Privacy policy
Last updated: 26 March 2026
1. Data controller
The controller of personal data collected through the ObstacleStudio service is Obstacle Studio.
For any questions about protecting your data, you can contact us at: support@obstaclestudio.app.
2. Data collected
When you use the Service, we may collect the following data:
- Identification data: last name, first name and email address (through Google, Sign in with Apple or an email sign-in link).
- Course data: show jumping courses created and saved by users (obstacles, paths, markers and arena configurations).
- Payment data: processed exclusively by Stripe. We do not store any banking details.
- Browsing data: anonymised data collected through Umami Analytics (pages visited, session duration and device used).
3. Purposes of processing
Personal data is collected for the following purposes:
- Creating and managing user accounts.
- Providing the Service (saving and loading courses).
- Managing subscriptions and payments.
- Improving the Service through anonymised usage analysis.
- Communicating with users (support and service notifications).
4. Legal basis (GDPR)
Your data is processed on the following legal bases:
- Performance of a contract: providing the Service requires processing certain data (accounts and saved courses).
- Consent: for sending marketing communications, where applicable.
- Legitimate interest: for improving the Service and preventing fraud.
- Legal obligation: for retaining certain data required by regulations.
5. Retention period
Personal data is retained for as long as necessary for the purposes for which it was collected:
- Account data: retained throughout use of the Service, then deleted within 12 months after the account is deleted.
- Course data: retained while the account is active. Deleted at the user's request or after account deletion.
- Billing data: retained for the mandatory statutory period (10 years).
- Browsing data: anonymised and retained for a maximum of 24 months.
6. Users' rights
Under the General Data Protection Regulation (GDPR), you have the following rights:
- Right of access: to obtain confirmation that your data is being processed and receive a copy.
- Right to rectification: to request correction of inaccurate or incomplete data.
- Right to erasure: to request deletion of your personal data.
- Right to data portability: to receive your data in a structured, commonly used format.
- Right to object: to object to the processing of your data on legitimate grounds.
- Right to restriction: to request restricted processing in certain cases.
To exercise these rights, contact us at: support@obstaclestudio.app.
You also have the right to lodge a complaint with the CNIL (France's national data protection authority).
7. Cookies
The Service uses cookies strictly necessary for the application to operate (authentication and user sessions).
The Umami analytics tool is configured to operate without cookies and respect privacy (no cross-site tracking and anonymised data).
No advertising or third-party tracking cookies are used.
8. Processors and data transfers
We use the following processors to operate the Service:
| Processor | Purpose | Location |
|---|---|---|
| Google OAuth | Authentication | EU / US (standard contractual clauses) |
| Apple Sign In | Authentication | EU / US (standard contractual clauses) |
| Stripe | Payments and billing | EU / US (standard contractual clauses) |
| Umami | Usage analysis (anonymous) | Europe (self-hosted) |
Application data (user accounts and courses) is hosted on servers located in Europe.
9. Data protection contact
For any questions about protecting your personal data, you can contact us:
- Email: support@obstaclestudio.app
- Subject: "Data protection"
We undertake to respond within 30 days.