隐私政策
生效日期：2026 年 10 月 2 日
我们尽量少收集、早删除。下面写的是 GolfTrace 实际怎么处理你的数据。
1. 我们是谁
GolfTrace（golftrace.app）是在加拿大安大略省运营的高尔夫挥杆分析网站。有任何隐私问题，请联系：（联系邮箱即将公布）
2. 我们收集什么
- 你上传的挥杆视频，包括画面和声音。
- 从视频算出来的分析数据：身体关键点、挥杆阶段、各项指标；如果视频里拍到模拟器屏幕，还有读到的球速、距离等数字。
- 付款记录：付款由 Stripe 处理，我们看不到你的卡号。我们只保存 Stripe 的付款编号和视频的“指纹”（由视频算出的一串字符，不是视频本身），用来防止一次付款被重复使用。
- 不需要注册，不收集姓名、邮箱或电话。
- 为了防止滥用，你的 IP 地址只在服务器内存里短暂保留（最多十几分钟），不写进数据库或日志。
- 练习记录、语言和地区偏好只存在你自己的浏览器里，不会上传给我们。我们不使用广告或跟踪类 Cookie。
3. 我们怎么用
- 只用来生成你的分析报告和回放视频。
- 不出售，不分享给广告商，不做人脸识别。
- 用你的视频训练模型：只有你在结果页单独同意才会（见第 6 节）。
4. 保存多久
- 原始视频：分析完成后立即删除。付款后分析如果失败，为了让你免费重试，最多保留 30 分钟。
- 回放视频和关键帧图：24 小时内自动删除。
- 文字报告：保留 30 天，方便处理你的问题反馈，到期自动删除。
- 分析任务记录：3 小时后删除。
- 你可以在结果页点“删除这次分析”，立即删除这次的回放视频、关键帧、文字报告和任务记录。
- 付款记录：按记账需要保存。
- 你同意贡献的数据：最多保存 3 年，随时可以撤回。
5. 数据存在哪里，谁会接触到
- 我们的服务器在加拿大（OVHcloud，魁北克省）。
- 为了分析得更快，分析也可能在我们自己位于加拿大安大略省的电脑上用显卡完成；分析完立即删除那里的视频副本。
- 我们用到的第三方服务：
- Anthropic（Claude，美国）：根据分析数据写教练报告。只发送数值指标，不发送视频。如果视频里拍到模拟器屏幕，而我们本地识别不了上面的数字，可能会发送屏幕区域的一小块截图让 Claude 识别：发送前会把画面里的挥杆者遮住，画面里有其他人时不发送。按 Anthropic 的商业条款，这些数据不会被用来训练它的模型。
- Stripe（美国）：处理付款。
- Cloudflare（美国）：域名解析，网站流量也可能经过它的网络。
- OVHcloud（加拿大）：服务器托管。
- 其中一些服务可能在加拿大境外处理数据。
6. 授权贡献（可选）
分析完成后，结果页可能会问你：能不能保留这段挥杆，用来改进分析模型。这是单独的选择，不影响你使用分析服务。
- 你可以只保留骨架和数字（不留视频），或者连视频一起保留（存档时人脸打码，音轨只留击球前后各半秒；画面里有其他人的视频不保留）。
- 不选或点“不用了”，什么都不保留。
- 最多保存 3 年，随时可以在结果页或练习记录里撤回，撤回后立即删除。已经训练好的模型版本无法单独抹掉某一段的影响，但之后不会再用。
- 需年满 18 岁。
7. 你的权利
- 你可以要求查看、更正或删除我们保存的、和你有关的数据。
- 因为不需要注册，我们没法按姓名找到你的数据。请用结果页的“删除这次分析”，或者把分析的时间和结果链接发到上面的联系邮箱。
- 如果你对我们的处理方式有疑问或不满意，请先联系我们，我们会尽快积极解决；如果仍然没有解决，你也可以向加拿大隐私专员办公室（Office of the Privacy Commissioner of Canada）投诉。
8. 未成年人
未满 18 岁请在父母或监护人同意下使用。授权贡献只接受年满 18 岁的用户。
9. 安全
- 全站使用 HTTPS 加密。
- 服务器只开放必要的端口，数据目录不能从网上直接访问，密钥只保存在服务器上。
- 结果链接是随机生成、很难猜到的地址。
10. 政策变更
修改这份政策时，我们会更新顶部的生效日期；有重大变化时，会在网站上提示。
Privacy Policy
Effective: October 2, 2026
We collect as little as we can and delete it early. This page describes what GolfTrace actually does with your data.
