1. Who is responsible?
Replay Method is an early-stage project operated by Rafael Westin in Sweden. For access, correction, deletion or other privacy questions, email contact@replaymethod.xyz.
2. What we collect
For a beta analysis we store your email, selected game, platform, rank and goal, player context you choose to provide, your match/replay/VOD link or uploaded Rocket League replay or gameplay video, optional notes, the resulting report, workflow status and any feedback. Evidence can contain gaming usernames or the names, voices and chat of other players; submit only material you are permitted to share. We also record referral data and basic funnel events with a temporary anonymous session identifier. Optional product-update consent is stored separately.
Private report ownership uses a one-time email verification token. After verification, an essential HttpOnly session cookie keeps your report history available on that device for up to 90 days. Only a one-way hash of each token is stored; these essential credentials are not used for advertising.
3. Why we use it
- Secure, parse and analyze the match evidence you requested us to process.
- Create, publish and improve your private Replay Method report and current training focus.
- Compare later matches when you choose to return.
- Notify you about report status when transactional email is available.
- Send product and beta-access updates only when you separately opt in.
- Measure the beta funnel, prevent abuse and improve reliability.
Analysis processing is based on your request and explicit submission consent. Optional marketing email is based on separate consent. Security and limited anonymous measurement rely on our legitimate interest in operating and improving the beta.
4. Who receives it
Data is available only to Replay Method and providers necessary for hosting, private file storage, automated replay, video or match processing, AI-assisted language synthesis, security and transactional email. The AI language layer receives compact structured findings rather than an entire raw replay or video where practical. Selected beta reports may be reviewed by an authorized Replay Method operator or expert reviewer for accuracy. We do not sell or rent personal data and do not publish a report or quote without separate permission.
5. How long we keep it
Beta submissions and reports are retained while needed to deliver the service, compare later reports and improve the method. We review inactive analysis data for deletion within 12 months. Raw uploaded replay and gameplay-video files may be deleted earlier when no longer needed. Waitlist records remain until you withdraw consent or they are no longer needed for beta and launch. You may request deletion at any time.
6. Cookies, browser storage and advertising
Replay Method uses an essential HttpOnly session cookie for verified report ownership. It expires after no more than 90 days and is not available to browser scripts. Our hosting and security provider may also set short-lived, strictly necessary cookies for bot detection and service protection. A temporary anonymous analytics identifier may live in session storage until you close the tab, and private report identifiers may be saved locally on the device that created them. We do not currently set advertising cookies or load advertising pixels. If that changes, this notice and any required consent control will be updated before the technology is enabled.
7. Your choices and rights
You may withdraw consent at any time. You may also request access, correction, deletion, restriction or portability of your personal data, and object where processing relies on legitimate interest. After email verification, My reports provides a machine-readable export and permanent account deletion. Deletion is held until an active paid period has ended so billing rights are not orphaned. You may always use the contact email instead. Withdrawing consent does not affect processing that was lawful before withdrawal.
8. International processing
Infrastructure providers may process data outside the European Economic Area. Where required, transfers must use recognized safeguards such as an adequacy decision or approved contractual clauses.
9. Complaints and changes
You may complain to the Swedish Authority for Privacy Protection, IMY. We may update this notice as the beta develops. Material changes affecting your choice will be communicated before they take effect.