Partners & Beneficiaries
View All Partners
Applicable to all competitors, registrants, viewers, and visitors, including data subjects in the European Union, the United Kingdom, and Brazil.
Version 1.1 · Effective July 1, 2026 · Last updated June 29, 2026
This Privacy Notice explains how Strike Fighter League Inc. (“SFL,” “we,” “us,” or “our”) collects, uses, shares, and protects personal data. It applies to our website at www.the-sfl.com, our competition platform, and all related services.
We comply with the EU General Data Protection Regulation (“EU GDPR”), Regulation (EU) 2016/679, for data subjects in the European Union; with the UK GDPR and the Data Protection Act 2018 for data subjects in the United Kingdom; and with Brazil’s Lei Geral de Proteção de Dados Pessoais (“LGPD”), Law No. 13,709/2018, for data subjects in Brazil. References to “GDPR” in this Notice mean the EU GDPR and the UK GDPR together. Where more than one regime applies, we apply the higher standard.
Please read this Notice together with our competitor agreement and any event-specific terms.
Strike Fighter League Inc., a Delaware corporation.
19 Waterside Drive
Beaufort, SC 29907
Privacy contact: [email protected]
LGPD Art. 41 requires a named person in charge of data processing (“encarregado”). Our appointed contact is: [Name / title / email]. Where required for the EU or UK, the same or a separate Data Protection Officer can be reached at [[email protected]].
As SFL is established outside the EU, EU GDPR Art. 27 may require us to designate a representative in the EU. Our EU representative is: [Name and EU address - to be appointed].
As SFL is established outside the UK, UK GDPR Art. 27 may require us to designate a representative in the UK. Our UK representative is: [Name and UK address - to be appointed].
Where required, our representative for Brazilian data subjects is: [Name and Brazil contact - to be appointed].
We collect the following categories of personal data:
We do not intentionally collect special-category data (GDPR Art. 9) or sensitive personal data (LGPD Art. 11). If any is required for a specific purpose, we will request explicit consent or rely on another valid legal basis.
During competitions and broadcasts we capture live microphone audio and radio communications, including active recording of competitors’ voices on team and tactical communication channels. Voice recordings can identify you and are treated as personal data; in some cases voice may constitute biometric data, which we process only with explicit consent or another valid basis. Our lawful basis for voice capture is your consent, and, for competitive-integrity and dispute-resolution purposes, our legitimate interests (Section 5). Before any event in which live voice is captured, we will tell you what is recorded, how it is used in the broadcast, and how long it is kept. You may decline or withdraw consent for non-essential capture; where live voice is integral to a specific competition format, we will explain the consequences of declining before you enter, and we will not penalize you for exercising rights that apply to non-essential processing.
We collect data directly from you (when you register, compete, communicate, or transact), automatically (through your use of our platform and website), and from third parties such as simulation platforms, payment processors, and broadcast partners.
Under GDPR and LGPD we must have a lawful basis for each processing purpose. The table below maps purpose, data, and basis under each regime.
| PURPOSE | DATA CATEGORIES | GDPR BASIS (ART. 6) | LGPD BASIS (ART. 7) |
|---|---|---|---|
| Account registration & competitor management | Identity, contact, login credentials, profile | Performance of a contract (Art. 6(1)(b)) | Execution of a contract (Art. 7, V) |
| Running competitions, scoring & rankings | Gameplay telemetry, ACMI/track files, scores, standings | Performance of a contract (Art. 6(1)(b)) | Execution of a contract (Art. 7, V) |
| Broadcast, streaming & promotion | Callsign, likeness, gameplay footage, commentary | Consent (Art. 6(1)(a)) / legitimate interests (Art. 6(1)(f)) | Consent (Art. 7, I) / legitimate interest (Art. 7, IX) |
| In-competition voice & microphone capture | Live microphone audio, radio/team comms, voice recordings | Consent (Art. 6(1)(a)); legitimate interests for integrity (Art. 6(1)(f)) | Consent (Art. 7, I); legitimate interest (Art. 7, IX) |
| Payments & prize disbursement | Name, payment/payout details, tax identifiers | Performance of a contract; legal obligation (Art. 6(1)(b),(c)) | Execution of a contract; legal obligation (Art. 7, II, V) |
| Anti-cheat, integrity & dispute resolution | Telemetry, device/anti-cheat signals, communications | Legitimate interests (Art. 6(1)(f)) | Legitimate interest (Art. 7, IX) |
| Marketing & fan communications | Contact details, engagement data | Consent (Art. 6(1)(a)) | Consent (Art. 7, I) |
| Security, fraud prevention & legal compliance | Log data, IP address, transaction records | Legal obligation; legitimate interests (Art. 6(1)(c),(f)) | Legal obligation; legitimate interest (Art. 7, II, IX) |
Where we rely on consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal. Where we rely on legitimate interests, you may object as described in Section 10.
