Privacy Policy
This describes exactly what VodRL stores and why. It is short because the service collects little.
What we store
- Your email address, from signing in. We use it to identify your account and to send sign-in links.
- Your profile — whatever you choose to put there: a display name, a username, an avatar, a bio, a country, a self-reported rank.
- Linked game accounts — a platform and an account id. This exists for one technical reason: it is how the analysis knows which of the players in a replay is you.
- Replay files you upload, and the telemetry, moments and reports derived from them.
- Billing records — a Stripe customer id and subscription state. Card details are handled by Stripe and never reach our servers.
What we do not do
- We do not sell your data.
- We do not run third-party advertising or tracking pixels.
- We do not publish your replays or your reports.
Other players in your replays
A Rocket League replay contains the other players in that match — their in-game names and their movements. We process this only as far as is needed to analyse your play, and we do not build profiles of players who are not our users.
Who processes it
- Supabase — database, authentication and file storage.
- Vercel — hosting.
- Stripe — payments.
- OpenRouter — the language model that writes the report prose. It receives detector output only: measured evidence for the replay being written up. It does not receive your email or your profile.
How long we keep it
Replays and their analysis are kept until you delete them or close your account. Deleting a replay removes the file, its frame table and every moment and claim derived from it. Closing your account removes all of it.
Your rights
You can export everything we hold about you as JSON from your profile page, at any time, without asking. You can correct your profile from the same page, and you can delete your account. If you are in the UK or EU, the GDPR rights of access, rectification, erasure, restriction, portability and objection apply; the export and delete controls exist so you can exercise most of them without contacting anyone.
Cookies
Only what signing in requires: a session cookie so you stay logged in. No analytics or advertising cookies, so there is no consent banner to dismiss.