PRIVACY POLICY
Last updated: April 19, 2026
1. Who we are
KIZUNA (“KIZUNA”, “we”, “us”) is a platform for recreational soccer players to build squads, record and share matches, and follow one another's games. This policy explains what information we collect and how we use it. Questions or requests? Email support@kizuna.soccer.
2. Scope
This policy covers the kizuna.soccer website and service. It does not cover third parties we link to or embed — in particular Veo, whose platform hosts the videos you watch through KIZUNA. Your use of Veo content is governed by Veo's own terms and privacy policy.
3. Information we collect
Account & profile. Email, display name, username, avatar emoji, jersey number, playing position, city, short bio, availability, preferred locale, timezone, quiet-hours window, and contact policy (who can send you message requests).
Authentication metadata. We use Better Auth to manage sessions. Each active session stores a session token, the IP address, and the user-agent string that created it. If you sign in with Google, we receive the OAuth tokens and the profile scope you approved.
Content you create. Teams, memberships, matches, scores, player tags, clip reactions, comments, challenges sent to other teams, saved clips, user-curated collections, coach profile fields (if you fill them in), and private contact messages.
Veo references. When you add a Veo match to KIZUNA, we store the Veo recording URL, Veo match ID, title, date, duration, thumbnail URL, highlight clip URLs, and the timeline metadata (including AI-generated tags) returned by Veo. We do not download, re-encode, or host the video itself. Video and thumbnails stream directly from Veo's CDN (c.veocdn.com) to your browser. If a recording is removed or restricted on Veo, it will stop playing on KIZUNA.
Referral attribution. When you arrive via a share link containing ?ref=<userId>, we store a short-lived kz_ref cookie. If you sign up within 30 days, we record that user as your referrer and clear the cookie. No other click, device, or behavioural tracking is attached.
Browser push (optional). If you enable notifications, we store the web-push endpoint and public keys your browser provides. You can revoke permission at any time from your browser settings.
Derived data. We compute weekly snapshots of your player attributes (pace, shooting, passing, dribbling, defending, physical, OVR) from match activity, and keep an internal log of notification deliveries for troubleshooting.
4. What is public vs. private
KIZUNA is partly a public directory. The following are visible to anyone on the internet, including people without an account:
- Team pages: badge, name, city, format, roster of active members, season record, recent matches.
- Player profiles: username, avatar, position, city, bio, aggregated stats, tier/OVR, clips you were tagged in, and public comments.
- Match pages: scores, timeline, highlight clips, full-game Veo stream, lineup, and comments.
- The coach directory, search results, and home-page aggregate counts.
The following are account-gated: your feed, inbox and direct messages, challenges, team-management screens, settings, notifications, saved clips, and private collections.
If you want less public exposure, you can keep your username blank (some surfaces will then hide you), keep your team closed, set your contact policy to off, or delete your account.
5. How we use information
To provide and operate the service, authenticate you, deliver notifications (respecting your quiet hours and preferences), rate- limit abuse, credit referrals, compute stats, and respond to support requests. We do not run advertising, we do not sell personal data, and we do not share it with third parties for their own marketing.
6. Cookies
We use only first-party cookies that are strictly necessary to operate the service. We do not use advertising, analytics, or cross-site tracking cookies.
| Cookie | Purpose | Duration |
|---|---|---|
| Session cookie (Better Auth) | Keeps you signed in | 7 days, refreshed every 24h |
kizuna_locale | Remembers your language choice | 1 year |
kz_ref | Holds a referrer user ID from a share link until signup | Up to 30 days; cleared on signup |
kz_pending_invite | Holds a team-invite token across signup/login | Short-lived; cleared after the invite is used |
7. Service providers
We rely on the following providers to run KIZUNA. Each processes data only as needed to deliver their piece of the service, and each has its own privacy policy:
- Veo — video recording, hosting, and highlight AI. All video playback is served from Veo.
- Google — optional OAuth sign-in.
- Vercel — application hosting and serverless functions.
- Neon — managed PostgreSQL database.
- Resend — transactional email (verification, password resets, notifications).
- Upstash — Redis-based rate limiting (when configured).
- Web-push gateways operated by your browser vendor (Apple, Google, Mozilla, Microsoft), if you enable push notifications.
8. Where data is processed
The application and database are hosted in the United States via Vercel and Neon. If you access KIZUNA from outside the United States, your information will be transferred to and processed there.
9. Retention
We keep your data while your account is active. Sessions expire automatically. Deleted comments are hidden from the app but retained in the database (soft-deleted) until the account is removed. Deleting your account cascades to your sessions, team memberships, matches you own, comments, reactions, tags, and saved clips. Veo recordings you added remain in place on Veo and are not deleted by us.
10. Your choices
You can update your profile, change your contact policy or notification preferences, unfollow users, block abusive accounts, leave teams, and delete your account from your settings. For access, correction, export, or erasure requests beyond what the UI provides, email support@kizuna.soccer.
11. Children
KIZUNA is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child under 13 has created an account, contact us and we will remove it.
12. Security
We use HTTPS with HSTS, scoped session tokens, rate limiting, and industry-standard hashing for credentials. No system is perfectly secure; if you believe your account has been compromised, contact us immediately.
13. Changes to this policy
If we make material changes, we'll update the “Last updated” date above and, where appropriate, send an in-app notice. Continued use of KIZUNA after a change means you accept the revised policy.