Legal IOC · NOC · ARISF · AIMS recognised

SportsSports-Veritas phoenixVeritas

The record of record for practitioner sports

Privacy Statement

Version 2026-10-2 · Updated 29 September 2026

This statement explains how NxtStride Finland Oy handles personal data on Title.Stream and Sports-Veritas.com. If anything is unclear, write to us and we will answer.

Who we are

NxtStride Finland Oy (Business ID 3456649-1), Fastarbyvägen 89, 10520 Tenhola, Finland, is the controller of the personal data described here.

Contact for all privacy matters: [email protected]

Supervisory authority: Office of the Data Protection Ombudsman (Tietosuojavaltuutetun toimisto), tietosuoja.fi.

What this statement covers

  • Title.Stream: the federation-issued record of championships, records and awards, and the console federation staff use to declare them.
  • Sports-Veritas.com: articles about those achievements, built from the athlete's own words and the federation's official record.

The two sites are connected. When a federation declares an achievement on Title.Stream, the athlete may be invited to comment, and their comments become the basis of a Sports-Veritas article. This statement describes that whole flow in one place.

Athlegit and Outkomia have their own privacy statements.

Whose data we process, and what

Athletes named in a declaration. Name, nationality or competing designation, the achievement (type, level, category, date), the event and the federation. The federation may also give us the athlete's email address so we can invite them to comment. We receive this from the federation. We do not buy it or collect it from anywhere else.

Athletes and officials who respond to an invitation. What you write, the photo you choose to send (if any), the name of the photo's copyright holder, your answer to the age question, and a record of your consent: when you gave it, and which version of the notice and of this statement you saw. Officials may also confirm or correct their name and title.

Federation staff. Name, email address, role, federation, and a log of actions in the console (for example, who approved a declaration or an article). A reviewer who approves an article is named as its author on Sports-Veritas.

People mentioned in articles. Officials and others quoted by name, as supplied by the federation or by themselves.

Visitors. The technical data needed to serve the sites securely, such as IP address in server logs and browser type. With your consent only, analytics data about how Sports-Veritas pages are used.

We process personal data under the following legal bases within Article 6(1) of the GDPR.

Public interest — Article 6(1)(e)

The processing of achievement data is carried out in the public interest. Federations recognised by the IOC, NOCs, ARISF, and AIMS are entrusted with governing competition and publishing official achievements. When those results exist only as transient administrative records, the public interest in authentic, discoverable, and persistent records of athletic achievement is not served. Our platforms fulfil a function that neither the federations nor mainstream media currently provide at scale: the structured, indexed, permanent publication of competition results in sports where no alternative exists.

This legal basis applies to the processing of athlete names and competition results that are already in the public domain through federation publication.

Legitimate interest — Article 6(1)(f)

We rely on legitimate interest for the processing of website visitor data for platform security, federation and contributor data for platform operation and quality assurance, and the distribution of achievement data through search indexing, data licensing, and API access, where this serves the broader recognition mission.

Our legitimate interest assessment considers that the data subjects are athletes competing in organised, sanctioned competition who have a reasonable expectation that their results will be published; that the processing is limited to data already in the public domain; that the processing directly serves the interests of the data subjects by making their achievements discoverable; and that we do not use the data for purposes unrelated to sports recognition.

Contract performance — Article 6(1)(b)

We rely on contract performance for the processing of federation staff data where necessary to deliver services under a Federation Services Agreement.

Consent — Article 6(1)(a)

We rely on consent only where specifically required, such as for optional newsletter subscriptions or direct communications not related to an existing contractual relationship. Where we rely on consent, you may withdraw it at any time by contacting us at [email protected].

In addition:

  • What you write and the photo you send are used on the basis of your consent (Art. 6(1)(a) GDPR). You can withdraw it at any time; see Your rights.
  • Analytics on Sports-Veritas are used only with your consent (Art. 6(1)(a) GDPR), given through the choice at the bottom of each page.

We do not sell personal data, we do not serve targeted advertising, and we do not build profiles of readers.

How we use AI

Sports-Veritas articles are drafted by an AI system. A named person at the federation then reviews, edits and approves each one. Nothing is published by the AI on its own.

What the AI receives:

  • the declaration (athlete name, nationality, achievement, event)
  • the federation's name, and up to five sport-context documents the federation has uploaded
  • quotes from officials
  • the athlete's own words
  • the photo, if one was sent

What it does not receive: email addresses, account data, or anything about readers.

