Last updated: 2026-09-04
The controller for the processing described here is:
DojoMaster UG (haftungsbeschränkt)
Ossietzkystraße 23, 13187 Berlin, Germany
Represented by: Daniil Pavliuchkov, Geschäftsführer
Email: legal@dojomaster.app
Registered at Amtsgericht Charlottenburg, HRB 285716 B. Full company details are in our Impressum.
This matters for knowing whom to contact about which data.
We are the controller for our website visitors, and for the account holders who sign up to DojoMaster — the school owners, administrators and instructors who use the software.
We are a processor for the member records a school keeps inside DojoMaster: students' names, attendance, belt history, payment mandates and related data. For that information the school is the controller and decides what is stored and for how long. We process it only on the school's instructions, under a data processing agreement.
If you are a student or a parent and want to access, correct or delete a member record, please contact your school directly — we cannot act on that data without their instruction, and we will refer such requests back to them.
Our hosting providers record technical data needed to deliver the site, including your IP address, the page requested, timestamp, referring URL and browser user agent. This is necessary to operate and secure the site.
Legal basis: Art. 6 (1)(f) GDPR — our legitimate interest in delivering a functioning, secure website.
We set one cookie of our own before you make any choice: dm_consent, which records whether you accepted or declined analytics. It stores only the word granted or denied, is set on .dojomaster.app so your choice carries across our website and the application, and expires after 180 days.
Legal basis: § 25 (2) TDDDG — strictly necessary to provide the service you requested, namely honouring your consent choice.
You can withdraw or change your choice at any time by deleting your browser cookies for dojomaster.app, which makes the banner appear again.
If — and only if — you accept, we use Google Analytics 4 (measurement ID G-LT7ZWBDVXM) to understand how visitors find and use our website. We have configured it as follows:
Legal basis: Art. 6 (1)(a) GDPR — your consent. Withdrawing it is as easy as giving it, and has no effect on anything else.
To provide the software we process the account holder's name, email address, password (stored only as a hash), school details, language preference and the records entered into the application.
Legal basis: Art. 6 (1)(b) GDPR — performance of our contract with you.
Paid plans are processed by Stripe. Card details are entered directly with Stripe and never reach our servers. We receive the subscription status and the information needed for invoicing.
Where a school uses DojoMaster to collect its own members' fees by SEPA Direct Debit, we act as a processor for that data on the school's behalf — see section 2.
Legal basis: Art. 6 (1)(b) GDPR, and Art. 6 (1)(c) for statutory retention of accounting records.
Transactional email — invitations, password resets, notifications and summaries — is sent through Resend. It receives the recipient address and message content for delivery.
Some optional features use Anthropic models to interpret content you choose to submit: importing an event from a URL, reading a photographed examiner list, and drafting waiver text. Only the content needed for that one request is transmitted, when you trigger the feature. It is not used to train models.
Legal basis: Art. 6 (1)(b) GDPR — performing a feature you asked for.
Our pages currently load typefaces from Google Fonts servers, which transmits your IP address to Google when a page loads.
Legal basis: Art. 6 (1)(f) GDPR — presenting the site consistently.
| Processor | Purpose | Location |
|---|---|---|
| Supabase | Database, authentication, file storage | EU (Ireland) |
| Vercel | Application hosting | EU / global edge |
| Webflow | Marketing website and blog hosting | USA |
| Google Ireland Ltd. | Analytics, fonts | EU / USA |
| Stripe | Subscription payments | EU / USA |
| Resend | Transactional email | USA |
| Anthropic | AI-assisted features | USA |
Each acts on our instructions under a data processing agreement (Art. 28 GDPR).
Some processors above are in the United States. Those transfers rely on the EU–US Data Privacy Framework where the recipient is certified, and otherwise on the European Commission's Standard Contractual Clauses with supplementary measures. You may request a copy of the safeguards from us at any time.
dm_consent cookie.DojoMaster is sold to martial arts schools, and schools may record members who are minors. We never collect that data directly from a child. It is entered by the school, which is the controller and is responsible for having a lawful basis — normally parental consent or its contract with the family.
Accounts may only be created by adults.
Under the GDPR you have the right to access your data (Art. 15), have it corrected (Art. 16) or erased (Art. 17), to restrict processing (Art. 18), to data portability (Art. 20), and to object to processing based on legitimate interest (Art. 21).
Where processing relies on consent, you may withdraw it at any time without affecting the lawfulness of processing before withdrawal.
To exercise any of these, contact legal@dojomaster.app. If the request concerns a member record held by a school, see section 2.
You also have the right to lodge a complaint with a supervisory authority. Ours is:
Berliner Beauftragte für Datenschutz und Informationsfreiheit
Alt-Moabit 59–61, 10555 Berlin
https://www.datenschutz-berlin.de
We update this policy when our processing changes. The date at the top always reflects the current version.
Legal basis: Art. 6 (1)(b) GDPR.