Privacy policy

FIGURA collects only the data needed to operate the competitions database, subscriptions, analytics, and optional email updates.

Controller and contact

FIGURA is the operator of the website at www.figuraskate.com. For privacy requests, corrections, deletion, or questions, contact [email protected]. We do not currently appoint a separate Data Protection Officer.

Season digest and consent records

Season-digest sign-ups are currently paused and no digest emails are being sent. Historically, the signup flow required double opt-in confirmation. Existing consent and unsubscribe records are retained so we can honor prior choices and respond to privacy requests. You can withdraw consent or request deletion by contacting [email protected].

Data we process

We may process email addresses submitted through the subscription or subscription form, the page path where the form was submitted, cookie-based sign-in and subscription-prompt state, page-view and event analytics, and, only when you allow analytics and begin checkout, a GA4 client identifier and optional session identifier used for server-confirmed purchase measurement. Technical logs required to keep the service secure and reliable. Public competition, federation, club, venue, coach, athlete, and judge pages may also show contact details that were published by the relevant organization or source. A competition correction or organizer-claim submission stores the submitted name, email, relationship, proposed value, explanatory note, supporting source URL, language, consent record, and the card value visible when the submission was made. Submitter contact details are not shown on public pages. For signed-in accounts, we also keep one privacy-minimized product-activity row per UTC day when a meaningful server-side action occurs: sign-in confirmation, competition watch/unwatch, personal calendar export, checkout start, or billing portal opening. That daily ledger references the internal user ID and stores only bounded action names and counts, not an email, page URL, IP address, or user agent.

Purposes and legal bases

  • Providing the service: displaying the competition recorded directory, sign-in and subscription state, and requested pages. Legal basis: performance of a service requested by you and our legitimate interest in operating the product.
  • Subscription and paywall leads: storing the email address and source path submitted through the paywall or subscription form so we can send a sign-in link and communicate about trial or Pro features. Legal basis: your request before entering a subscription and our legitimate interest in responding to that request.
  • Season digest consent: sign-ups are currently paused and no season digest emails are being sent. Existing consent records retain the email address, locale, selected coverage preferences and consent/withdrawal timestamps. Where a confirmation email is issued, it includes a direct unsubscribe link; you can also contact [email protected] to withdraw consent or request deletion. Legal basis: consent.
  • Analytics and product improvement: measuring page views, performance, and feature usage. Legal basis: legitimate interest for privacy-preserving measurement; consent will be used if we enable analytics storage or non-essential cookies that require it.
  • Account activation and retention: counting whether signed-in users return for meaningful product actions after 7 or 30 days, using a daily first-party ledger without page context or direct identifiers. Legal basis: our legitimate interest in deciding whether the requested product is useful and avoiding premature monetisation.
  • Public catalog records: showing competition, federation, venue, club, coach, athlete, and judge information from official or publicly available sources. Legal basis: legitimate interest in maintaining a factual sports directory and archive.
  • Corrections and organizer claims: receiving, checking, moderating, and responding to source-backed submissions. Legal basis: your request and our legitimate interest in keeping the directory accurate and preserving an auditable source trail.
  • Security and abuse prevention: technical logs, admin protection, and system reliability. Legal basis: legitimate interest and legal obligation where applicable.

