Swingframe

Privacy policy

Last updated 8 November 2026

The short version

Who we are

Swingframe is run by Finlay Thompson, who is the data controller for the personal data described here. If you have a question about your data or want to use any of your rights, email privacy@swingframe.co.uk.

What we collect, why, and for how long

Your swing videos

When you analyse a swing, the video is read and tracked by your own browser. It is never sent to us. We cannot see it, and nothing is kept once you close the page.

To do the tracking, your browser downloads the tracking software from jsDelivr and Google's file storage the first time you use it. Like any website request, this shares your IP address with those providers. It does not share your video.

Your saved history

If you choose "Save to my history", the measurements from that session (not the video) are stored in your browser on that device only. We cannot see them. You can delete them at any time with "Clear my history", or by clearing your browser's site data.

Emailing you your plan

If you ask us to email your plan, we receive your email address and your measurements (numbers only, never the video). We use them to write the email and send it through our email provider, Resend.

Why
You asked us to send it. Our lawful basis is taking the steps you requested (contract).
How long
We do not keep your address after sending unless you also tick the news box. Resend keeps a delivery record for a limited period under its own retention policy.

Tips and news by email, only if you tick the box

If you tick the box, the email we send asks you to confirm, and we send no news unless you do. This stops anyone signing up an address that is not theirs. We keep a record of your consent: your email address, when you asked and when you confirmed, the exact wording you agreed to and its version, and the country your request came from. If you never confirm, the record stays unconfirmed and you get no news; you can delete it with the link in the email.

Why
To send you occasional tips, drills and news. Our lawful basis is your consent, which you can withdraw at any time.
How long
Until you unsubscribe. After that we keep only a note that you unsubscribed, so we never email you news again by mistake. If you ask us to delete that note as well, we will.

Your Swingframe account, only if you sign in

An account is optional. If you create one, we ask for your full name, your email address, your date of birth and which hand you play with. We then keep the sessions you choose to save: the date, the camera angle, how many swings, your measurements and your priority fault. Never your videos. We also keep basic sign-in records, such as when you signed in, to keep accounts secure. Accounts are run by our provider Supabase, which stores the data in Ireland, in the EU.

We use your date of birth only to check that you are 13 or over, and it cannot be changed after you sign up. Your name is used to greet you. Which hand you play with sets up your analysis.

There is no password. Each time you sign in we email you a secure link, and opening it proves the email address is yours. When you create an account or ask for a link, a quick check from Cloudflare (called Turnstile) confirms you are a person and not a bot. It looks at basic information about your browser and connection and does not set advertising cookies.

Why
To give you the account you asked for, so your history follows you between devices, and to keep accounts secure. Our lawful basis is providing the service you signed up to (contract). Checking your age and stopping bots are part of providing it safely (legitimate interests).
How long
Until you delete your account. "Delete my account" on your account page removes your account, your details and every saved session straight away. Copies in our provider's routine backups are overwritten within a short period.

Stopping misuse of the email form

To stop the email form being used to flood someone's inbox, we count how many emails are requested from each connection. We store a scrambled, one-way version of your IP address for about an hour, and a scrambled, one-way version of the email address it was sent to for about a day, so we can limit how many plans go to the same inbox. Neither can be turned back into the original, and both are deleted automatically.

Why
Our legitimate interest in keeping the service safe and preventing abuse.

Running the website

Our website is hosted by Cloudflare. Like any host, Cloudflare processes your IP address and basic details of your request (such as your browser type) to deliver the pages and protect the site from attacks. The page also loads its font from Google Fonts, the 3D golf scene at the top of the home page from jsDelivr and, if you download a PDF, a PDF tool from cdnjs, which is also run by Cloudflare. These providers receive your IP address when your browser fetches those files.

Why
Our legitimate interest in running a working, secure website.

Cookies

We do not set cookies and we do not use analytics or advertising trackers. The saved history on your device, and your sign-in if you choose to sign in, use your browser's local storage, which only you control and which is needed for those features to work. Cloudflare may set a strictly necessary security cookie to tell people from bots, which does not need your consent.

Who we share data with

We only share data with the providers we need to run Swingframe:

These providers act on our instructions or serve files to your browser. We never sell your data or share it for advertising.

Some of these providers are based in the United States, so your data may be processed there. Where that happens, we rely on the safeguards the provider offers, such as the UK Extension to the EU-US Data Privacy Framework or standard data protection clauses.

Your rights

Under UK data protection law you can ask us to:

If you have an account, you can download everything we hold about you, correct your name, and delete your account yourself on your account page. For anything else, email privacy@swingframe.co.uk. We will reply within one month. In practice, the only personal data we hold about you is your account, if you signed in, and a consent record, if you ticked the news box.

Unsubscribing

Every news email has an unsubscribe link. It takes one click and works straight away. The same page lets you delete your record completely. You can also email us and we will do it for you.

Children

You must be 13 or over to create an account, and we check your date of birth when you sign up. If you are under 13, please do not create an account or use the email feature. If we learn that an account belongs to someone under 13, we will delete it.

Complaints

If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Changes to this policy

If we change how we use your data, we will update this page and the date at the top. If a change affects people who agreed to receive news, we will tell them by email before it takes effect.