Privacy policy
Last updated 10 October 2026.
This page explains what happens to your footage and your data specifically, because that's usually people's first question. Your match video is yours; we keep it only as long as your review needs it, and you can ask us to delete it at any time by writing to hello@pista.coach.
Who watches your footage
Your video is watched by your assigned coach and, where needed for quality or support, by Pista's operating team. We never share it outside the people directly involved in producing your review. You can choose to send one of the moments your coach talked you through to someone with a private link; anyone with that link can watch that one moment until you turn the link off.
Where your footage is stored
Footage is uploaded directly to our video hosting provider over an encrypted connection and stored there while your review is in progress. It is not stored on our own servers.
How long we keep it
Raw footage is deleted 30 days after your review is delivered. The moments your coach talked you through are kept as short clips, with your coach's voice and drawings on them, and stay in your account with your written review and drills until you delete them or your account. You can delete the kept moments at any time from your account page.
Marketing use is opt-in
We will never use your footage or review in marketing, on the website, or anywhere public unless you actively opt in. It is off by default, and you can withdraw consent at any time.
What we hold about you
Your account: your email address, the name you give us, the language you read the site in, and when you signed up. Your player profile, if you fill it in: your level and your answers to the level questions, your Playtomic level, how long and how often you play, the coaching you have had, your home club, your goals, what you think you do well and less well, any injuries you tell us about, and a profile photo. Your orders: what you bought and paid, the checkout notice you agreed to, what you asked your coach to look at, your questions to your coach and their answers, and your rating. Security records: the IP address and browser of each signed-in session, the IP address a sign-in link was asked for from, and the IP address recorded when you give or withdraw a consent. We never see your card details, which go straight to our payment provider. We do not sell personal data to anyone.
Why we hold it
Your account, profile, footage, orders and messages: to deliver the review you bought, which is the contract between us. Injuries are health information, so we hold them only with your explicit consent, given by choosing to fill that field in; your coach reads them so as not to prescribe a drill that hurts you, and you can empty the field at any time. Order and payment records: because tax and accounting law requires us to keep them. Security records: our legitimate interest in keeping your account and our forms safe from misuse. Using your footage or review publicly: only with your consent, as above.
When you ask for the example
If you ask us to send you the example review, we store the address you type, the language of the page, which form on the site you used, the campaign tags on the link you arrived from if there were any, the country your connection is in (a two-letter code from our hosting provider), and your IP address. We use them to send you the one email you asked for, to stop the form being used to send mail to other people, and to understand which campaigns bring people to us. The legal basis is a step you asked us to take, sending what you requested, and our legitimate interest in preventing misuse of the form and in understanding which campaigns work. Your IP address is deleted 24 hours after your last request, the record of the email we sent you after 7 days, and everything else 90 days after your last request. If you later buy a review with the same address, the campaign tags from your request are copied onto that order, so we know which channel brought you to us. Resend sends the email for us. We also record when you first open the emailed link (the link carries a random code for this purpose only). Afterwards you may optionally tell us your playing level and whether you are thinking of a review of your own match; these answers are stored with your request. If you tick “Email me offers for a review of my own match.”, we record the time and the exact wording you agreed to, as the record of your consent, and we will write to you about that and nothing else; you can withdraw at any time by replying to any of our emails or writing to hello@pista.coach. If you opted in, your request is kept until you withdraw or for two years, whichever comes first.
Counting visits
To understand which pages and campaigns bring people to Pista, our own server records simple events: that a page was viewed, that an order button was pressed or the example review was opened, and that a sign-in link was requested in order to place an order. Each event stores the page path, the site language, the campaign tags in the link you arrived from (utm_source, utm_medium, utm_campaign, utm_content, utm_term), the country derived from your connection (two letters, such as ES), and whether the device is a phone or a computer. It also stores a random visit code that exists only in the open browser tab and is discarded when you reload or close it. We set no cookie for this, store nothing on your device, do not record your IP address, and use no third-party analytics service. If you ask for the example review during that visit, the visit code is stored with your request so we can tell which campaign led to it. Events are deleted after 400 days.
Cookies and campaign tags
We do not use advertising or tracking cookies, and nothing on this site follows you to other sites. We set two cookies, both needed for the site to work: one keeps you signed in, for up to 30 days, and one remembers the language you are reading the site in, set on your first visit and changed when you pick another. The only campaign information we keep is what arrives with the example form, described above, and what is recorded on an order if you buy. It is never shared with an advertiser or used to follow you on other sites.
Who processes your data, and where
A small number of services run Pista for us, and each handles your data only on our instructions. Mux (United States) stores and plays your match video. Vercel (United States) hosts the website, running our servers in Frankfurt, Germany, and its file storage, in the European Union, holds your coach's recorded voice and reference pictures. Neon runs our database in Frankfurt, Germany. Resend (United States) sends our email. Whop (United States) takes your payment as merchant of record and handles your payment details under its own privacy policy. Telegram carries operational alerts to our own team; they identify an order by its reference and never carry your example-review address. Where a service is based outside the European Economic Area, the transfer relies on the safeguards that service provides for it, such as the European Commission's standard contractual clauses.
How long we keep each thing
Raw match footage: 30 days after your review is delivered. The moments your coach talked you through, your written review and your drills: until you delete them or your account. Your account and profile: until you delete your account. Order and payment records: for as long as tax and accounting law requires, with your name and email address removed if you delete your account first. Sign-in links, and the emails that carried them: 7 days after the link stops working, which is 15 minutes after it is sent. Signed-in sessions: they end after 30 days and the record goes 7 days later. A record of which emails we sent you stays with your account, so we can answer whether we told you something. The example review form: as set out above.
Your rights
You have the right to see the data we hold about you, to have it corrected, to have it erased, to restrict how we use it, to object to a use based on our legitimate interest, and to receive it in a portable form. You can download your data and delete your account yourself from your account page, or write to privacy@pista.coach for anything else. A request that reaches that address is answered by a person, not a form. Erasure keeps only what we must keep for accounting, as set out above. You also have the right to complain to the data protection authority in the European Union country where you live or work, though we would rather hear from you first.