1. Who we are
GolfTrace (golftrace.app) is a golf swing analysis website operated in Ontario, Canada. For any privacy question, contact: (contact email coming soon)
2. What we collect
- The swing video you upload, including its picture and sound.
- Analysis data computed from the video: body keypoints, swing phases and metrics; if the video shows a launch-monitor screen, the numbers we read from it (ball speed, distance, etc.).
- Payment records: payments are handled by Stripe and we never see your card number. We keep only Stripe's payment ID and a "fingerprint" of the video (a string computed from it, not the video itself) so that one payment cannot be reused.
- No sign-up: we do not collect your name, email or phone number.
- To prevent abuse, your IP address is kept briefly in server memory (no more than about 15 minutes) and is not written to any database or log.
- Your practice log and language / region preferences are stored only in your own browser and never sent to us. We do not use advertising or tracking cookies.
3. How we use it
- Only to produce your analysis report and replay videos.
- We never sell it, share it with advertisers or use it for face recognition.
- Your video is used to train models only if you separately agree on the results page (see section 6).
4. How long we keep it
- Original video: deleted as soon as the analysis finishes. If a paid analysis fails, it is kept for up to 30 minutes so you can retry for free.
- Replay videos and key-frame images: deleted automatically within 24 hours.
- Text report: kept for 30 days to help with your questions or feedback, then deleted automatically.
- Analysis job record: deleted after 3 hours.
- You can tap "Delete this analysis" on the results page to delete its replay videos, key frames, text report and job record immediately.
- Payment records: kept as needed for bookkeeping.
- Data you choose to contribute: kept for up to 3 years; you can withdraw it at any time.
5. Where it is stored and who can access it
- Our server is in Canada (OVHcloud, Quebec).
- To analyze faster, the analysis may also run on our own GPU computer in Ontario, Canada; the copy of the video there is deleted as soon as the analysis is done.
- Third-party services we use:
- Anthropic (Claude, USA): writes the coaching report from the analysis data. Only numeric metrics are sent, never the video. If your video shows a launch-monitor screen we cannot read locally, a small crop of that screen may be sent so Claude can read the numbers: the golfer is masked out before sending, and nothing is sent if other people are in the frame. Under Anthropic's commercial terms, this data is not used to train its models.
- Stripe (USA): processes payments.
- Cloudflare (USA): domain name service; website traffic may also pass through its network.
- OVHcloud (Canada): server hosting.
- Some of these services may process data outside Canada.
6. Contributing your swing (optional)
After an analysis, the results page may ask whether we can keep that swing to improve our models. This is a separate choice and does not affect your use of the analysis service.
- You can keep only the skeleton data and numbers (no video), or also the video (your face is blurred and the audio is silenced except half a second around impact; videos with other people in frame are not kept).
- If you don't choose, or tap "No thanks", nothing is kept.
- Kept for up to 3 years; withdraw any time from the results page or your practice log, and it is deleted immediately. Model versions already trained can't un-learn a single swing, but it won't be used again.
- You must be 18 or older.
7. Your rights
- You can ask to see, correct or delete the data we hold about you.
- Because there is no sign-up, we cannot look up your data by name. Use "Delete this analysis" on the results page, or email us the time of the analysis and its result link at the address above.
- If you have a concern about how we handle your data, please contact us first — we will work to resolve it promptly. If it is still not resolved, you can also contact the Office of the Privacy Commissioner of Canada.
8. Minors
If you are under 18, please use GolfTrace with the consent of a parent or guardian. Only users 18 or older can contribute their swings.
9. Security
- The whole site uses HTTPS encryption.
- The server only opens the ports it needs, the data folders cannot be reached from the web, and keys are stored only on the server.
- Result links are random, hard-to-guess addresses.
10. Changes
When we change this policy we update the effective date at the top; for significant changes we will post a notice on the website.