ShowThem.ai Privacy Policy
Version 0.1. Last updated 28 September 2026.
This policy explains what we collect when you use ShowThem.ai, why, who else touches it, how long we keep it, and what you can do about it. The short version: we take your match recordings, turn them into a report, delete the video, and we do not sell anything or show you ads.
1. Who is responsible for your data
ShowThem.ai is the controller of your personal data. The founders are based in Israel. Our servers are in the European Union, in Amsterdam.
Contact: hello@showthem.ai. Any privacy question, request or complaint goes there and reaches a founder directly.
We have not appointed a data protection officer, because the law does not require one for a service of our size and type.
2. What we collect and why
For each kind of data below we say what it is, why we use it, and the legal basis that lets us use it under the GDPR and UK GDPR.
2.1 Account details. When you sign in with Google, Google sends us your name, email address, profile picture and a Google account ID. When you sign in with an email link, we get your email address. We use this to create your account, sign you in and email you about your analyses. Legal basis: it is necessary to provide the service you asked for (Article 6(1)(b), contract). We use Google data only for sign in and account contact. We do not use it for anything else, we do not share it except with the service providers in section 4, and we do not use it for advertising.
2.2 Your match recordings. This is the video file you upload, or the Twitch or YouTube video you point us to. A recording can include your gamertag, your opponents' gamertags and club names, and any voices on party chat or commentary. We use the recording only to produce your analysis. Legal basis: contract (Article 6(1)(b)).
2.3 Extracted frames and analysis data. To analyse a match we cut still frames out of the video and turn what we read on them into structured data (clock, score, events, positions). Legal basis: contract (Article 6(1)(b)). We keep this data for a short time after the analysis so we can fix mistakes in your report and re-run it if you ask. Legal basis for that short retention: our legitimate interest in giving you correct reports (Article 6(1)(f)).
2.4 Your reports. The finished analysis and any notes you add. Legal basis: contract (Article 6(1)(b)).
2.5 Your Twitch channel name, if you give it to us, so we can capture your broadcast when you ask us to. Legal basis: contract (Article 6(1)(b)).
2.6 Push notification subscription, if you turn notifications on. See section 7. Legal basis: your consent (Article 6(1)(a)).
2.7 Technical and error data. When something breaks, our error logging records what went wrong, the page or step it happened on, your browser type and version, and your IP address. Our hosting providers also keep short server logs, including IP addresses, to keep the service secure. Legal basis: our legitimate interest in keeping the service working and secure (Article 6(1)(f)).
2.8 Messages you send us. If you email us or send feedback, we keep what you wrote so we can answer and improve the service. Legal basis: our legitimate interest in answering you and improving the service (Article 6(1)(f)).
You do not have to give us any of this. Without account details and a recording, though, we cannot give you an analysis.
We do not ask for, and do not want, sensitive data such as health information. Please do not put it in a recording or a message.
3. What we do not do
We do not sell your data. We do not show ads. We do not use tracking pixels, third party tracking tools or advertising cookies. We do not build profiles of you for anyone else. We do not publish your recordings or reports. We do not use your recordings, frames or reports to train any machine learning model, ours or anyone else's.
Your report is produced automatically. It does not make any decision about you with legal or similarly significant effects. It is a breakdown of a football match, so Article 22 GDPR on automated decision making does not apply.
4. Who we share data with
We use a small number of service providers to run ShowThem.ai. Each one handles data only on our instructions, under a data processing agreement.
| Provider | What they do for us | What they receive | Where |
|---|---|---|---|
| Cloudflare | DNS, website hosting, file storage (R2) | Uploaded recordings while stored, website requests, IP addresses | EU storage location; global network for website delivery |
| Supabase | Database and sign in | Account details, analysis data, reports | EU region |
| Fly.io | Runs the analysis | Recordings and frames while being processed | Amsterdam, Netherlands |
| Resend | Sends our emails | Your email address and the email content | |
| Anthropic | Model inference on extracted still frames | Still frames and text prompts. No video. | |
| OpenRouter | Routes model requests to model providers | Still frames and text prompts. No video. | United States and provider locations |
| Sentry | Error logging | Error details, browser type, IP address |
We never send your video file to a model provider. Only individual still frames go out, and only to produce your report. Anthropic does not use data sent through its commercial API to train its models by default. OpenRouter passes requests on to the model provider we choose. We configure it to use only providers that do not train on or keep the data we send.
