Privacy Policy

This Privacy Policy describes how Frame of Reference Solutions LLC ("RollReport," "we," "us," or "our") collects, uses, and shares information when you use RollReport at https://rollreport.gg (the "Service").

1. Who We Are

RollReport is an independent Brazilian Jiu-Jitsu and submission grappling intelligence platform operated by Frame of Reference Solutions LLC, a Maryland limited liability company. We are not affiliated with any tournament organization.

2. Data We Collect

2.1 Information you provide to us

When you create an account, you provide:

• Email address — required for authentication and essential service notifications;
• Display name — shown on your profile;
• Password — stored as a salted, hashed value (scrypt), never in plaintext;
• Optional profile image URL — if you choose to set one;
• Match video URLs — if you submit a link to a public video on YouTube, Instagram, FloGrappling, Vimeo, or X/Twitter;
• Athlete links — if you designate yourself, your child, or a student as someone you manage or follow.

2.2 Information we collect automatically

When you use the Service, we log:

• IP address — for rate limiting, abuse prevention, and session security;
• User agent — browser/device type for compatibility debugging;
• Session tokens — one HTTP-only, Secure, SameSite=Lax cookie per sign-in.

2.3 What we do not collect

• No credit-card or payment information. The v1 Service is free.
• No precise location data (no GPS, no device location API).
• No phone numbers.
• No third-party advertising or analytics cookies.
• No tracking pixels or ad-network integrations.

2.4 Data aggregated from public sources

The Service aggregates competition records, rankings, and event metadata from publicly accessible sources including IBJJF (bjjcompsystem.com, ibjjfdb.com), Smoothcomp federations (PBJJF, NAGA, Grappling Industries, Good Fight, Newbreed, AGF, FUJI, Copa, Submission Challenge, Flow Sub-Only), Controlled Combat, Jiu-Jitsu World League, ADCC, AJP, UFC BJJ, CJI, Kasai, Polaris, and others.

These data — athlete names, gym affiliations, match results, medals, and rankings — are public records published by the respective sanctioning bodies. We publish a compilation, attribute sources, and do not redistribute logos or trademarks without permission. See the Data Sources section below for the full list and our crawling policy.

3. How We Use Data

We use personal data to:

• Authenticate you and maintain your session;
• Personalize your dashboard (followed athletes, managed kids, feed);
• Enforce rate limits and detect abuse;
• Respond to support inquiries and takedown requests;
• Improve the Service's accuracy and performance.

We do not use personal data to profile you for advertising or sell it to third parties.

4. Cookies

We use one strictly necessary cookie: a session cookie set by our authentication system (Better Auth). It is HTTP-only, Secure (HTTPS-only), SameSite=Lax, and signed to prevent tampering. It expires after 30 days of inactivity.

We do not use analytics, advertising, or tracking cookies. See our Cookie Policy for details.

5. Data Sharing

We share personal data only:

• With service providers that process data on our behalf under contractual obligation: Cloudflare (hosting and edge infrastructure), and optionally Resend (transactional email) if magic-link authentication is enabled;
• When legally required — in response to a lawful subpoena, court order, or valid law-enforcement request;
• To protect rights, property, or safety of RollReport, users, or the public.

We do not sell personal data. We do not share personal data with advertisers, data brokers, or analytics vendors.

6. Data Retention

• Account data (email, display name, password hash) — retained while your account is active. If you delete your account, the row is deleted or anonymized within 30 days.
• Session records — automatically deleted 30 days after last use.
• Match video submissions — retained indefinitely unless removed under moderation or by takedown.
• IP logs — retained for 90 days for abuse investigation.
• Aggregated public competition data — retained indefinitely as part of the RollReport database.

7. Your Rights

You have the right to:

• Access your account data (available via the /me endpoint or by request);
• Rectify inaccurate data (via /me/settings or by request);
• Delete your account and associated personal data (email hello@rollreport.gg);
• Object to specific uses of your data;
• Port your data to another service in a machine-readable format (on request).

California residents (CCPA). You have the right to know what personal information we collect, to request deletion, and to opt out of any "sale" of personal information. We do not sell personal information as that term is defined by the CCPA.

EEA / UK residents (GDPR). Our lawful basis for processing is (a) your consent (account creation) and (b) our legitimate interest in operating an authenticated service (session security, rate limiting). You have the right to lodge a complaint with your supervisory authority.

To exercise any right, email hello@rollreport.gg. We respond within 30 days.

8. Athletes and Athlete Corrections

Competition records on the Service are aggregated from public sources. These records may include athlete names, gym affiliations, match results, and year-of-birth (never the full date).

If you are an athlete — or a parent/guardian of a minor athlete — and want to correct, restrict, or remove information, email hello@rollreport.gg with:

• The athlete's name as it appears on the Service;
• The URL of the profile;
• The correction or removal requested;
• Your relationship (athlete, parent, coach, legal representative).

We will respond within 7 business days and investigate each request. We prioritize removing or correcting information about minors.

9. Children's Privacy (COPPA)

RollReport is not directed to children under 13. We do not knowingly collect personal information from children under 13 as account holders. Our Terms of Service prohibit account creation by anyone under 13.

Athletes who are minors appear on the Service as public competition entries published by their sanctioning federation (IBJJF, NAGA, etc.), not as platform users. We publish display name, gym affiliation, match results, and year of birth only — never full date, never address, never contact info.

Parents managing a competing child create the parent-facing account and link their child as a "managed athlete" entity. The child does not create an account, log in, or submit data directly.

If you believe we have inadvertently collected personal information from a child under 13, email hello@rollreport.gg and we will delete it promptly.

10. Security

We use industry-standard security measures:

• TLS 1.3 for all data in transit;
• scrypt password hashing via Better Auth;
• HTTP-only, Secure, SameSite cookies;
• Per-route rate limiting and abuse detection;
• Server-side input validation on all inputs;
• Cloudflare edge DDoS protection.

No system is perfectly secure. If you suspect a security incident, email security@frameofreferencesolutions.com.

11. International Data Transfers

We operate on Cloudflare's global edge network. Your data may be processed at Cloudflare points of presence outside your country. Cloudflare provides Standard Contractual Clauses for transfers out of the EEA/UK.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be announced on the site with a new "Last updated" date. Continued use of the Service after changes constitutes acceptance.

13. Contact

• Privacy inquiries and rights requests: hello@rollreport.gg
• Security reports: security@frameofreferencesolutions.com
• Mailing address: Frame of Reference Solutions LLC, 500 Thayer Center STE C, Oakland, MD 21550, USA

Data Sources

For transparency, the following is the list of public data sources we aggregate from. Our ingestion respects each source's robots.txt and applies crawl-delays no faster than:

Our crawler identifies itself as RollReportBot/0.1 (+https://rollreport.gg/bot). Site operators can opt out via robots.txt or by emailing hello@rollreport.gg.