Privacy Policy

Effective October 1, 2026 · Operated by Jackson Blakley in Johnson County, Kansas, United States.

Your Film Room is a basketball charting tool for coaches. This page explains local storage, optional cloud backup and the information processed when you visit yourfilmroom.com, sign in or send feedback. It is part of the Terms of Use.

The short version

Charting works without an account. Cloud backup is optional.
Local charts and videos remain accessible to people using the same browser profile, including after sign-out. Browser storage can be cleared or lost.
Cloud chart and video requests require a signed-in account. The operator and service providers also have the access needed to run and support the service.
We do not sell your information, share it for advertising, or track you across other websites.
We do not use your charts, rosters or film to train AI models without your permission.
Chart exports do not contain video. Keep your original film files separately.

Information we process

Accounts and sign-in

We store your email address, an account identifier, the creation time, and sign-in and session records. When you request a sign-in link we also record the date and version of the Terms and Privacy Policy you agreed to. There is no account password. A sign-in link contains a one-time token; the database stores only its hash. Links expire after fifteen minutes. A session lasts up to thirty days and uses an HttpOnly, Secure, SameSite cookie. Settings offers sign-out on all devices. To limit abuse, Cloudflare's rate limiting checks your email address and IP address when you request a link.

Teams and charting

You may enter team and player names, jersey numbers, heights, positions, staff details, notes, statistics, plays, locations, periods, lineups and other chart information. The app also saves preferences and a recovery copy of your active chart. A location in the app is a spot on the court diagram; the app does not read your device's location.

Video

When you add film, the app stores a local copy in this browser's IndexedDB. Cloud video uploads, when enabled and successful, are stored separately under your account in Cloudflare R2. Adding video locally is not proof that a cloud upload finished.

Feedback

Submitting feedback sends your message, optional name, page URL and browser user-agent to the service. Feedback is saved in a database and emailed to the operator. It is not linked to an account identifier and is not automatically removed by account deletion.

Traffic and service operation

Cloudflare processes network information such as IP addresses and request metadata to deliver and protect the site. The site also permits Cloudflare Web Analytics. These requests occur even when cloud backup is off. Error messages produced by the service may be written to Cloudflare's logs for troubleshooting; they are not meant to contain chart contents. We do not use any of this for advertising.

Email we send

We send sign-in links and, when you submit feedback, a notification to the operator. We do not send marketing email. If we ever want to, we will ask first.

What we do not collect

We do not collect payment information (the service is free today), your contacts, or your device's location, and the site does not use your camera or microphone.

How we use information

We use information to run the service: signing you in, saving and syncing your charts, storing film, answering feedback and requests, keeping the service secure, investigating abuse, and meeting legal obligations. We use summary figures, such as page views from Cloudflare Web Analytics, to keep the service working well. We do not use your charts, rosters or film to train AI or machine-learning models without your permission.

When we share information

With the service providers listed below, who help us run the service.
When the law requires it, for example a valid subpoena or court order, or to protect people's safety or the service from abuse.
When you direct us to, for example when you export a file or share one yourself.
If the service is transferred to a successor, who must honor this policy for existing information.

We do not sell personal information, and we do not share it for advertising.

Storage and access

Local first. Charts and settings are saved in localStorage, and local film is stored in IndexedDB. The app does not intentionally sync chart records until cloud backup is enabled. Sharing an export or including chart details in feedback is a separate action. Do not use a shared browser profile for confidential team records.

Optional cloud backup. When enabled and signed in, charting records, teams, folders, positions, preferences, custom statistics and the active recovery copy can sync to Cloudflare D1. Cloud video uses R2. Sync can be delayed or fail while offline.

Security. The production site uses HTTPS. Cloud requests are scoped to the signed-in account, and sign-in tokens are stored hashed. A shared device, compromised email account or exported file can expose information outside those controls. No service can guarantee protection against every incident.