We may also disclose data if the law requires it, or to protect our rights, our users or the public. If ShowThem.ai is sold or merged, your data may move to the new owner, who must keep to this policy. We will tell you before that happens.
5. International transfers
Our servers are in the EU. Some data leaves the EU in these cases.
The founders work from Israel and access the service from there. The European Commission has decided that Israel gives an adequate level of protection for personal data, and reconfirmed that decision in January 2024. The UK recognises the same decision.
Some of our providers are based in the United States or may process data there, including Cloudflare's global network, Anthropic, OpenRouter, Resend and Sentry. For these transfers we rely on the EU-US Data Privacy Framework where the provider is certified, and on the European Commission's standard contractual clauses (and the UK addendum) where it is not. You can ask us for a copy of the relevant safeguards at hello@showthem.ai.
6. How long we keep data
| Data | How long |
|---|---|
| Your recording (uploaded or captured) | Deleted as soon as your analysis is complete. If an analysis fails, deleted within 7 days. |
| Extracted frames and analysis data | 30 days after the analysis, then deleted |
| Reports | As long as your account exists |
| Account details | As long as your account exists |
| Push subscription | Until you turn notifications off, the browser cancels it, or you delete your account |
| Error logs | 30 days |
| Emails with us | Up to 2 years after our last exchange |
When you delete your account, we delete your reports, account details and remaining analysis data within 30 days. Copies in backups are overwritten within a further 30 days.
7. Notifications and the app on your phone
You can install ShowThem.ai on your home screen as a web app. When you do, your browser stores copies of our app files on your device so it loads fast. That stays on your device.
If you turn on notifications, your browser asks for your permission first. If you say yes, your browser gives us a subscription address and keys, which we store with your account. We use them only to tell you that an analysis is ready or that something needs your attention. We keep the message short and do not put your match details in it.
Push messages travel through a push service run by your browser's maker, for example Google, Apple, Mozilla or Microsoft. The content of each message is encrypted so the push service cannot read it, but it can see when a message was sent and how big it was.
You can turn notifications off at any time in your browser or phone settings, or in your ShowThem.ai settings. When you do, we delete the subscription.
8. Cookies and local storage
We use only first party cookies and your browser's local storage, and only for things the service needs to work: keeping you signed in, keeping your session secure, and remembering settings you chose. We do not use them to track you or for advertising. Because they are strictly necessary for a service you asked for, the law does not require us to ask for consent, and you will not see a cookie banner. If we ever add anything that is not strictly necessary, we will ask first.
9. Security
We encrypt data in transit and store it with providers that encrypt data at rest. Access to user data is limited to the founders. We delete video as soon as we can because data we do not hold cannot leak. If a breach puts your data at risk, we will tell you and the relevant authority as the law requires.
10. Your rights
Under the GDPR and UK GDPR you have the right to:
- get a copy of your data;
- correct data that is wrong;
- have your data deleted;
- restrict how we use your data;
- get your data in a portable, machine readable form;
- object to how we use your data where we rely on legitimate interests;
- withdraw consent at any time, where we rely on consent, without affecting what we did before.
You can delete your account and all its data yourself in your account settings. For anything else, email hello@showthem.ai. We will answer within one month. We may ask you to confirm your identity first. It is free.
If you are unhappy with how we handle your data, please tell us first. You also have the right to complain to a data protection authority. In the EU, that is the authority in the country where you live or work. In the UK, it is the Information Commissioner's Office. In Israel, it is the Privacy Protection Authority.
11. Age
ShowThem.ai is for people aged 16 and over. We do not knowingly collect data from anyone younger. If you think someone under 16 has given us data, tell us and we will delete it.
12. Changes to this policy
If we change this policy in a way that matters, we will email you before the change takes effect and update the date at the top. Older versions are available on request.