Privacy Policy

The website is operated under the name “Wave” in Queensland, Australia. References to “Wave”, “we”, “our” or “us” mean the operator of the Wave website.

Wave adopts the practices in this Policy as a transparency standard. Whether the Australian Privacy Act 1988 (Cth) and Australian Privacy Principles apply depends on the operator's circumstances and statutory exemptions. Where a mandatory privacy law gives a person greater rights than this Policy, that law prevails.

Wave collects and derives information from publicly accessible competition records, which may include:

• athlete name and public source profile identifier;
• academy or gym affiliation and belt information;
• event registration, division, age-class label and gi or no-gi category;
• opponents, match outcome, recorded method and event details;
• placement, medal and other published competition results; and
• derived totals, records, win rates, comparisons and recent form.

Wave does not intentionally collect athlete contact details, residential addresses, dates of birth, government identifiers, payment details, health records or private account information from source platforms.

When you access the website, Wave and its infrastructure providers may automatically process technical information needed to deliver and protect the service, including IP address, browser and device information, requested URL, referring page, approximate location derived from network information, timestamps, response status and diagnostic or security events.

Search terms and filters appear in request URLs and may therefore be included in server, CDN or security logs. Do not enter confidential or sensitive information into the search field.

Wave currently has no user accounts, comments, uploads or checkout facility. It does not use first-party advertising pixels, behavioural advertising or a dedicated analytics product.

Wave links to an external Buy Me a Coffee page for optional support. Wave does not collect or process card details. Buy Me a Coffee processes contributions under its own terms and privacy policy and may provide Wave with information a supporter chooses to share, such as a display name, message and contribution amount.

Wave obtains information through:

• public event, athlete, bracket and results pages published by competition platforms and organisers;
• automated collection processes that periodically retrieve and normalise those public records;
• calculations and associations derived from source records; and
• automatic website, network, hosting, database and security operations.

Wave does not use a login to obtain private competition-platform data. Publicly available information remains personal information where it identifies an individual and is handled accordingly.

Wave processes information to:

• provide searchable athlete, event, head-to-head and academy records;
• calculate and present competition statistics;
• link records that reasonably appear to concern the same athlete;
• update, correct, secure, troubleshoot and improve the website;
• detect misuse, automated abuse, fraud and security threats;
• maintain backups, logs and operational records; and
• comply with law, court orders and lawful government requests.

Wave does not use public competition records to make employment, credit, insurance, housing, health, eligibility or other high-impact decisions about athletes.

The central purpose of Wave is to publish an index of public competition records. Information shown on athlete, event, academy, search and comparison pages is available to any website visitor and may be indexed, cached, copied or archived by search engines and third parties.

Removing or changing information on Wave does not automatically remove copies already held by a search engine, archive, source platform or another third party. Those services have their own correction and removal processes.

Wave may disclose or make information available to:

• Vercel, which provides website hosting, content delivery, request processing and security;
• Supabase and its infrastructure providers, which provide database services;
• GitHub and related infrastructure used to run or maintain data collection and source code workflows;
• Iconify and its infrastructure providers, which may deliver icon assets to website visitors;
• Buy Me a Coffee and its payment providers, when a visitor chooses to support Wave externally;
• professional advisers, insurers, investigators or security specialists where reasonably necessary;
• a successor operator in connection with a reorganisation, transfer or sale of the service; and
• courts, regulators, law-enforcement bodies or other recipients where required or authorised by law.

Wave does not currently sell personal information, provide personal information to data brokers or use public competition records for targeted advertising.

The primary database may be hosted in Australia, but Vercel, GitHub, Supabase, Iconify, Buy Me a Coffee and their subprocessors may process or store information in the United States and other countries where they or their infrastructure providers operate. Those countries may have privacy protections different from Australia.

Provider locations and subprocessors can change. Wave uses established service providers and takes reasonable steps appropriate to the service, but cannot guarantee that every overseas recipient is subject to Australian privacy law.

Wave does not intentionally set cookies for accounts, advertising or behavioural profiling. Hosting, security or content-delivery providers may use strictly necessary cookies or comparable network mechanisms to prevent abuse, route requests or protect the service.

Browser “Do Not Track” signals are not standardised. Because Wave does not currently conduct behavioural advertising or cross-site profiling, it does not operate a separate Do Not Track response mechanism.

Wave is a general public information service and is not designed for children to create accounts or submit personal information. However, Wave currently indexes and publicly displays competition records from youth and children's divisions when those records are available from public source pages.

Youth records may include an athlete's name, academy, belt, age-class or division label, event attendance, opponent, match result, recorded method and placement. Wave does not intentionally collect dates of birth, school information, contact details or residential addresses. Source classifications may be missing, ambiguous or wrong, so Wave cannot reliably determine every athlete's age.

Information about a child must not be used to identify, contact, target, profile, shame or exploit the child. The handling of children's information will be reviewed as Australia's Children's Online Privacy Code is finalised and comes into effect.

Wave takes reasonable automated and technical steps to associate and calculate records, but it cannot guarantee accuracy. Common issues include duplicate names, changed academy affiliations, incomplete brackets, source corrections, delayed event updates and mistaken identity.

Correcting the original event or competition-platform record is generally the most effective way to correct the authoritative source. Wave does not promise that a source correction will be detected immediately or that previously indexed information will be automatically deleted.

Depending on applicable law, an individual may have rights to request access to, correction of or deletion of personal information, or to object to certain handling. Identity and authority may need to be verified before action is taken, particularly where a request concerns another person or a child.

Wave does not currently publish a direct request channel. If a privacy contact or request process is introduced, it will be published on this page. Until then, people should direct source-record corrections to the relevant event organiser or competition platform.

If the Privacy Act applies and a concern cannot be resolved directly once a contact channel exists, a complaint may be made to the Office of the Australian Information Commissioner. The OAIC generally expects a person to first give the relevant organisation a reasonable opportunity to respond.

Wave uses access controls, restricted write credentials, encrypted provider connections and other reasonable technical and organisational safeguards. No internet service or database is completely secure, and Wave cannot guarantee that unauthorised access, loss or misuse will never occur.

Where the Notifiable Data Breaches scheme or another mandatory breach law applies, Wave will assess and respond to eligible breaches as required by that law.

Public competition records and derived statistics may be retained while they remain relevant to the historical record, the operation of the service, dispute resolution or legal obligations. Technical logs, cached responses and backups are retained according to operational needs and provider schedules.

Information may persist for a limited period in backups, caches and search-engine copies after it is removed from the active website.

External platforms and linked websites have their own privacy practices. Wave is not responsible for how Smoothcomp, event organisers, search engines or other third parties collect, use, retain or disclose information.

Wave may update this Policy when the service, providers, data practices or law changes. The current version and effective date will remain available at this URL. Material changes apply prospectively unless law requires otherwise.