Privacy policy

Last updated: 26 March 2026

1. Data controller

The controller of personal data collected through the ObstacleStudio service is Obstacle Studio.

For any questions about protecting your data, you can contact us at: support@obstaclestudio.app.

2. Data collected

When you use the Service, we may collect the following data:

  • Identification data: last name, first name and email address (through Google, Sign in with Apple or an email sign-in link).
  • Course data: show jumping courses created and saved by users (obstacles, paths, markers and arena configurations).
  • Payment data: processed exclusively by Stripe. We do not store any banking details.
  • Browsing data: usage measurement carried out by ObstacleStudio itself and recorded in its own database, with no third-party tool: pages opened and gestures in the editor, session duration, browser and type of device, language, referring site and campaign.
  • Measurement identifier: only with your consent, a random identifier goes with usage events (pages opened, gestures in the editor); it is linked to your account when you sign in. Without your consent, these events are recorded without an identifier or any link to your account.

3. Purposes of processing

Personal data is collected for the following purposes:

  • Creating and managing user accounts.
  • Providing the Service (saving and loading courses).
  • Managing subscriptions and payments.
  • Improving the Service through anonymised usage analysis.
  • Communicating with users (support and service notifications).

4. Legal basis (GDPR)

Your data is processed on the following legal bases:

  • Performance of a contract: providing the Service requires processing certain data (accounts and saved courses).
  • Consent: for sending marketing communications, where applicable.
  • Legitimate interest: for improving the Service and preventing fraud.
  • Legal obligation: for retaining certain data required by regulations.

5. Retention period

Personal data is retained for as long as necessary for the purposes for which it was collected:

  • Account data: retained throughout use of the Service, then deleted within 12 months after the account is deleted.
  • Course data: retained while the account is active. Deleted at the user's request or after account deletion.
  • Billing data: retained for the mandatory statutory period (10 years).
  • Browsing data: deleted automatically after 24 months.
  • Measurement identifier and usage events: automatically deleted after 24 months.

6. Users' rights

Under the General Data Protection Regulation (GDPR), you have the following rights:

  • Right of access: to obtain confirmation that your data is being processed and receive a copy.
  • Right to rectification: to request correction of inaccurate or incomplete data.
  • Right to erasure: to request deletion of your personal data.
  • Right to data portability: to receive your data in a structured, commonly used format.
  • Right to object: to object to the processing of your data on legitimate grounds.
  • Right to restriction: to request restricted processing in certain cases.

To exercise these rights, contact us at: support@obstaclestudio.app.

You also have the right to lodge a complaint with the CNIL (France's national data protection authority).

7. Cookies

The Service uses cookies strictly necessary for the application to operate (authentication and user sessions).

Audience measurement is carried out by ObstacleStudio itself, with no cookie and no third-party tool; with your consent, its identifier is stored in your browser.

No advertising or third-party tracking cookies are used.

Your answer to the audience measurement banner is kept in your browser. You can change it at any time through the “Audience measurement” link at the bottom of the home page or in your account menu.

8. Processors and data transfers

We use the following processors to operate the Service:

Processor Purpose Location
Google OAuth Authentication EU / US (standard contractual clauses)
Apple Sign In Authentication EU / US (standard contractual clauses)
Stripe Payments and billing EU / US (standard contractual clauses)

Application data (user accounts and courses) is hosted on servers located in Europe.

9. Data protection contact

For any questions about protecting your personal data, you can contact us:

We undertake to respond within 30 days.