Last updated: 25 April 2026
Fieldframe ("we", "us", "our") is operated by SIA Fieldframe, based in Ventspils, Latvia, European Union. Fieldframe is a B2B SaaS platform for sports photographers. You can contact us at support@fieldframe.app.
Account data: When you register, we collect your email address and a hashed password. We also store your display name if you provide one.
Payment data: Payments are processed by Stripe. We store a Stripe customer ID and subscription status. We never see or store your full card number.
Event and photo data: Photos you upload are stored in Cloudflare R2 object storage. Metadata (file names, upload timestamps, detected jersey numbers) is stored in our database.
Gallery visitor data: When a visitor searches a public gallery, the search query (a jersey number or name) is processed server-side. We do not store individual search queries or identify gallery visitors.
Usage data: We may collect basic server logs (IP address, user agent, timestamp) for security and debugging purposes. These are not linked to identifiable individuals and are retained for a maximum of 30 days.
Analytics: We use Plausible Analytics, a privacy-first tool that does not use cookies and does not collect personal data. Aggregate page-view statistics are collected.
We use the minimum cookies necessary to operate the service:
Authentication cookie / localStorage token: A JWT token stored in browser localStorage to keep you logged in. This is strictly necessary: the site cannot function without it. It is not used for advertising or tracking.
Stripe cookies: During checkout, Stripe sets cookies required for fraud prevention and payment processing. These are set by stripe.com, a third-party processor. Stripe's own privacy policy applies.
No advertising or tracking cookies. Fieldframe does not use Google Analytics, Facebook Pixel, or any advertising networks. Plausible Analytics (our analytics tool) is cookieless.
By using Fieldframe, you consent to the use of the strictly necessary authentication token and Stripe's payment-processing cookies during checkout.
We are based in the EU and process personal data under the following legal bases:
Photos you upload may depict identifiable individuals (athletes, participants). As the photographer and account holder, you are the data controller for those images. Fieldframe acts as a data processor on your behalf.
You are responsible for ensuring you have a lawful basis to upload and share photos of individuals (for example, consent from athletes or clubs, or a legitimate interest in sports event photography).
Gallery links can be shared publicly. You can protect galleries with a PIN to restrict access. You can delete events and photos at any time from your dashboard; deletion from our storage typically completes within 24 hours. Photos are also automatically deleted after a fixed retention period (see section 9 below).
Fieldframe offers the option to sign in using your Google account. When you choose this option, we request access to the following data from Google:
Data accessed: - Email address: used to identify your Fieldframe account and send transactional emails (account confirmation, billing receipts) - Name: used as your account display name - Google account ID: a unique identifier used internally to link your Google identity to your Fieldframe account
We request these fields via the standard OAuth 2.0 scopes: openid, email, and profile.
Data usage: We use this data solely to create and authenticate your Fieldframe account. Your email address may be used to send transactional service emails (e.g. billing receipts). We do not use Google user data for advertising or marketing purposes.
What we do not access: We do not access your Google Drive, Gmail, Google Photos, contacts, calendar, or any other Google services or data beyond the three fields listed above.
Data sharing: Your Google user data is not shared with any third parties. It is stored in our secure database and used only for the purposes described above.
Data retention and deletion: Google user data is stored for as long as your Fieldframe account is active. If you delete your account, all associated data including your Google account ID is permanently deleted within 30 days. You can unlink Google Sign-In and request data deletion at any time by contacting support@fieldframe.app.
Fieldframe's use of Google user data complies with the Google API Services User Data Policy, including the Limited Use requirements.
We do not sell your personal data. We share data only with the following sub-processors as necessary to operate the service:
All sub-processors are contractually bound to process data only as instructed and to maintain appropriate security measures.
Some of our sub-processors are based outside the EU/EEA (e.g. US). Where data is transferred outside the EU, we rely on Standard Contractual Clauses (SCCs) or equivalent mechanisms as provided by those processors. Stripe, Google, Anthropic, SendGrid, Vercel, and Railway all offer EU data processing agreements or SCCs.
Depending on your location, you have the following rights:
EU/EEA and UK residents: - Right of access: request a copy of data we hold about you - Right to rectification: correct inaccurate data - Right to erasure ("right to be forgotten") - Right to restriction of processing - Right to data portability - Right to object to processing based on legitimate interests - Right to lodge a complaint with your supervisory authority (in Latvia: Datu valsts inspekcija, www.dvi.gov.lv)
California residents (CCPA): - Right to know what personal information is collected - Right to delete personal information - Right to opt out of sale of personal information (we do not sell data) - Right to non-discrimination for exercising your rights
To exercise any of these rights, email us at support@fieldframe.app. We will respond within 30 days.
We use industry-standard security measures including HTTPS everywhere, hashed passwords (bcrypt), JWT authentication, and access controls on all storage. Photo files are stored in private Cloudflare R2 buckets with signed URLs for access. No system is perfectly secure; if you discover a vulnerability please contact support@fieldframe.app.
Fieldframe accounts are for photographers aged 18 and over. We do not knowingly collect personal data from children. Photos uploaded may depict minors in the context of sports events; the uploading photographer is responsible for ensuring they have appropriate consent or a lawful basis for those images.
We may update this policy from time to time. Material changes will be notified by email to registered users at least 14 days before they take effect. The "last updated" date at the top of this page will always reflect the current version.
For any privacy questions or to exercise your rights:
Email: support@fieldframe.app Entity: SIA Fieldframe, Ventspils, Latvia, EU