Last updated: 3 June 2026
This policy explains what personal data XO Film Room collects, why, how we protect it, and the rights you have under the EU General Data Protection Regulation (GDPR) and Italian data-protection law.
| Category | Examples |
|---|---|
| Account data | Email address, name, password (stored only as a salted hash by our auth provider). |
| Team & workspace data | Team name, city/country, club logo, brand colours, invite codes, member roles. |
| Content you upload | Game film and clips, reviews, plays, drawings and notes. This footage may show identifiable individuals, including players and staff. |
| Billing data | Subscription plan, billing status and invoices. Card details are entered directly with Stripe — we never receive or store your full card number. |
| Usage & technical data | Log data, device/browser type, IP address, and analytics events used to keep the Service secure and improve it. |
| Cookies | Essential cookies for sign-in/session, and — only with your consent — analytics cookies (see section 7). |
| Purpose | Legal basis (GDPR Art. 6) |
|---|---|
| Create your account, run your workspace, host and process your film | Performance of a contract (Art. 6(1)(b)) |
| Take payment and manage subscriptions | Contract (Art. 6(1)(b)); legal obligation for invoicing/tax (Art. 6(1)(c)) |
| Keep the Service secure, prevent abuse, fix problems | Legitimate interests (Art. 6(1)(f)) |
| Analytics to understand and improve the site | Your consent (Art. 6(1)(a)) |
| Send service and account emails (e.g. verification, trial reminders) | Contract (Art. 6(1)(b)) / legitimate interests (Art. 6(1)(f)) |
Where footage you upload contains personal data of others, your team acts as the controller for that content and XO Film Room processes it on your behalf as a processor.
We rely on a small set of trusted providers to run the Service. Each acts under a data-processing agreement and uses appropriate safeguards:
| Provider | Role |
|---|---|
| Google (Firebase Authentication & Cloud Firestore) | Sign-in and database for accounts, teams and review data |
| Cloudflare (Workers, R2, CDN) | Hosting, edge delivery, and storage of uploaded logos/assets |
| Stripe | Payment processing and subscription billing |
| Google Analytics | Anonymised website analytics — only if you accept analytics cookies |
Some providers above are based in, or process data in, the United States. Where data leaves the EU/EEA, transfers are protected by appropriate safeguards such as the EU Standard Contractual Clauses and, where applicable, the provider’s certification under the EU–US Data Privacy Framework.
Under the GDPR you have the right to: access your data; correct inaccurate data; erase data (“right to be forgotten”); restrict or object to certain processing; data portability; and to withdraw consent at any time without affecting prior processing. To exercise any of these, email privacy@xofilmroom.com — we respond within 30 days.
You also have the right to lodge a complaint with your supervisory authority. In Italy this is the Garante per la protezione dei dati personali (garanteprivacy.it).
We use essential cookies that are required to sign you in and keep your session secure — these do not need consent. We use analytics cookies (Google Analytics) only if you accept them in the cookie banner. You can change or withdraw your choice at any time by clearing cookies or contacting us. We do not use advertising or cross-site tracking cookies.
We protect your data with encryption in transit (HTTPS), access controls, hashed passwords, and reputable infrastructure providers. No system is perfectly secure, but we work to safeguard your information and will notify you and the relevant authority of a data breach where the law requires.
Accounts are for coaches and team staff aged 18 or over. The Service is not intended for use by children to create accounts. Footage may show minors who play on a team; the team administrator is responsible for having a lawful basis and any parental consents needed to film and share that footage.
We may update this policy as the Service evolves or the law changes. We will post the new version here with an updated date and, for material changes, notify you by email or in-app.
Privacy questions or requests: privacy@xofilmroom.com.