Analytics and measurement

FIGURA sends product analytics directly to Google Analytics 4 (Measurement ID: G-2RRQHGM80W). Google Tag Manager (GTM-KJ96Z2GR) is retained only as a fallback. Google Analytics and Tag Manager are not loaded until you explicitly allow analytics. Choosing "Essential only" before any prior grant or not responding sends no analytics event or consent-denied ping to Google. If you withdraw a prior grant, an already-loaded tag receives the denied consent state and the page reloads after the first-party suppression request to unload it; Google may receive a consent-status signal before reload. Product event calls stop immediately. The saved preference can be changed on the Cookie policy page and an analytics grant expires after at most 12 months. For server-confirmed purchase measurement, the browser also needs a signed, HttpOnly consent proof; checkout attribution is omitted if that proof is missing, invalid, or expired. If enabled and you have allowed analytics, the browser may send GA4 client/session identifiers to FIGURA's own server with an authenticated checkout attempt. The server holds them only long enough to associate a Stripe-confirmed positive payment with a purchase event, then clears them after transport, withdrawal, or the documented expiry. No email, card data, or Stripe identifiers are sent to Google. We do not use advertising or retargeting cookies on figuraskate.com itself, and Google advertising storage stays denied regardless of your analytics choice. Some outbound links (for example, a hotel-search link on a competition page) are partner links: following one sends you to a third-party site under its own cookie policy, and FIGURA may earn a commission. Analytics events may include page views, competition card views, filter usage, save/calendar/share actions, subscription clicks, lead submissions, and newsletter opt-in requests. If the server-side purchase measurement is enabled and you have allowed analytics, FIGURA may also send a purchase event to GA4 only after Stripe confirms a positive payment. That event uses the consented GA4 client identifier, an eligible session identifier, and transaction amount/currency. Declining analytics prevents this attribution; withdrawing consent suppresses pending, unsent purchase events. Withdrawing consent updates an already-loaded tag to denied, stops further product events, suppresses pending purchases, and clears accessible GA cookies; after the first-party suppression request succeeds or its bounded retries finish, the page reloads to unload the tag. Google may receive a consent-status signal before reload, but not a product event. A request already sent cannot be recalled. These events are used to understand product usage and improve the service. If the optional audience-research question is enabled, an answer is sent only after analytics consent and is associated with that consented analytics session. It does not request an account, email, free text, or search query. Event-level and user-level GA4 data for this research is configured for a two-month retention period; aggregate standard reports may remain after event-level data expires.

Processors and third-party services

We use service providers to host, secure, measure, and operate FIGURA. Current processors include Hetzner for application hosting and PostgreSQL; Cloudflare for edge TLS/proxy services; Google LLC for Tag Manager (GTM-KJ96Z2GR) and Google Analytics 4 (G-2RRQHGM80W); Resend for sign-in, account and reminder email delivery; Commission Junction (CJ Affiliate) for attributing hotel-search partner links to Booking.com; and Amazon Associates for attributing gear-checklist partner links to Amazon. These partner-link providers only receive a click event when you follow a partner link, not from ordinary page views. These providers process data only to provide their services to FIGURA. Season-digest sending is currently paused.

International transfers

Our providers may process data outside your country, including outside the European Economic Area. Where required, we rely on appropriate safeguards such as standard contractual clauses or the provider’s equivalent transfer mechanism.

Retention

  • Subscription-prompt dismissal cookies expire after the period stated in the cookie policy.
  • Trial/subscription state cookies expire after 365 days unless cleared earlier.
  • Paywall lead emails are kept until the lead is handled, deletion is requested, or they are no longer needed for access communication.
  • Pending newsletter requests and expired confirmation data are removed when no longer needed; confirmed subscriptions are kept until consent is withdrawn or deletion is requested.
  • Correction and organizer-claim contact data is kept while the submission is reviewed and for as long as it is reasonably needed to document the decision, resolve disputes, or prevent abuse; it is then removed or anonymized, and can be deleted earlier on a valid request unless an overriding legal need applies.
  • Technical logs and analytics are kept according to the retention settings of the relevant provider.
  • Analytics consent is stored on the device for up to 12 months. Unpaid checkout attribution identifiers expire after 30 days; identifiers linked to a confirmed payment are cleared after transport, withdrawal, or 72 hours, whichever comes first.
  • Daily first-party product-activity rows are kept only while needed to calculate 7/30-day retention and make product decisions; deleting an account also deletes its linked activity rows.
  • Public catalog and archive records are kept while they remain useful for the sports database, unless corrected or removed after a valid request.

Paywall and subscription leads

If you leave your email in the subscription form, we store it to send a sign-in link and communicate about trial access. Browsing the recorded directory and opening published competition cards do not require a paid subscription. We may set cookies that remember whether the subscription prompt was dismissed and whether access should be treated as active in the current product flow. See the Cookie policyfor cookie names and lifetimes.

Your rights

If you are in the EU, UK, or another region with privacy rights, you can request access, correction, deletion, restriction, portability, or objection to processing of your personal data. You can also withdraw consent where processing is based on consent. Send requests to [email protected]. You also have the right to complain to your local data protection authority.

Last updated

October 5, 2026