Privacy

Your name, email address, and — only if you enter them — your phone number, a self-rated skill level, a profile photo, your time zone, your gender, and how often you want to play. If you tell us which tournament divisions you want to be considered for, we store that too.

We never ask for your date of birth, and we never ask about religious or political affiliation.

If you host a court, we store its address, parking notes, and any gate code you provide. Addresses and gate codes are shown only to players with a scheduled reason to be there.

We keep an administrative audit log of privileged actions — score edits, role changes, venue approvals, account deletion. Those entries include your IP address and browser user-agent.

We use Supabase to store data, sign you in, and hold uploaded images; Resend to send league email (your sign-in link comes directly from Supabase, not Resend); Sentry to record errors; Cloudflare Turnstile to keep bots off the sign-in and access-request forms; Google, if you sign in with a Google account (doing so also fetches your profile photo once at sign-in); and Vercel to host the site and count page views. If you turn on push notifications, your browser's own push service — run by Google, Mozilla, or Apple depending on the browser — relays them; the contents are encrypted so that service cannot read them.

Error reports have known sensitive fields removed — address, gate code, phone, email, ZIP, parking notes — along with cookies, authorization headers, and IP addresses. We strip by field name, so we cannot promise that text embedded inside an error message is caught.

We do not sell your data and we do not share it for advertising.

Your first name, profile photo, and skill level are visible to other members of your league. Your last name, email, and phone are hidden from the member directory unless you switch them on in your profile. Commissioners of your league can always see your contact details, because they need them to run the league.

Your gender and division interest, if you set them, are never shown in the member directory. Only you, any system admin, and any commissioner of any league you belong to — not only the league you happen to be viewing — can see them, and only to check tournament division eligibility.

We use cookies to keep you signed in and to remember which league you are viewing. Our analytics does not use cookies and does not track you across other sites. Your theme choice and a couple of “don't show me this again” dismissals are stored in your browser and never sent to us.

If you subscribe to your match calendar, the link contains a secret token and is not password protected — anyone holding the link can see your match times, team names, and the venue name and city. You can reset the link from your profile at any time.

Deleting your account anonymizes your profile and immediately revokes your access. We clear your name, phone, skill rating, play frequency, and privacy settings, delete your profile photo, and delete your gender and division interest entirely rather than anonymizing them. Some records are retained: your email address stays reserved, and past notifications, audit entries, and messages you sent to other players remain. We do not erase everything, and we would rather say so than imply otherwise.

If you ask for access before you have an account, we store the name, email, and message you submit so a commissioner can respond.