Privacy Policy
fencing.ru — live fencing competition service
Effective date: 16 June 2026
1. Who we are
This service is operated by Sole Proprietor Sergei Tikhomirov (registered in the Russian Federation, registration number (OGRNIP) 317774600222831), referred to below as "we", "us", or the "Service".
Contact for privacy matters: support@fencing.ru.
This policy explains how we process personal data of visitors, tournament organizers, and competition participants, in line with the EU General Data Protection Regulation (GDPR) where it applies, and with Russian Federal Law No. 152-FZ "On Personal Data".
2. Controller and processor roles
- For your data as a user of the Service (an organizer's e-mail address, technical data of visitors), we act as the data controller.
- For data of competition participants (athletes, referees, coaches, team captains) entered into the Service by a tournament organizer, the organizer is the data controller, and we act as a data processor on the organizer's documented instructions (the Terms of Service constitute the data-processing terms). The organizer is responsible for the lawfulness of the data, for informing participants, and for obtaining any required consents — including consent to the public publication of results and, for minors, the consent of a parent or legal guardian.
3. What data we process
Tournament organizers:
- e-mail address (provided voluntarily when creating a competition, to receive access links);
- technical data (below).
Competition participants (entered by the organizer):
- full name;
- date (year) of birth;
- region, sports club / organization;
- sports rank / title, age category;
- coach's name;
- competition results (bout scores, placements, participation status).
Referees and team captains: full name and competition role; captains are identified by an access link only.
All visitors (technical data):
- IP address, browser and device information (User-Agent);
- a random visitor identifier (the
fpidcookie — section 7); - action logs when competition data is edited (audit trail of changes);
- cookies (section 7).
Source of the data (Art. 14 GDPR). Participants' data is obtained not from the data subjects themselves but from the tournament organizer, who enters it into the Service (the organizer receives it from competition entry applications or, where the integration is used, from the ZenFencing platform). An organizer's e-mail address and visitors' technical data are collected directly from the person concerned.
We do not process special categories of data (health data, biometrics, etc.). A medical withdrawal of an athlete is recorded only as a sporting status, without any health details. We do not profile users, do not make automated decisions with legal effects, and do not sell personal data.
4. Purposes and legal bases
| Purpose | Data | Legal basis (GDPR) |
|---|---|---|
| Providing the Service: creating and running competitions | organizer e-mail, technical data | Art. 6(1)(b) — contract |
| Sending the organizer an e-mail with access links | organizer e-mail | Art. 6(1)(b) — contract; sent only if requested |
| Running the competition protocol (start lists, draws, brackets, live scoring) | participant data | Processing on the controller-organizer's instructions (Art. 28) |
| Public publication of competition progress and results | participants' names and sports data; for official tournaments also region/club/rank/year of birth/coach | Organizer's instructions; the organizer obtains participants' consent to publication |
| Processing payments for paid features and issuing fiscal receipts | payer's e-mail (phone), payment details (amount, date, plan; card data never reaches us) | Art. 6(1)(b) — contract; Art. 6(1)(c) — legal obligation (Russian fiscal law) |
| Security, abuse prevention, audit logs of edits | technical data | Art. 6(1)(f) — legitimate interest |
| Interface preferences (language, form values) | functional cookies | Art. 6(1)(b)/(f) |
| Website analytics — measuring traffic and improving the Service | anonymous technical data (page views, referrer, browser/device type, approximate region) | Art. 6(1)(f) — legitimate interest |
5. Sharing and recipients
We share personal data only with:
- our e-mail (SMTP) provider — to deliver the competition-creation e-mail to the organizer (no participant data is included in such e-mails);
- our payment provider — Tochka Bank (OOO "Bank Tochka", internet acquiring; fiscal receipts via its "Tochka Cheki" service) — and the fiscal data operator — when paid features are purchased: processing the payment and issuing the fiscal receipt required by Russian law. Only the data minimally necessary for the payment and the receipt is shared: the payer's e-mail (or phone number), the amount, and the payment purpose. Card data is entered on the payment provider's page, is handled solely by the provider, and never reaches us;
- the ZenFencing platform — only when the organizer uses the ZenFencing integration: receiving participant lists and user roles, and pushing final results upon the organizer's explicit action;
- public authorities, where required by applicable law.
