Okinawa Kobudo Library is operated by Intrepid Cryptid Pty Ltd (ACN 701 394 078), a company based in New South Wales, Australia, for TY Kobudo. Contact: admin@intrepidcryptid.com.au
| Data | Purpose |
|---|---|
| First and last name | Identity and account management |
| Email address | Account access and communications |
| School/dojo affiliation | Membership verification |
| Teacher/sensei name | Membership verification |
| Belt/grade level (optional, if set by user) | Profile personalisation |
| Terms of Service and Privacy Policy acceptance timestamps | Consent recording |
| Browser type, device, and usage data | Platform improvement and analytics |
| Server request logs: IP address, request path, timestamp | Security monitoring and error diagnosis |
No payment card details are collected or stored by Intrepid Cryptid. Donation payment data is processed directly by Stripe.
We do not sell personal data. We do not disclose personal data to third parties for marketing purposes.
To operate the platform, your data is processed by the following infrastructure providers acting as data processors:
| Provider | Role | Location |
|---|---|---|
| Supabase | Database — stores account and profile data | AWS ap-southeast-2, Sydney, Australia |
| Vercel | Hosting and file storage — processes standard web request logs and stores profile images | Global CDN |
| Cloudflare | Video storage and delivery — stores the training videos and serves them to signed-in members, processing standard request logs | Oceania storage, global network |
| Resend | Email delivery — sends account, approval and notification emails to your email address | Subject to Resend's Privacy Policy |
| Stripe | Payment processing — handles voluntary donation payments | Subject to Stripe's Privacy Policy |
Supabase, Vercel, Cloudflare and Resend do not use your data for their own purposes. Stripe processes only donation payment data and is not provided with other personal information. Each provider operates under their own Data Processing Agreement or Privacy Policy.
Data may also be disclosed to comply with legal obligations or in the event of a business transfer or merger.
Your account data is stored in Supabase's ap-southeast-2 region (Sydney, Australia). For Australian members, this means your data remains onshore. International members' data is also stored in Sydney; transfer protections appropriate to the destination country apply where required.
Profile images are stored by Vercel, and your email address is passed to Resend when an email is sent to you. These providers may process that data outside Australia under the agreements described in section 5.
Membership is generally restricted to adults. A head teacher may register a member under 18 at their discretion; in that case, the head teacher is responsible for having obtained appropriate parental or guardian consent before registration. Intrepid Cryptid does not independently verify member age.
The platform uses session and authentication cookies necessary for the service to function. Usage analytics may be collected to improve the platform. No advertising cookies, tracking pixels, or third-party analytics are used. You may disable cookies in your browser settings; some features may not function as a result.
Data is retained while your account is active or as required by applicable law. To request deletion of your account and associated data, contact admin@intrepidcryptid.com.au. Requests will be actioned within 30 days.
Under the Australian Privacy Act 1988 you may:
To exercise any of these rights, contact admin@intrepidcryptid.com.au.
This service is operated from Australia and is governed by Australian privacy law. If you are located in the European Union or European Economic Area, the General Data Protection Regulation (GDPR) may apply to you and may grant additional rights, including the right to data portability, the right to object to processing, and the right to lodge a complaint with your local supervisory authority.
EU/EEA residents may use the platform. Where GDPR applies, the lawful basis for processing your personal data is legitimate interests (operating a private educational platform for authorised members) and, where required, your explicit consent given at registration. We are not yet actively marketing to EU residents; before doing so, this Privacy Policy will be updated to fully address GDPR requirements including appointment of an EU representative where required.
The "Last updated" date at the bottom of this page reflects the current version. We will post a notice when material changes are made.
Privacy enquiries and data deletion requests: admin@intrepidcryptid.com.au
Office of the Australian Information Commissioner: oaic.gov.au
Last updated: 24 October 2026
Terms of Service