Privacy policy
Last updated 6 October 2026
This policy explains what personal data PeachCut collects, why, who else handles it and what you can ask us to do with it. It applies to peachcut.com, the PeachCut app and the emails we send. We wrote it to be read, not skimmed past. If something is unclear, write to privacy@peachcut.com.
1. Who is responsible
The controller of your data is DIMES LTD (ДАЙМЗ ЕООД), UIC 208795517, 7 Georgi Benkovski St, entr. B, fl. 5, apt. 15, 9300 Dobrich, Bulgaria, represented by its managing director Georgi Diyanov Tsonev. Privacy requests: privacy@peachcut.com. We are a small company and have not appointed a data protection officer; the managing director handles privacy questions personally.
2. What we collect and why
| Data | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Email address, password (stored only as a hash), sign-up date, date you accepted these terms, date you confirmed your email | To create and secure your account, let you log in, reset your password | Contract, Art. 6(1)(b) | Until you delete your account |
| Games you add: the YouTube link or the file you upload, the downloaded video, detected baskets and scores, your edits, the reels you build | To provide the service: find every basket and cut the clips and reels | Contract, Art. 6(1)(b) | Source video: deleted 7 days after processing. Games, events and reels: until you delete them or your account |
| Small images of the on-screen scoreboard cut from your games and the scores read from them | To train and test our scoreboard reader so detection gets more accurate for everyone | Legitimate interest, Art. 6(1)(f): the images show only digits and team abbreviations, not people | Raw crops: 72 hours. Labelled training crops: as long as they are useful for training |
| Visit statistics from Google Analytics on the website: pages seen, where the visit came from, device type, approximate country and city (Google does not store the IP address) | To know how people find PeachCut and which parts of the page work | Your consent, Art. 6(1)(a), asked by the cookie banner. Saying no changes nothing about the service | 14 months at Google |
| Google Ads remarketing: a cookie that marks your browser as a visitor of peachcut.com and whether you signed up afterwards | To show PeachCut ads to people who already visited the site and to know whether an ad led to a sign-up | Your consent, Art. 6(1)(a), the separate "Marketing" switch in the cookie banner. Off by default | 90 days (_gcl_au); up to 13 months at Google |
| Session recordings, heatmaps and click data from Microsoft Clarity | To see where the website and the app are confusing and fix it | Your consent, Art. 6(1)(a), asked by the cookie banner. Saying no changes nothing about the service | Recordings: 30 days. Aggregated click data: up to 9 months at Microsoft |
| Feedback you send (text, optional screenshots, the page you were on, your email) | To answer you and fix what you report | Legitimate interest, Art. 6(1)(f) | Screenshots: 90 days. Text: until you delete your account |
| Server logs: IP address, time, page requested, browser type, login events | To keep the service running and secure, block abuse, investigate errors | Legitimate interest, Art. 6(1)(f) | 90 days |
| Emails you send us | To answer you | Legitimate interest, Art. 6(1)(f) | Up to 2 years after the conversation ends |
We do not sell your data and we do not build profiles of you. The only advertising use is Google Ads remarketing, and only if you turn the "Marketing" switch on. We do not make decisions about you that have legal or similarly significant effects by automated means.
3. People in your videos
Basketball videos show players, coaches, referees and spectators, some of them minors. PeachCut does not identify people: it reads the scoreboard and cuts clips around the moments the score changes. It does not use face recognition and does not tag players by name. You decide which games to add and whom you share reels with. When you add a game you confirm that you have the right to use that recording; for games you filmed yourself, that includes the consent required for minors under your club's rules. If you appear in a video processed with PeachCut and want it removed, write to privacy@peachcut.com with the link and we will act on it.
4. Who else handles your data
We use these companies to run PeachCut. Each processes data only on our instructions under a data processing agreement.
| Company | What for | Where |
|---|---|---|
| Hetzner Online GmbH | Servers, database, processing | Germany (EU) |
| BunnyWay d.o.o. (bunny.net) | Video storage and delivery, encrypted backups | Slovenia (EU); delivered from the edge location closest to the viewer |
| Anthropic PBC | Reading the scoreboard from video frames (Claude) | USA. Standard contractual clauses. Anthropic does not train its models on data sent through its API |
| Google LLC (Gemini API) | Back-up scoreboard reading when the primary reader fails on a game | USA. EU–US Data Privacy Framework and standard contractual clauses |
| Brevo (Sendinblue SAS) | Sending account emails: confirmation, password reset | France (EU) |
| Migadu | Our mailbox for hello@, privacy@ and accessibility@ | Switzerland (adequacy decision) |
| Google Ireland Ltd / Google LLC (Google Analytics) | Visit statistics for the website, only if you agree | EU and USA. EU–US Data Privacy Framework and standard contractual clauses |
| Microsoft Ireland Operations Ltd (Clarity) | Session recordings, only if you agree | EU and USA. EU–US Data Privacy Framework |
| Cloudflare, Inc. | DNS for peachcut.com and the cdnjs code library network | Global network. EU–US Data Privacy Framework |
| Google LLC (Google Fonts), jsDelivr, unpkg | Delivering fonts and open-source code libraries to your browser; they see your IP address | Global networks |
| Telegram | Notifying the PeachCut team about new feedback and system alerts | Telegram's servers (outside the EU) |
When you add a YouTube link, our server downloads that public video from YouTube (Google). We may also disclose data where the law requires it, for example to a court or a public authority.
5. Public links
Every finished game has a share link. Anyone with that link can see the game title, the team names, the score, the scoring moments, the video and the latest reel. Share links are not listed anywhere and are not indexed by search engines, but anyone you send one to can pass it on. Deleting the game disables its link.
6. Your rights
You can ask us to:
- tell you what data we hold about you and give you a copy (access, Art. 15);
- correct it (Art. 16);
- delete it (Art. 17). You can delete games yourself and your whole account from the account page; it happens at once and cannot be undone;
- restrict how we use it (Art. 18);
- give it to you in a machine-readable format (portability, Art. 20);
- stop using it where we rely on legitimate interest (objection, Art. 21);
- withdraw your consent to Google Analytics and Clarity at any time with Cookie settings at the bottom of every page. Withdrawal does not affect data collected before it.
Write to privacy@peachcut.com from the address you signed up with. We answer within one month. It is free.
If you think we handle your data unlawfully, you can complain to the Bulgarian Commission for Personal Data Protection (Комисия за защита на личните данни), 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, www.cpdp.bg, or to the supervisory authority where you live or work.
7. Age
You need to be at least 16 to create a PeachCut account. Younger players can of course appear in videos and reels; the account belongs to the coach, parent or club that adds the game.
8. Security
All traffic is encrypted (HTTPS). Passwords are stored only as salted hashes. Account emails come from authenticated domains (SPF, DKIM, DMARC). Server access is limited to the managing director and works only with a cryptographic key, never a password. Database backups are kept in private storage for 14 days. If a breach puts your data at risk, we will tell you and the supervisory authority as the law requires.
9. Changes
If we change this policy in a way that matters, we will email account holders before the change applies. The date at the top always shows the latest version.
Who runs PeachCut
DIMES LTD (ДАЙМЗ ЕООД), UIC 208795517, 7 Georgi Benkovski St, entr. B, fl. 5, apt. 15, 9300 Dobrich, Bulgaria. Managing director: Georgi Diyanov Tsonev. Contact: hello@peachcut.com.