Competition pages (live protocol, start lists, brackets, results) are public by design and visible to anyone with the link — this is the core function of the Service. An organizer may enable private mode (where available on their plan): the competition is then excluded from the public competition list and reachable only via a direct link, though anyone holding the link can still view it. The organizer decides what participant data is published and is responsible for participants' consent to publication. The same public competition data may also be published on the partner platform's resources — zenfencing.ru.
Tournament organizers may additionally publish competition results on their own channels (websites, social media, etc.). They do so as independent controllers and are responsible for obtaining participants' consent covering those channels.
There are no advertising networks and no third-party analytics. Website analytics is self-hosted on our own server (analytics.fencing.ru): it works without cookies, collects only anonymous data (page views, referrer, browser/device type, approximate region derived from the IP address without storing it), does not profile individual users, and is not shared with third parties. There are no external CDNs and no fingerprinting on the Service.
6. International data transfers and storage location
The Service and its databases are hosted in the Russian Federation; we do not transfer personal data to servers outside Russia.
Russia is not covered by an EU adequacy decision. If you access the Service from the EU/EEA or take part in a competition run on the Service, your data will be processed on servers located in Russia. We rely on:
- Art. 49(1)(b) GDPR — the transfer is necessary to perform the contract (running and publishing the competition you take part in or organize); and
- the technical and organizational safeguards described in section 9.
If you do not agree to this, please do not use the Service or ask your organizer not to enter your data.
7. Cookies
We use functional cookies only. There are no advertising cookies; the website analytics described in section 5 works without cookies.
| Cookie | Purpose | Lifetime |
|---|---|---|
fpid | a random visitor identifier used strictly for security and abuse prevention (e.g. investigating offensive content entered into a competition protocol and restricting the offender); contains no personal details and is not used for advertising or analytics | 1 year |
lng | interface language | 1 year |
bp_onboarding | marks that the onboarding hint for the «Боевая практика» (Practice) mode has already been shown, so it is not shown again | 1 year |
storedLocation, storedWeapon, storedGender, storedCategory, storedSendMail, storedUserEmail | remembering competition-creation form values on your device | 90 days |
pref_weapon, pref_gender, pref_cat, pref_email | remembering your last competition-creation choices (weapon, gender, category, email) to prefill them next time | 1 year |
zenToken, hasSession, refreshToken | login session for the ZenFencing integration (only if used) | up to 1 year |
The browser's localStorage (keys prefixed fencing_) stores interface preferences on your device only; it is not sent to the server. Since only strictly functional cookies are used, no consent banner is required; you can delete or block cookies in your browser settings (some features, such as language selection and login, may stop working).
8. Retention
- Competition data (including participant data) is retained for as long as the competition exists in the Service: results have lasting sporting and archival value. Organizers can remove individual participants; full deletion of a competition can be requested at support@fencing.ru.
- Technical logs (IP, User-Agent, edit history metadata) are retained for no longer than 12 months, then deleted or anonymized.
- The organizer's e-mail address is retained for as long as the related competition exists.
9. Security
We use HTTPS encryption in transit; role-based access control; HttpOnly/SameSite session cookies; masking of access keys in logs; rate limiting and brute-force protection on access keys; strict input validation and size limits; an origin allow-list (CORS); and restricted administrative access.
10. Your rights
Subject to applicable law (GDPR Articles 15–21; Russian 152-FZ Chapter 3), you have the right to: access your data; rectify inaccurate data; erase your data; restrict or object to processing; data portability; withdraw consent at any time (without affecting prior processing); and lodge a complaint with a supervisory authority (in the EU — your local data protection authority; in Russia — Roskomnadzor).
To exercise your rights, contact support@fencing.ru. If your request concerns participant data of a specific competition, we will forward it to the organizer (the controller) or fulfil it in coordination with the organizer. Please include enough information to identify you and the competition. We respond within one month (GDPR) or 10 business days (152-FZ), whichever applies.
11. Children
The Service is not intended for self-registration by children. Data of minor athletes is entered by tournament organizers, who are required to obtain the consent of a parent or legal guardian before doing so and before any publication.
12. Changes
We may update this policy. The current version is always available at https://fencing.ru/legal/privacy?lng=en. Material changes will be announced on the Service.
