an account, whether or not they paid, and whether or not you meant to share it with them.
Recorded footage is archived to Google Cloud Storage, and objects in that archive are readable by anyone who has the object's URL.
These URLs are long, are not published, and are not indexed by search engines, so they are not guessable in practice. But obscurity is not access control, and we are not going to describe it as though it were. Until we ship authenticated media access, treat any link to your footage as public and share it accordingly.
5. People who appear on camera
SportsLive24 films sport. Most of the people in any given frame never created an account, never agreed to anything, and — in youth sport — are frequently minors.
We are not at your venue and we do not obtain consent on anyone's behalf. The person or organisation operating the stream — the club, school, league or venue — is responsible for having the right to film the people in frame and to distribute that footage. Our Terms of Service place that obligation on them explicitly, and it is not one we can discharge for them.
That does not leave you without a route to us.
- To have footage taken down, email hello@sportslive24.net. Tell us what you saw and where — an event, a date, a link, a team, a name. You do not need an account, and you do not need to explain your relationship to the person on camera.
- We can tell you exactly what we hold. The same inventory that powers account deletion enumerates every recording, clip, reel and file attached to an account or an event, so “what do you have of my child?” is a question with a precise answer rather than a shrug.
- Requests concerning a minor are actioned first and questioned afterwards. We will not require a parent or guardian to prove anything to us before we act.
Accounts are for adults. You must be 18 or older to create one. We do not knowingly collect personal information from anyone under 18, and if we discover that we have, we delete it. A minor appearing in footage and a minor holding an account are different questions: the first is governed by the consent the organiser obtained before filming, and the second we simply do not permit.
6. Why we are permitted to hold it
Under Canadian privacy law we rely on your consent, given when you create an account or submit a form, and withdrawable at any time. For anyone covered by the GDPR or UK GDPR, the equivalent bases are:
- Performance of a contract — your account, your content, and delivering the service you signed up for.
- Legitimate interests — keeping the service running, preventing abuse, debugging failures, and giving streamers a count of who watched their event.
- Consent — preregistration and any marketing email, each withdrawable without affecting anything else.
- Legal obligation — where we are required to retain or disclose something by law.
7. Where your data lives
SportsLive24 runs on Google Cloud Platform, in Google's us-central1 region — Council Bluffs, Iowa, in the United States. Our database runs on our own virtual machine in that region, and is backed up every six hours to Google Cloud Storage in the same region.
If you are in Canada, this means your personal information is stored outside Canada and is subject to the laws of the United States, including lawful access by United States authorities. We are telling you this because Canadian privacy law requires that you be able to find it out, and because it is the kind of thing that ought to be on the page rather than in an appendix.
9. How long we keep things
The table in section 2 gives the period for each category. Two things about it are worth stating separately.
Footage is kept until it is deleted. We do not expire recordings on a timer. Your content stays available for as long as your account holds it, and goes when you delete it or when we act on a takedown request. If we ever introduce a fixed retention period we will tell you before it applies to anything you have already uploaded.
Backups lag deletion. Deleting something removes it from the live service immediately, but our database is backed up every six hours and those backups are retained on a rolling basis, so a deleted record can persist inside a backup until that backup ages out. We do not mine backups, and we do not restore from one except to recover from a disaster — in which case we re-apply any deletions that were outstanding.
10. Your rights
Whatever jurisdiction you are in, you can ask us to:
- Show you what we hold about you, and where it came from.
- Correct anything that is wrong.
- Delete your account and your content.
- Give you a copy of your data in a portable form.
- Stop processing based on consent, by withdrawing it.
Email hello@sportslive24.net to exercise any of these. We will respond within 30 days.
On data export, an honest note: there is no download button yet. An operator assembles your export by hand from the same inventory that drives account deletion. It works, and it is complete, but it is slower than it should be and we would rather say so than imply a self-service feature we have not built.
If you are in Canada and unhappy with how we have handled a request, you can complain to the Office of the Privacy Commissioner of Canada. If you are in the EU or the UK you have the equivalent rights under the GDPR and may complain to your national supervisory authority. If you are in California you have the rights granted by the CCPA and CPRA, including the right not to be discriminated against for exercising them. The same email address reaches us in every case.
11. What deleting your account actually does
You can delete your account from inside the app. Access ends immediately — your sessions are revoked, sign-in is refused with an explanation, and a password reset will not mint a link that walks someone back in. The underlying records are removed after a 30-day grace period, which exists so that two real situations are recoverable: a change of mind, and an account takeover used to destroy somebody's footage.
What gets removed is not the same for everyone, because what you own is not the same.
- If you watch, clip and build reels, your account is removed outright — your profile, your rows, and the reel files you made.
- If you stream, your account is removed but the footage from your events is retained under an anonymised owner. Your name comes off it.
We made that second choice deliberately, and it is worth explaining rather than burying. Other members' clips resolve against your recordings — a clip owns no video of its own. Cascading the delete would mean a parent loses clips of their own child because a club's streamer closed their account, with no warning and no say in it. Removing specific footage is a takedown request instead, and section 5 is how you make one.
12. Security
- All traffic to the service is encrypted with TLS. The mobile app refuses to talk to us any other way.
- Passwords are stored as salted hashes and are never logged, never emailed, and not recoverable by us.
- Credentials and signing keys live in Google Secret Manager, not in our source code, and the service refuses to start on a default or missing secret.
- The database uses a least-privileged application account, separate from its administrative one.
- Storage is encrypted at rest by Google Cloud.
- Our servers do not accept administrative connections from the public internet.
And the gap, stated in the same place as the good news: media URLs are not access-controlled (section 4). We are not going to publish a security posture without publishing the hole in it.
No system is perfectly secure. If you find a vulnerability, email hello@sportslive24.net and we will work with you on it. We will not pursue anyone who reports a genuine flaw in good faith.
13. Changes to this policy
We will post any change on this page and update the effective date at the top. Where a change materially reduces your privacy — new tracking, a new category of sharing, a new subprocessor with access to your content — we will say so prominently and, where the law requires consent, ask for it before the change takes effect.
14. Contact
SportsLive24 is operated by Sports Live Productions Incorporated, in the Province of Ontario, Canada. Questions about this policy, requests about your data, and takedown requests all go to hello@sportslive24.net, and a person reads them.