Privacy policy

What it keeps about a player

• The name you type when you join. Usually a first name. It is shown to everyone else in your league, because a league table is no use without names.
• A PIN. Stored as a bcrypt hash, never as the digits you typed. Nobody, including the person running the league, can read it back.
• Your results. Scores, who you played, when it was confirmed.
• Match arrangements you make: a date, a time and a court name if you enter one.
• A match group link, if somebody makes one. Anyone in a match can add a WhatsApp group link to it, so the four of you can open the same chat. Only the link is stored. The messages are in WhatsApp, not in Padeliga.
• An icon if you pick one for your profile.
• A phone number, if you give one. Some leagues ask for one and some do not. It lets somebody else in your league message you to arrange a game, and with your PIN it is how you sign in to your leagues on a new phone. It is never shown to anybody holding only the join code, and it is not included in the backups, so a restore would lose it and everyone would enter theirs again.

No analytics, no advertising identifiers and no cookies for tracking. Your location is used only on the website's Leagues map, and only if you let your browser share it (Use my location or Near me). Your phone uses it to sort clubs by distance. It is never sent to Padeliga or saved. The iPhone app has no map and never asks for your location.

What a league can also hold

• Your level, if the league asks for one, such as a Playtomic level. Only you, the person running the league and the club see it.
• Whether you have paid the entry fee, if there is one. Padeliga never takes the money. It only keeps the tick you or the organiser puts in.
• A short note if you ask for a partner. People in your league can see it, so somebody can pair up with you.
• A keep apart list, if the person running the league keeps one, so two people are not drawn together. Only they and the club see it.
• The league's history feed: who joined, paired up, played and left, with names.
• The clubs you follow, if you follow any, so the app can tell you about a new league there.

If you tap I would join a league here on the map, Padeliga counts a random id your phone makes against that venue. No name or number goes with it.

Event nights

A club or organiser can run a one day event, such as an Americano, from the Padeliga console. Players do not sign up or use the app for it. The organiser types in each name and, if they choose, a level, M or F for a mixed event, and a phone number.

• The phone number is seen only by the organiser's own console logins. It is never on a public page.
• Anybody with the event's link sees the names, the draw, the times and the scores, and can read any level or M or F typed in.
• The club's page can list upcoming events with the places left, but no names.
• A log of changes on the night is kept for the organiser, with the name of the login that made each one.

Deleting an event with no scores removes it and its names. An event with scores is cancelled instead, and kept so its results stay. To have your name taken off an event, ask the organiser or email hello@padeliga.co.uk.

An account, if you make one

An account is optional. It lets your leagues follow you to a new phone and lets you join a new league in one tap. It holds:

• Your email address. You sign in with it and a six digit code we email you each time. There is no password. The code is sent through an email delivery company (Resend), and nothing else is sent with it.
• A display name and an icon for your profile.
• Which of your leagues belong to it, so they come back when you sign in on another phone.
• Who can see your profile, the setting described below.

Without an account you sign in to a league with your phone number and PIN, or with its join code, your name and your PIN.

Your profile, and who can see it

With an account you have a profile: your display name, when you started playing, how many matches you have played, won and lost, your leagues with your record in each, and your recent results. You choose who can open it, in You, then Settings:

• People I play. Anybody who shares a league with you.
• A link. Anybody who has your profile link. People in your leagues can still open it from a league.
• Nobody. Your profile is yours alone.

Whichever you pick, your results still count in every table, and people in your league still see your name and your results there.

Reports and blocks

A report stores what you wrote, the reason you picked, who it is about and, where there is one, a copy of the thing you reported so it survives being deleted. It is kept for the person running Padeliga to look into. Nothing you report is shown to the person you reported.

A block stores who blocked whom. You stop seeing their profile, and they stop seeing yours. It does not stop the app telling either of you about a match you are both in.

Where it lives

On Supabase, a hosted Postgres database, in their EU (Ireland) region. A copy of the leagues, players, pairs, matches and history feeds is backed up every six hours to a private repository so a league is not lost if something breaks. The backups never hold phone numbers, PINs, account emails or event nights.

Your browser or the app stores your session on your phone so you do not have to sign in every time. Clearing your browser data, or deleting the app, removes it from your phone.

On this website

• The padel leagues directory sends the postcode or place you type to postcodes.io, a free UK postcode service, to find where it is. Use my location only runs when you tap it, and your location stays in your browser. The map is drawn by OpenFreeMap, with the map code loaded from jsDelivr. Padeliga stores none of it.
• The forms, to sign up a club or to add or update a league in the directory, send what you type, such as your name, email and phone number, to Padeliga through Netlify, so Padeliga can reply.

No analytics and no cookies for tracking on this website either.

Companies that help run it

• Supabase holds the database, in their EU (Ireland) region.
• Resend delivers the emails: your sign-in codes, and the morning email a club's staff can choose to get about what is waiting for them, which can include players' names.
• GitHub runs the job that sends notifications, and holds the six-hourly backups in a private repository.
• Netlify serves the website and the app's pages. Like any website host, it sees your connection's IP address.
• Apple delivers notifications to iPhones. On the website, your browser's own push service delivers them instead (Google's for Chrome, for example).
• OpenFreeMap draws the map on the website's Leagues tab, and postcodes.io looks up a postcode you search. Both see your connection's IP address and the area or postcode asked for.