Competition results, rankings, eligibility, and standing are determined in part by automated scoring of telemetry against a standardized rubric. GDPR Art. 22 and LGPD Art. 20 give you rights in relation to decisions based solely on automated processing that produce legal or similarly significant effects.
A human reviewer is involved in any decision that materially affects your standing, prizes, or eligibility, and you may request human review of, contest, and obtain an explanation of such a decision by contacting us. We will provide clear information about the criteria and logic applied, to the extent it does not compromise competitive integrity or trade secrets.
We share personal data only as necessary, with:
We do not sell personal data. We require all processors to act only on our instructions under a written data processing agreement.
SFL is based in the United States. When we transfer personal data from the EU, the UK, or Brazil to the United States or other countries, we use a recognized transfer mechanism:
You may request a copy of the relevant safeguards by contacting us using the details in Section 2.
We keep personal data only as long as necessary for the purposes set out in this Notice, then delete or anonymize it. Indicative periods:
| DATA CATEGORY | RETENTION PERIOD |
|---|---|
| Account & profile data | Duration of the account, then [X] months after closure unless a longer period is legally required. |
| Competition results, scores & rankings | Retained as a permanent competitive record; may be published indefinitely as part of league standings and history. |
| Gameplay telemetry / ACMI / track files | [X] months after the relevant event, unless retained for an open integrity or dispute matter. |
| Broadcast & promotional footage | Retained indefinitely as part of the published broadcast archive, subject to the rights granted in the competitor agreement. |
| Voice & microphone recordings | [X] months after the relevant event; raw comms audio deleted on this schedule unless retained for an open integrity, dispute, or broadcast-archive purpose. |
| Payment & tax records | [X] years, as required by applicable tax and accounting law. |
| Marketing consents & contact data | Until consent is withdrawn or after [X] months of inactivity. |
| Security & access logs | [X] months, unless retained for an active investigation. |
Subject to applicable law, you have the following rights. Under GDPR (EU and UK) these include the rights of access, rectification, erasure, restriction, portability, objection, and the right not to be subject to solely automated decisions. Under LGPD these include confirmation of processing, access, correction, anonymization or deletion, portability, information about sharing, and review of automated decisions.
Contact us at [[email protected]]. We will respond within one month under GDPR (extendable by two months for complex requests) and without undue delay under LGPD, providing confirmation and access within the statutory timeframe. We may need to verify your identity before acting.
If you believe your rights have been infringed, you may lodge a complaint with your supervisory authority:
| JURISDICTION | AUTHORITY | REFERENCE |
|---|---|---|
| EU - Italy | Garante per la protezione dei dati personali (Garante) | www.garanteprivacy.it |
| EU - Belgium | Gegevensbeschermingsautoriteit / Autorite de protection des donnees (APD-GBA) | www.gegevensbeschermingsautoriteit.be |
| EU - other | The data protection authority of your country of residence or work | edpb.europa.eu (list of authorities) |
| United Kingdom | Information Commissioner's Office (ICO) | ico.org.uk |
| Brazil | Autoridade Nacional de Protecao de Dados (ANPD) | www.gov.br/anpd |
Our competitions and services are intended for adults. We do not knowingly collect data from anyone under the age of [16 / applicable age]. Where a minor’s participation is permitted, we require verifiable consent from a parent or legal guardian as required by GDPR Art. 8 and LGPD Art. 14. If you believe a minor has provided data without proper consent, contact us and we will take appropriate action.
Our website uses cookies and similar technologies for functionality, analytics, and, where you consent, marketing. EU, UK, and Brazilian visitors are presented with a consent mechanism on first visit and may manage preferences at any time. See our [Cookie Policy] for details of each cookie, its purpose, and duration.
We maintain technical and organizational measures appropriate to the risk, including access controls, encryption in transit, and vendor due diligence. No system is perfectly secure; where a breach is likely to result in a risk to your rights, we will notify the relevant authority and, where required, affected individuals within the timeframes set by GDPR (Arts. 33-34) and LGPD (Art. 48).
We may update this Notice from time to time. The version number and effective date appear in the footer and on the cover. Where changes are material, we will provide prominent notice and, where required, seek renewed consent. Prior versions are retained and dated.
Questions about this Notice or our handling of your data: [email protected]. To reach our data protection contact, EU representative, UK representative, or Brazil representative, see Section 2.
Where Flight Becomes Sport.