What it does:

  • writes a draft article, a headline and search-engine descriptions
  • translates any non-English input into English
  • if there is a photo, writes one caption sentence describing only what is visible

It is instructed never to invent quotes, and never to describe ethnicity, body type, emotion, brands or sponsor logos.

Where it runs: Mistral AI language models, provided through Google Cloud Vertex AI in the EU region europe-west4 (Netherlands). Google processes this data on our behalf.

No automated decisions about you. The AI does not decide whether an achievement is recognised, whether an article exists, or what is published. People at your federation make those decisions.

More detail, written for readers: How articles are made (sports-veritas.com/how-articles-are-made/).

Who receives the data

The public. Declarations on Title.Stream and approved articles on Sports-Veritas are public, and are indexed by search engines and AI answer engines. That is their purpose.

Social platforms. When a declaration is published, we post a short announcement to our accounts on Bluesky, Facebook and Threads. The post contains the athlete's name, the achievement, a link, and the photo with its credit if there is one. Those platforms decide for themselves how they handle what appears on their services.

Service providers acting for us:

Provider What for Where
Google Cloud / Firebase (Google Ireland Ltd) Hosting, database, file storage, sign-in, cloud functions, AI processing EU: database in the eur3 multi-region (Belgium and the Netherlands), functions in Belgium, AI in the Netherlands
Twilio SendGrid Sending invitation and sign-in emails United States (see International transfers)
Google Analytics Visitor statistics on Sports-Veritas, only with your consent Google (including the United States)

International transfers

Most processing happens in the EU. Where a provider processes data outside the European Economic Area (currently SendGrid for email delivery, and Google for analytics if you accept analytics), we rely on the European Commission's standard contractual clauses in the provider's data processing terms. Published pages are, by their nature, accessible worldwide.

How long we keep data

Data Kept for
Published declarations on Title.Stream Permanently, as the official record, unless the federation corrects or redacts them
Published articles on Sports-Veritas Permanently, unless redacted
What you wrote and your photo As long as the article that uses them is published, or until you withdraw consent
Consent records As long as the contribution they relate to is published, and afterwards for as long as needed to establish, exercise or defend legal claims
Invitations that were never answered Deleted automatically 10 days after they expire
Staff accounts and review history For the duration of the federation's agreement; the name on an approved article's byline stays with the article
Server and security logs 30 days
Analytics 2 months

Your rights

You can ask us for a copy of your data, or ask us to correct it, delete it, or restrict or object to its use. Where we rely on your consent, you can also receive it in a portable format. Write to [email protected]. We answer within one month. Complex requests can take up to three months, in which case we will tell you why within the first month.

Withdrawing consent. If you gave us your words or a photo and change your mind, tell us. We will remove them from the article without undue delay. Withdrawal does not affect what was lawfully published before it.

Achievement records. The federation is responsible for the official record, so corrections to a result or a declaration are made by the federation. We pass your request on and carry out the federation's decision.

The right to erasure is not absolute. For achievement data processed in the public interest under Article 6(1)(e), we may decline erasure requests where the processing remains necessary for the public interest purpose. Competition results are part of the authenticated historical record of the sport, and their removal would undermine the integrity of that record for all stakeholders. We assess each request individually and on its merits.

You can also complain to the Data Protection Ombudsman in Finland, or to the supervisory authority where you live.

Children

The interview form asks every athlete whether they are 18 or older. If an athlete answers that they are under 18, we store nothing they write or send, and we let their federation know that a parent or guardian's permission is needed first.

Where a federation declares an achievement by an athlete under 18, the declaration is published as the federation issued it. A parent, guardian or the athlete can ask for the name to be shortened; we will agree this with the federation.

Cookies

Essential cookies keep staff signed in and the sites secure. They are always on.

Analytics cookies are set on Sports-Veritas only if you choose "Accept analytics" in the consent dialog. If you decline, Google Analytics is not loaded and no analytics cookies are set. You can change your choice at any time with "Cookie settings" in the footer. Title.Stream does not use analytics cookies.

Security

Accounts are created by invitation only, and staff sign in with an emailed link. Roles are separated: the person who declares an achievement cannot also approve it. Data is encrypted in transit and at rest, and hosted in the EU. If a personal data breach puts your rights at risk, we will notify the Data Protection Ombudsman within 72 hours and tell you without undue delay.

Changes to this statement

Each version carries a version number and date. When we change it in a way that affects why or how we use your data, we will say so on both sites before the change takes effect. Every consent is recorded against the version of this statement shown at the time.

Contact

NxtStride Finland Oy · Fastarbyvägen 89, 10520 Tenhola, Finland · Business ID 3456649-1 · [email protected]