What is stored

What it keeps

• The name you type when you join. Usually a first name. It is shown to everyone else in your league, because a league table is no use without names.
• A PIN. Stored as a bcrypt hash, never as the digits you typed. Nobody, including the person running the league, can read it back.
• Your results. Scores, who you played, when it was confirmed.
• Match arrangements you make: a date, a time and a court name if you enter one.
• An icon if you pick one for your profile.
• A phone number, if you give one. Some leagues ask for one and some do not. It does two things. It lets somebody else in your league message you to arrange a game, and it is how you get your leagues back on a new phone: you type the number, we text you a six digit code, and every league that number is in comes back. It is never shown to anybody holding only the join code, and it is not included in the backups, so a restore would lose it and everyone would enter theirs again.
• A text message, only when you ask for your leagues back. The code is sent through a messaging company and nothing else is sent with it. We keep a hashed copy of the code for ten minutes so it can be checked once, and a count of how many times a number has asked, so the code cannot be guessed. Both are deleted after that.

That is all a player record holds. No email address, no location, no analytics, no advertising identifiers and no cookies for tracking. Nothing is shared with anyone outside your league, apart from a phone number going to the messaging company at the moment it sends your code.

Where it lives

On Supabase, a hosted Postgres database, in their EU (Ireland) region. A copy of the data is backed up every six hours to a private repository so a league is not lost if something breaks.

Your browser stores your session locally so you do not have to sign in every time. Clearing your browser data removes it from your device.

The iPhone app

The app from the App Store is this same app, wrapped so it installs like any other. It keeps one thing the website does not: a notification token.

The website version stores the equivalent when you turn notifications on in a browser: a push subscription (an address and two keys your browser creates). It is used only to send the same notifications, and turning them off deletes it.

When you turn notifications on, your phone hands the app a device token from Apple. It is stored against your player record and used for one purpose: sending you notifications about your own matches. The draw, a score waiting to be checked, a time waiting to be agreed, a match nobody has logged. It is not an advertising identifier and it is never used to follow you anywhere.

Turn notifications off in the app and the token is deleted. Leave the league and it goes with the rest. Delete the app without turning notifications off and the token stops working, and it is dropped once Apple reports it as gone.

No analytics, no crash reporting, no adverts, no third-party trackers of any kind. Nothing about how you use the app is measured. Apple itself sees the token and the words of a notification while it is being delivered, because that is how notifications on an iPhone work.

Who can see it

• People in your league see your name, your team and your results, plus your phone number if you gave one. They have to be signed in as a player of that league: the join code on its own never opens a list of numbers.
• The person running your league can also reset your PIN and remove you.
• The person running Padeliga can see every league on the database.
• Nobody running the club sees your phone number. A club login can see the leagues, the tables and the fixtures, and never a number. It is not in the club's export either.

A club login is a separate thing from a player. It is an email address the club signs in with, and it is not joined to any player record. Clubs join on a free trial and may later pay for a plan, agreed directly with Padeliga rather than in the app. That changes nothing about what is stored or who can see it.

Be aware that names and league names are readable by anyone who has the app's address and knows where to look. Do not put anything in a name field you would not want seen. PINs and join codes are never readable this way.

Getting removed

Open the league, go to the League tab, and choose Delete me from this league. You type your own name to confirm and your player record is deleted immediately: name, PIN, phone number and the results you were part of. There is no undo and nobody has to approve it.

That takes you out of the league you are in. If you are in more than one, do it in each of them, because each league holds its own record of you and they are not joined up.

One thing to be straight about: the six-hourly backups are snapshots, and old ones are kept rather than pruned. Data you delete disappears from the app at once, but a copy of it stays in those private snapshots. Ask the person running Padeliga if you need it gone from those too.

Children

Padeliga is meant for adults arranging their own games. If a child is added to a league, that is for the adult running it to judge, and the same deletion route applies.

Asking about any of this

The person who runs your league can answer most things and can remove you themselves. For anything else, ask whoever sent you the link to the app.

To ask what is held about you, or to have it taken out of the backups as well as the app, email supportpadeliga@gmail.com.