Privacy policy

Last updated:

OpenStreetlifting collects public competition results into a searchable archive. If you compete, your results may appear here even if you have never used the site.

To correct your data, remove your Instagram link, or ask to be taken off the site, email [email protected]. Please keep privacy requests out of public GitHub issues and Discord messages.

Data controller

Adrien Pelfresne is the data controller for OpenStreetlifting. Contact: [email protected].

Personal data

Athlete records come from results published by federations, organisers, competition platforms, and public posts, or supplied by contributors. Competition pages link to sources where available. Records can include:

  • Your name, including its original script, sex category, and country.
  • Competitions entered, dates, locations, divisions, and weight classes.
  • Bodyweight, attempts, best lifts, totals, placings, scores, and participation status.
  • A public Instagram handle, when an account has been matched to you.

The site also calculates rankings and performance comparisons. Some missing bodyweights are estimated from published scores and marked as recovered in the data.

Emails contain your address and the information you send. GitHub contributions display your public account and contribution history.

Legal basis

I rely on legitimate interests under Article 6(1)(f) of the GDPR to preserve competition results, connect an athlete’s performances across events, and make the sport’s record accessible. Instagram links help readers find an athlete’s public account.

The same basis applies to answering enquiries and managing contributions. Handling privacy requests and maintaining the removal record relies on legal obligations under Article 6(1)(c).

Data sharing

Athlete data is public through the website, API, downloads, and GitHub repository. Search engines can index it, and people worldwide can copy it. The CC0 licence does not affect your data protection rights.

OVH hosts the service, database, and analytics on a VPS in France. GitHub hosts the public repository. Public copies may be held outside the European Economic Area.

Privacy-request emails are handled privately.

Website analytics

You can browse without an account. Servers receive connection information, including your IP address and browser details, to deliver pages and protect the service, on the basis of legitimate interests under Article 6(1)(f).

When enabled, self-hosted Umami measures visits to help me understand how the site is used. It can record pages, referral sources, browser and device details, and approximate location. Its standard tracker uses no cookies.

GDPR rights

Subject to the conditions of the GDPR, you have the following rights:

  • Information about processing and access to your personal data (Articles 12–15).
  • Rectification of inaccurate or incomplete data (Article 16).
  • Erasure of your personal data (Article 17).
  • Restriction of processing (Article 18).
  • Information about recipients notified of rectification, erasure, or restriction (Article 19).
  • Portability of data you provided, where processing is automated and based on consent or contract (Article 20).
  • Objection to processing based on legitimate interests, on grounds relating to your particular situation (Article 21).
  • Withdrawal of consent where processing relies on it (Article 7(3)).
  • Protection against solely automated decisions with legal or similarly significant effects (Article 22).
  • Notification of a personal data breach posing a high risk to your rights and freedoms (Article 34).

Athlete-result publication relies on legitimate interests. You can object to that processing.

Removal requests

Email [email protected] with your athlete-page link or competition details and the change you are requesting. Requests are handled in accordance with Article 12 of the GDPR.

Name removal

The procedure replaces your name with a numbered label, such as “Redacted Athlete #7”, and removes your original-script name and Instagram link. Once published, the change appears on the website, API, and fresh downloads, and the old named profile is removed.

Competition details, sex category, country, bodyweight, and results remain. These may still identify you when compared with other sources. Name removal is pseudonymisation; a request for erasure may require further action.

A public removal record contains a keyed fingerprint of your name, matching details, and the replacement number to help prevent republication. The key is kept separately. The record remains personal data.

The procedure does not automatically remove earlier Git revisions, downloaded copies, source results, or search-engine caches. Requests affecting those copies are assessed under the GDPR, including the notification duties in Articles 17(2) and 19.

Data retention

Competition results have no scheduled expiry: they form the sporting archive. Continued retention remains subject to your GDPR rights.

Removal records are kept while needed to prevent your name from being republished through future imports.

Complaints

You may lodge a complaint with the CNIL or another competent supervisory authority (Article 77).