Operator access. The operator has administrative access to cloud data for operating, supporting and protecting the service. Information may also need to be processed to investigate abuse or respond to a valid legal requirement.

Security incidents

If we learn that information stored in your account was accessed without authorization, we will email affected account holders without unreasonable delay and as the law requires. The message will say what happened and what we know about the information involved. Information kept only in your own browser is not held by us, so we cannot detect or report problems there.

Service providers

Cloudflare: hosting, database, cloud video storage, security and traffic analytics.
Resend: sign-in emails and feedback email delivery. Feedback emails contain the information in your submission, not just an email address.

Providers process information under their applicable terms and privacy policies. The service is operated from the United States; provider infrastructure may process information in other locations.

Players, students and children

The service is intended for adult coaches, analysts and authorized staff, not for children to create accounts. It is not directed to children under 13, and we do not knowingly collect personal information directly from children under 13. If we learn that we have, we will delete it. If you believe a child under 13 has given us personal information, contact us.

Coaches may enter information about players under 18. Obtain required permissions and organizational approval before entering student or player records or film, and enter only information needed for basketball analysis.

Using the service does not make us a school official or a service provider under any student-privacy law, and it is not a student-records system. A school that needs a data-use agreement must sign one with us before using the service for school records. Contact us if you need a student or player record reviewed or removed.

Exports, deletion and retention

Settings → Your Data exports chart data, teams, folders, positions and custom statistics. Individual chart statistics can be exported as CSV. Keep video originals separately.
Account and cloud chart records remain until deleted. There is no automatic deletion today. We may delete an account that has been inactive for 24 months, after emailing the address on file and allowing 30 days to respond.
Delete Account attempts to remove account records, synced data and cloud video, then clear app data on the current device. Failures can leave a partially completed deletion; retry or contact support. Save an independent backup first.
An opaque former account identifier and deletion timestamp are retained to prevent delayed requests from restoring deleted data. This marker does not contain email, team records or video.
Our database provider keeps point-in-time backups for a limited period that the provider sets (up to 30 days at the time of writing). Deleted data can remain in those backups until they expire.
Sign-in and feedback emails also exist at our email provider and in the operator's mailbox, under their retention schedules.
Local copies on other devices, downloaded files and unlinked feedback are not automatically removed. Clearing a browser also does not delete cloud records.
Sign-in links and sessions stop working when they expire. Expired database rows are cleaned up during later successful sign-ins, not necessarily at expiry.
Feedback remains in the database and email inbox unless separately removed. Contact us for help identifying a submission.
Provider logs may follow separate retention schedules. Account deletion is not a promise that every provider copy disappears immediately.

Your choices and rights

You can export your data and delete your account in Settings. To ask for a copy of your information, to correct it, or to have it deleted, email us at the address below. We will respond within 30 days, and in any case within 45 days. We may need to verify who you are, and to confirm your authority before acting on someone else's records.

Depending on where you live, such as California and a growing number of other states, you may have rights to access, correct and delete your information, to know who it is shared with, and to opt out of its sale, of targeted advertising, or of profiling. We do not sell personal information, share it for targeted advertising, or profile people, so there is nothing to opt out of. We will not treat you differently for making a request. If we deny a request you can reply and ask us to reconsider, and you may contact your state attorney general.

The service is operated from the United States for users in the United States. If you use it from another country, your information is processed in the United States and by providers in other locations.

Cookies and Do Not Track

We set one cookie of our own: the sign-in session cookie described above, which keeps you signed in. Charts and settings are kept in your browser's localStorage and IndexedDB, not in cookies. Cloudflare may also use its own security cookies or scripts to protect the site. Cloudflare Web Analytics gives us page-view counts. We do not track you across other websites, so we do not change how the service works in response to Do Not Track signals.

Questions and requests

For access, correction, deletion, school agreements or privacy concerns, email jackson@yourfilmroom.com.

Policy changes

When our practices change, we update this page and its effective date. For material changes we will post a notice on the site and, when reasonably possible, email account holders before the change takes effect.