Privacy Policy
Last updated: 2026-07-19
1. Who processes your data
The data controller is Alessio Cerizzi, registered at Via Giuseppe Verdi 9, 20851 Lissone (MB), Italy, VAT number 03069620965. For any matter concerning personal data you can write to info@droppromotion.com.
2. What data we collect
Data you give us
- Account: email address and password (stored only in encrypted form; we cannot read it).
- Profile: name, username, city, country, bio, profile photo, optional phone number and Instagram handle. All optional except what is needed to create the account.
- Training data: belt and degrees, starting year, weight category, training style, home academy, coach and lineage, competition results.
- Gym data (if you are an owner): contact details, address, photos, schedules, instructors, events.
Data collected automatically
- Essential technical data needed to run the service (IP address, browser type), processed by our infrastructure providers for security and abuse prevention.
- Location: only if you actively use the "use current location" feature to filter nearby events. It is used at that moment to compute distances and is not stored on our systems. Otherwise we use the coordinates of the gym you set as your home academy.
3. Why we process your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Creating and running your account, letting you use the service | Performance of a contract (Art. 6.1.b GDPR) |
| Publishing your athlete profile and your gym listing | Performance of a contract; you decide what to publish |
| Sending service emails (sign-up confirmation, password reset) | Performance of a contract |
| Verification of belts and competition results by coaches and admins | Legitimate interest in the reliability of community data (Art. 6.1.f) |
| Security, prevention of abuse and unlawful content | Legitimate interest (Art. 6.1.f) |
We do not process your data for marketing purposes and we do not sell it to third parties.
4. Publicly visible data
BJJ Square is a community platform: some information is public by design. Specifically, anyone can see your athlete profile (name, username, city, belt, academy, bio, photo, competition results) and, if you are an owner, the whole gym listing with its published events.
Email, phone number and password are never public. You can edit or remove your profile information at any time from your personal area.
5. Who we share data with
We do not sell your data. We do rely on providers that process data on our behalf, as data processors:
- Supabase — database, authentication and image storage.
- Vercel — website hosting and delivery.
- Hosting Solutions — sending service emails from the bjjsquare.com domain.
- OpenStreetMap / Nominatim — converting addresses into map coordinates.
- CARTO — map background tiles.
- Cloudflare (cdnjs) — delivery of the map libraries.
Some providers may process data outside the European Union. Where this happens, the transfer relies on the Standard Contractual Clauses approved by the European Commission or on an adequacy decision.
6. How long we keep data
We keep your account data for as long as the account is active. If you delete it, the associated personal data is erased, except what we must retain to comply with the law or to establish or defend a legal claim. Public content you created for a gym (for example past events) may remain visible in a form that cannot be traced back to you.
7. Your rights
At any time you can:
- access your data and request a copy;
- correct or update it (mostly directly from your profile);
- request its erasure;
- request restriction of processing, or object to processing based on legitimate interest;
- receive your data in a machine-readable format (portability);
- withdraw a consent you gave, without affecting the lawfulness of earlier processing.
To exercise these rights write to info@droppromotion.com. If you believe the processing breaches the law, you may lodge a complaint with the Italian Data Protection Authority or your local supervisory authority.
8. Minors
You must be at least 14 years old to register on your own. For younger athletes the account must be created and managed by a parent or legal guardian. If we learn that an account was created by a child under 14 without such consent, we remove it.
9. Cookies
We only use technical cookies necessary to run the site. Details are in the Cookie Policy.
10. Changes
If we update this notice we will change the date at the top of the page and, for significant changes, let you know by email or directly on the site.