Privacy
What we know about you, and why.
This is film of children. That single fact set every decision below. Nothing about your family is for sale at any price, and no advertising or measurement code runs anywhere near your film, your athlete, or a coach's scout card. Two such tags do run — on the pages that sell the product and on the signup form, and nowhere else. They are named below, with the switch that turns them off. What follows is written against what the software actually does rather than what a template says.
Version 2026-09-25 · effective September 25, 2026
The short version
- We collect what the tool needs to build and send reels. Nothing extra, and nothing speculative.
- We do not sell or rent your data, ever, and no data broker receives any of it.
- Two measurement tags — Google Analytics and the Meta (Facebook) pixel — run on our marketing pages and the signup form. They report that a page was viewed and that a signup succeeded. They are on no page that holds your film, your athlete, your coaches, or a scout card.
- California counts that second one as "sharing" for advertising, so there is a switch: turn on Global Privacy Control in your browser and neither tag loads at all.
- Your film is not used to train anybody's model, ours or a vendor's.
- Reels you paid to make are kept for as long as your account is open. Raw footage you never cut clears itself after 30 days.
- You can download everything we hold, or delete the account outright, from your account pages.
What we collect
Your account
Email address, a hashed password (we never store the password itself), when the account was created, and — if you turn it on — two-factor settings and recovery codes. If you sign in with Google or another provider, we store the provider's identifier for you, not your password there.
We also keep a record of each sign-in: when it happened and by which door (password, passkey, a two-factor code, a linked provider) — nothing else, not where you signed in from. It exists so a sign-in that shouldn't have happened can be noticed, it is kept for a year, and it is included in your personal-data download.
The athlete's profile
Whatever you choose to enter: name, jersey number, position, school, class year, height, weight, wingspan, home state, age, GPA, NCAA ID, and social handles. Most of these fields are optional. They exist because a scout card without them is not much use to a coach — the GPA and NCAA ID in particular are there because coaches ask for them early.
Your film
The game video you upload, the frames extracted from it while you annotate, the annotation trace (which player, which action, your quality rating, your coach notes), and the finished reel. Plus the mechanics of the job: its status, progress, timings, which worker ran it, and any error.
Coaches you track
The coaches you add to your outreach board — name, role, program, email, phone, social handles, and your own notes — and a log of each touch: what stage the relationship reached and when. You enter this; we do not supply a contact database.
Scout-card and Showcase activity
When you send a coach a scout-card or Showcase link, we record that the link was opened, how many times, when it was first and last opened, and how much of the film was watched. That is what makes the interest signals on your board real rather than invented. It is tied to the link you sent, and it is the only thing on the page about a coach's own behaviour — no IP profiling, no fingerprinting, no third-party tracker riding along. Your own Showcase link, the one you copy or preview as a coach, records nothing.
Advisors you write to
If you write to a recruiting advisor from the directory, we keep the messages both of you send, which athlete the conversation is about, and a record of every time you switch one of the four sharing controls on or off.
Nothing about your athlete reaches an advisor until you switch it on. They are always shown the athlete's name, high school and graduating class — you chose to write, and a conversation about an anonymous athlete is not a conversation. Beyond that you decide separately, per advisor, whether they see the film, the measurables, the academics, and your school list. Switching one off removes it from their view immediately.
Three things are never shown to an advisor whatever you choose: the athlete's NCAA Eligibility Center identifier, your own contact details, and any AI grade of the film. Only the account owner can open one of these conversations, read it, write to it, or change what is shared — not the other logins on the account.
We keep the switch history because "did they ever see his GPA" is a question you may ask a year later, and the switches themselves only say what is true now.
Payments
Stripe handles the card. We never see or store a card number. What we keep is the membership record: which plan, its status, the period dates, your credit balance, and the Stripe identifiers that tie the two systems together.
Cloud connections
If you connect Google Drive or OneDrive to pull film in, we store the access token for that connection, encrypted at rest. It is used to fetch the file you pointed us at, and for nothing else. Disconnect it and the token is deleted.
Children
ReelTuna accounts are for adults. We do not knowingly let anyone under 18 open one, and we do not knowingly collect personal information directly from a child.
The athlete in the film, though, is usually a minor — that is the whole point of the product. Their information reaches us through their parent or guardian, who holds the account, decides what goes in the profile, and decides which coaches get a link. That parent or guardian may add a login for the athlete (and one for the other parent or guardian); those logins see the same account and remain the account owner's responsibility. Nothing about an athlete is public by default: a scout card is reachable only by the specific link you send, and you can revoke any link at any time.
If you believe a child's information is here without a parent's or guardian's involvement, write to support@beyond-ordinary.com and we will remove it promptly.
Who else ever sees it
A recruiting advisor you have written to sees whatever you have switched on for them, and nothing else. An advisor is an independent business paying to be listed here — not a subprocessor acting for us, and not someone we have checked. If you report a conversation, an operator reads the whole of it, including everything both sides wrote.
