PRIVACY
POLICY

01 / PRIVACYWho is responsible

The data controller is EL Dev Vision Ltd., zh.k. Mladost 1, 1784 Sofia, Bulgaria.

For privacy questions or to exercise your rights, email eldevvision@gmail.com.

02 / PRIVACYInformation we collect

• Startup submissions: name, website URL, tagline, status, and submission time. We do not ask for an email address to add a free startup listing.
• Sponsor applications: name, website URL, invoice email, tagline, chosen slot, price, review and refund status, placement dates, and Stripe checkout reference.
• Squat sessions: startup identifier, submitted rep count, session duration, per-rep timing, knee-angle and movement-depth measurements, accepted count, integrity score, verification result, and time.
• Technical and usage data: IP address and request information used transiently for rate limiting and security, aggregate clicks on startup listings, plus analytics such as pages viewed, referral source, browser/device information, and approximate visit timing.
• Communications: messages and information you send when contacting us about support, legal notices, listings, sponsorships, or privacy.

03 / PRIVACYCamera and pose processing

When you choose to enable the squat tracker, your browser gives Squat.best temporary access to the selected camera. Video frames are processed locally in your browser to estimate pose landmarks and count movement, then discarded as the tracker runs. We do not record, upload, receive, or store your camera video or images. The tracker requests camera-only access with audio disabled, so it does not access or record your microphone.

The tracker sends movement measurements and session data to our server so reps can be checked and added to the board. These measurements describe the movement of joints during a session; they are not used for facial recognition or to identify you. Camera access stops when the session is closed, the page is closed, or permission is revoked.

04 / PRIVACYPublic information

Startup and active sponsor cards are public. They can be viewed by anyone and may be indexed by search engines. Public fields include the submitted name, URL, tagline, leaderboard position, squat totals, sponsorship label, and placement. Sponsor contact email addresses and payment references are not displayed publicly.

Do not submit a startup or sponsor destination if you are not authorized to make this information public. To request removal, contact eldevvision@gmail.com.

05 / PRIVACYWhy we process information

• Contract: to publish requested listings, count and rank accepted reps, review sponsor applications, provide paid placements, and handle support.
• Legitimate interests: to secure the service, prevent fake scores and spam, measure performance, understand usage, moderate listings, debug problems, and establish or defend legal claims.
• Legal obligations: to retain records needed for tax, accounting, consumer, payment, complaint, and regulatory requirements.
• Consent or your device choice: camera access occurs only after you enable it through your browser. You can end access at any time.

06 / PRIVACYCookies and analytics

Squat.best does not use advertising cookies or sell personal data. DataFast provides site analytics and live-visitor measurements. Its script and our hosting infrastructure may process technical usage information such as request time, page, referrer, IP address, and browser or device details under their own privacy terms and our configuration.

Stripe may use necessary cookies or similar technologies in its secure checkout embedded on our domain. Your browser also controls camera permission. You can clear site data and change permissions through your browser, although blocking necessary functions may prevent parts of the service from working.

07 / PRIVACYService providers and sharing

We share information only as needed with:

• Vercel for hosting, delivery, logs, and security;
• InstantDB for startup, sponsor, and squat-session records;
• DataFast for website analytics;
• Stripe for embedded checkout, business and tax-ID collection, tax calculation when enabled, invoicing, payment processing, fraud prevention, payment confirmation, and refunds;
• Google's favicon service to resolve an icon from each public startup domain through our cached server endpoint;
• MediaPipe model and content-delivery providers to load the browser-side pose tracker;
• professional advisers, courts, regulators, law enforcement, or a purchaser of the project where legally necessary.

We do not receive full payment-card numbers from Stripe. We do not sell or rent personal data.

08 / PRIVACYInternational transfers

Some providers may process information outside Bulgaria or the European Economic Area. Where required, we rely on recognized transfer mechanisms, such as adequacy decisions, standard contractual clauses, or equivalent safeguards offered by the provider.

09 / PRIVACYHow long we keep information

• Public listings and leaderboard records are kept while needed to operate the board and may remain for a limited period in backups, moderation history, or legal records after removal.
• Squat-session totals and verification records may be retained for the life of the leaderboard so all-time rankings remain accurate.
• Sponsor, checkout, transaction, tax, and dispute records are kept for the periods required by law and legitimate accounting or fraud-prevention needs.
• Rate-limit information is short-lived; infrastructure and analytics logs follow the applicable provider settings and retention periods.
• Correspondence is kept as long as necessary to answer the request and maintain an appropriate legal record.

We may anonymize aggregate statistics and retain them where they no longer identify an individual.

10 / PRIVACYYour privacy rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal data, and to withdraw consent where consent is the legal basis. You may also complain to a data-protection authority, including Bulgaria's Commission for Personal Data Protection or the authority in your country of residence.

Email eldevvision@gmail.com. Tell us enough to locate the relevant listing or record. We may ask for proportionate verification before acting. Some information may be retained where the law permits or requires it, including to protect the integrity of rankings, resolve disputes, or maintain financial records.

11 / PRIVACYSecurity and children

We use reasonable technical and organizational measures intended to protect information, but no online system is completely secure. Protect your own device and do not send sensitive information through public listing fields.

Squat.best is intended for adults and is not directed to children under 18. If you believe a child submitted personal data, contact us and we will investigate and remove identifiable data where appropriate.

12 / PRIVACYChanges to this policy

We may update this policy when the service, providers, or law changes. The date at the top identifies the current version. Material changes will be posted here and, where appropriate, communicated by an additional notice.