The iPhone app and notifications

The app from the App Store is this same app, wrapped so it installs like any other. It keeps one thing the website does not: a notification token.

The website version stores the equivalent when you turn notifications on in a browser: a push subscription (an address and two keys your browser creates). It is used only to send the same notifications, and turning them off deletes it.

When you turn notifications on, your phone hands the app a device token from Apple. It is stored against your player record and used to send you notifications about your own matches (the draw, a score waiting to be checked, a time waiting to be agreed, a match nobody has logged), a message or an entry fee reminder from the person running your league and, unless you switch them off, a new league going up at a club you follow or play at. Padeliga keeps a short record of which notifications it sent you. The token is not an advertising identifier and it is never used to follow you anywhere.

Turn notifications off in the app and the token is deleted. Leave the league and it goes with the rest. Delete the app without turning notifications off and the token stops working, and it is dropped once Apple reports it as gone.

No analytics, no crash reporting, no adverts, no third-party trackers of any kind. Nothing about how you use the app is measured. Apple itself sees the token and the words of a notification while it is being delivered, because that is how notifications on an iPhone work.

Player ratings (PadelLevels)

Confirmed doubles results are sent each night to PadelLevels (padellevels.io), so the people playing can get a padel level worked out from the matches they actually play.

• What is sent. For each confirmed result: the date and time, the league and club, the score, and for each of the four players their name and a Padeliga player number. A score that is corrected is sent again, and one that is taken back is sent as removed.
• Your name stays hidden. Every player is sent as private, so PadelLevels does not show your name. Your result still counts towards a level.
• Never sent. Phone numbers, emails, PINs, messages, levels you gave, or anything from test leagues.

To object, or for a club to stop its leagues being sent, email hello@padeliga.co.uk.

Who can see it

• People in your league see your name, your team and your results, plus your phone number if you gave one. They have to be signed in as a player of that league: the join code on its own never opens a list of numbers.
• The person running your league can also reset your PIN and remove you.
• The person running Padeliga can see every league on the database.
• The club running your league can see your phone number if you gave one, so staff can reach you about your matches. It is not in the club's export. The club never sees your account email.
• Anybody with your league's public page link, if the club running it turns one on: the table, the fixtures, names and confirmed scores. Never phone numbers, PINs or levels.

A club login is a separate thing from a player. It is an email address the club signs in with, and it is not joined to any player record. A club can change its own name and venue. Padeliga is free for clubs and players. If we add optional paid extras later, a club only pays for them if it chooses to, on terms agreed with Padeliga Ltd before it uses them, rather than in the app. That changes nothing about what is stored or who can see it.

Be aware that names and league names are readable by anyone who has the app's address and knows where to look. Do not put anything in a name field you would not want seen. PINs and join codes are never readable this way.

Getting removed

From one league. Open the league, go to the League tab, and choose Delete me from this league. You type your own name to confirm and it happens straight away, with no undo and nobody to approve it. Your PIN and phone number go, and you are taken out of the league. Matches you already played stay, so the tables still add up, and your name stays on them and in the league's history. To have it taken off those too, email hello@padeliga.co.uk. If you are in more than one league, do it in each of them.

Your whole account. In You, then Settings, choose Delete my account under Leave, at the end. Your account, email and stats go. You are taken out of every league you play in. Matches you already played stay, so the tables still add up, but your name on them is replaced. If you are the only admin of a league, you are asked to make somebody else an admin first, so the league carries on.

One thing to be straight about: the six-hourly backups are snapshots, and old ones are kept rather than pruned. Data you delete disappears from the app at once, but a copy of it stays in those private snapshots. Email hello@padeliga.co.uk if you need it gone from those too.

How long it is kept. A league, with its old seasons, stays until the person running it deletes it. Your part in it stays until you remove yourself or delete your account. Reports and blocks stay until they are removed. There is no fixed end date yet for the backups or for reports.

Children

Padeliga is meant for adults arranging their own games. If a child is added to a league, that is for the adult running it to judge, and the same deletion route applies.

Who is responsible, and your rights

Padeliga Ltd decides what is kept and why (it is the data controller). Registered in England and Wales, company number 17513865. Registered office: Parsonage Farm Barn, Parsonage Farm, Frilsham, Thatcham, RG18 9UY.

Why it is kept. Your name, PIN, results, match arrangements, phone number, account and profile are kept to run the leagues and events you take part in, which is what you asked for. Notifications and your location on the map are used only when you switch them on, and you can switch them off at any time. Results are sent to PadelLevels, names hidden, because Padeliga has a legitimate interest in giving players a level from the matches they play. Backups, reports, blocks and the history feed are kept because Padeliga has a legitimate interest in not losing leagues and in keeping players safe.

Your rights. You can ask for a copy of what is held about you, have it corrected or deleted, ask for it in a file you can take elsewhere, object to how it is used, or ask for its use to be limited. The person who runs your league can sort out most things and can remove you themselves. For anything else, email hello@padeliga.co.uk and you will get an answer within one month.

If you are not happy with the answer, you can complain to the Information Commissioner's Office at ico.org.uk/make-a-complaint or on 0303 123 1113.