A short list, and it stays short deliberately. These are the only third parties any of your data reaches, and each one gets only the part it needs to do its job.
| Who | What reaches them | Why |
|---|---|---|
| Stripe | Your email and payment details, entered on Stripe's own form. | To take payment. They are the card processor; we are deliberately not. |
| Google Drive / Microsoft OneDrive | Only if you connect one: a request for the file you chose. | To pull your source video from where you already keep it. |
| Google (Gemini API) | Only if AI play analysis is enabled: short clips (or still frames) of single plays, cut from your original film without sound, with the athlete circled, and the athlete's position. When you ask for Showcase suggestions: clips of under ten seconds cut the same way, with any earlier AI grades and play labels. Never the full game file, never the finished reel (it has the athlete's name and school drawn on it), and never the athlete's profile, name, GPA, or contacts. | To produce the AI n/10 grades and Showcase play suggestions. We use a paid API tier specifically because the free tier permits training on submitted content, and this is footage of minors. |
| The configured text-model provider — one of Google (Gemini API), Anthropic (Claude API), or OpenAI (GPT API), chosen by the site operator | Only when a family on a plan clicks Suggest an opening in the outreach composer: the athlete's name, position, class year, high school and state, the height, weight and wingspan you entered and how they measure against the school's roster (and its rival's, if you picked one), how many players from your state are on that roster, the school's name, division, conference and offensive lean, the headline, source and date of a program news story if you picked one as your "why", whether a reel is attached, and the stats, honors, awards, camps and custom lines you wrote on his résumé. Never the coach's name or address, never your letter, never GPA, test scores, references, rankings, film or contacts. | To draft two or three sentences of the letter's opening for you to edit. Nothing comes back but the text, and we keep none of it — the letter you send is the only copy; our own log of the request records only that it happened and how it went, never its content. On Google this uses the paid tier for the same reason as above; all three providers are used under API terms that do not train on submitted content. |
| Serper (a web-search API) | Two things. For schools: the school's name or website — to find its roster, staff or statistics page when it isn't at the usual address, and its football news — never any personal data. For the résumé builder's research step, only when a family on a plan clicks Search: the athlete's name, high school, state and class year, as one search query. | To find the school's own pages and news, and to show a family what a coach finds when he searches their athlete. What comes back is a list of links with their titles and one-line descriptions; we open none of them, add none of them to the résumé on our own, and never search social sites. Those links stay on the athlete's row — the next search replaces the ones you did nothing with, and the ones you attached or put aside are kept as a record of that — until the athlete is removed. No search runs in the background. |
| Our mail server | Your email address and the message. | Account confirmations, password resets, and receipts. |
| Google Analytics | On the marketing pages and the signup form only: that a browser loaded the page, roughly where in the world it is, and what it is running. No account data, and nothing at all once you are inside the app. | To know which pages bring families here and which lose them. Google's privacy policy. |
| Meta (the Facebook pixel) | On the same pages and nowhere else: that a browser loaded the page, and — on the confirmation page — that a signup succeeded. It identifies a browser, not a person. We send no name, no email address, no athlete, no film, and no coach. The confirmation page's own address is stripped of its query string before the pixel is allowed to load, precisely so that the email address in it cannot travel along with the event. | To know which advertisements produce signups rather than clicks. This is the one thing on this page that California law counts as sharing for advertising — below is how to switch it off. Meta's privacy policy. |
Beyond that: nobody. No data brokers, no "partners", and no advertiser or measurement vendor ever receives anything about your athlete, your film, the coaches you write to, or the advisors you talk to — the two rows above are confined to the pages that sell the product and the signup form by an allowlist in the code, rather than by our remembering. If we are ever compelled by valid legal process, we will tell you unless we are prohibited from doing so.
Coach outreach never leaves through us — emails open in your own mail app, from your own address, so a coach's reply and your correspondence with them are between you and them. The two exceptions are the optional suggested opening and the optional research search above — each runs only when you click, sends only what the table says, and hands you back text or links that you decide about; nothing goes to a coach that you did not send.
How long we keep it
- A clip you spent a video on: kept for as long as your account is open — the reel, the source film behind it, and the extracted frames. You paid to make it, so we do not take it back. Keep your own copy of the source film regardless.
- Footage you never cut into a clip: 30 days, then it is cleared. Nothing was charged for it.
- A transfer that died before it reached processing: 7 days, then the partial file is cleared. Nothing was charged for it either.
- Job history: the record of a job (when it ran, what happened) stays in your account after its files are swept, so your history and quota accounting still make sense.
- Profiles, coach lists, and outreach history: as long as your account is open.
- Conversations with an advisor, and the sharing history: as long as the athlete they are about is on your account. They are your record of what was said to you and what you allowed, which is exactly what is needed if something goes wrong — so closing a conversation does not delete it, and neither does the advisor closing their account. Removing the athlete removes them.
- Payment records: as long as tax and accounting rules require, which outlives the account.
Your rights over your data
From your personal data page you can download everything we hold on your account, or delete the account and its data outright. You do not have to ask us, and you do not have to explain why.
Depending on where you live you may have further rights — to correct what is wrong, to object to a use, to ask for a copy in a portable form. Write to support@beyond-ordinary.com and we will honour them. We do not charge for this and we will not make you chase it.
If you live in California
Beyond Ordinary Software Solutions operates from California, and California law asks a commercial site to answer a few specific questions in its privacy policy. Here are the answers.
Do Not Track, and Global Privacy Control. We honour Global Privacy Control. A browser sending the GPC signal gets neither the Meta pixel nor the Google Analytics tag: they are not configured differently, they are not downloaded at all, and no cookie of theirs is set. That is a switch in the page itself rather than a preference we file away and promise to respect later, and it is the opt-out California, Colorado and Connecticut law asks us to offer. The older "Do Not Track" header we do not act on separately — it never acquired an agreed meaning, GPC covers the same ground, and saying we honour both when only one is wired would be the kind of sentence this page exists to avoid.
Selling or sharing. We do not sell your personal information. We never have, no money has ever changed hands for it, and there is no arrangement under which it could.
We do share it for cross-context behavioural advertising, in one narrow way we would rather state plainly than bury. The Meta pixel described above tells Meta that a browser loaded one of our marketing pages, and that a signup on it succeeded. What identifies that browser is Meta's own cookie, not anything we know about you: no name, no email address, no athlete, no film, no coach, no advisor. Meta may nonetheless connect that browser to an account it holds, and that possibility is exactly why California counts this as sharing rather than as nothing.
To opt out, turn on Global Privacy Control in your browser — some send it by default, others have a setting, and a few need an extension. We honour it, and with it set neither tag loads. There is no button here to do it instead, because a button would only set a cookie in the browser you are holding, and the signal works everywhere without one.
Your requests. You may ask what we hold, ask for a copy, ask us to correct it, and ask us to delete it. The first three are self-service from your personal data page; anything else goes to support@beyond-ordinary.com. We will not charge you, and we will not give you a worse price, a worse service, or a slower queue for having asked — exercising a privacy right costs you nothing here.
Shine the Light. We do not disclose personal information to third parties for their own direct marketing purposes, so there is nothing to request under Civil Code §1798.83.
How it is protected
Passwords are hashed, never stored in a readable form. Cloud access tokens are encrypted at rest. Service credentials live in an encrypted vault in the database rather than in a config file on disk. Scout-card links are unguessable tokens that you can revoke or set to expire. Every page that holds your data requires you to be signed in, and one account cannot reach another's jobs, players, or reels — the logins a family adds to its own account share that account and nothing beyond it.
No system is perfect, and we will not pretend otherwise. If we ever have a breach affecting your data, we will tell you what happened, what was involved, and what we did about it — promptly, and in the same plain language as the rest of this page.
The free roster fit check
Before signup, we store the position, height, weight, high-school graduation year, and comparison you request under a random browser identifier. We ask for no name or email. An encrypted, HTTP-only first-party cookie lets this browser return to the result for 30 days. Unsaved comparisons become inaccessible after 30 days and are removed by an hourly cleanup.
Choosing to save through registration, or saving while signed in, attaches that comparison to your family account. It then stays with the account, is included in your data download, and is removed when the owning account is deleted. Other browsers can recover it after you sign in.
We measure fit-check visits, submitted forms, completed results, and saves in our own database. For saved comparisons, we summarize later profile, school-list, film, coach-link, and membership activity to understand where the service helps. We retain only recognized traffic-source labels and configured campaign codes in a separate 30-day first-party cookie; arbitrary campaign text is discarded. Fit-check measurements and results are never sent to Google Analytics or Meta, and neither tag loads on the fit-check page. Our admin report contains aggregate counts, not athlete measurements.
Changes to this statement
This page carries a version and an effective date at the top. If we change something material — a new recipient of your data, a shorter retention window, a new category of collection — we will bump both and tell you by email before it takes effect.
What changed in this version. Two measurement tags: Google Analytics, and the Meta (Facebook) pixel that tells us which advertisements produce signups. Both are confined to the pages that sell the product and to the signup form; neither runs on any page holding your film, your athlete, your coaches or a scout card. Meta is a new recipient, and the pixel is the first thing on this site that California law counts as sharing for advertising, which is why this version carries a future effective date and an email rather than a quiet edit. Global Privacy Control switches both off, and is honoured from the same day.
Questions, or something here that does not match what you are seeing in the app? support@beyond-ordinary.com. Getting this page wrong is the kind of mistake we most want to hear about.
See also: the terms of service and open source licenses.