CourtSide (“we”, “us”) is operated by [operator legal name / trading name — fill in before publishing], based in [operator country — fill in before publishing]. This policy explains what personal data we collect through CourtSide, why, and what rights you have over it. It applies whether you're a club owner, staff member, player with a login, or a roster entry a club has added.
The short version
- We collect account details (email), club/player details clubs enter about their members, and basic technical logs.
- We don't sell your data, and we don't currently run any advertising or marketing trackers.
- When a club uses CourtSide to run their nights and tournaments, the club controls what happens to their members' data — we process it on their behalf. See “If you're a club member (not an account holder)” below.
- Cookies are covered separately in our Cookie Policy.
Who this policy covers, and in two roles
CourtSide handles two kinds of personal data, and we wear a different hat for each:
- Your account. If you sign up for CourtSide yourself — to run a club, join as staff, or link your own player profile — we're the controller of your account data (email, password, login history) under UK/EU GDPR. This section of the policy is about that.
- Club and member data. If a club enters your name, contact details, gender, or match results into their roster, or you register for a tournament, the club is the controller of that data and we're their processor — we store and process it only on the club's instructions, under a data-processing arrangement with them. If you have a question about how a specific club uses your data, they're the right first point of contact; we'll also help via support@court-side.pro.
What we collect
Account holders
- Email address and password (password is handled by our authentication provider, Supabase Auth — we never see it in plain text).
- Which clubs you're a member/owner/staff of, and your role.
- The club you last had open, so the app can take you back there.
- An accent colour preference, if you set one (stored in your browser only, not sent to us).
Club and roster data (club is the controller — see above)
- Club profile: name, contact email, phone, address, logo.
- Member roster: name, membership tier, self-reported gender (optional), join date and last-active note.
- Match, session, queue and tournament results tied to a member's roster entry.
- Tournament registrations submitted directly by a player: first/last name, email, gender, and a doubles partner's name/email if entered.
- A record of significant actions taken in a club's dashboard (e.g. a member removed, a score corrected), including the acting staff member's email at the time — kept as an accountability log even if that person's access is later removed.
Technical data (everyone)
- IP address, kept briefly to rate-limit abuse of public pages (e.g. tournament registration, shared results links) — not linked to your account and not used for tracking or analytics.
- Standard web server/hosting logs from our infrastructure providers (see “Who we share data with”).
- Aggregated, cookie-free page-view counts — see Cookie Policy.
Why we process it, and our legal basis
- Providing the service (account creation, running club nights/tournaments, displaying results) — necessary to perform our contract with you or the club.
- Security and abuse prevention (rate limiting, audit logs) — our legitimate interest in keeping the service working and clubs' data safe.
- Cookies that aren't strictly necessary — only with your consent. See Cookie Policy.
- Contacting you about your account (e.g. password reset, a club invite) — necessary to perform our contract.
Who we share data with
- Supabase — our authentication and database provider, hosted in the EU/UK. They process data strictly on our instructions as a sub-processor.
- Vercel — hosts the application and provides cookie-free, aggregated page-view analytics (see Cookie Policy).
- We don't share data with advertisers, and we don't sell personal data. If that ever changes, we'll update this policy and, where cookies/trackers are involved, ask for consent first via our cookie banner.
Our infrastructure runs in the EU/UK, so most processing doesn't involve an international transfer. Where a provider processes data outside the UK/EEA, they do so under an approved transfer mechanism (such as Standard Contractual Clauses).
How long we keep it
We keep account and roster data for as long as the account or club is active. You can delete your own account at any time from Settings; a club owner can delete their club the same way. Either action immediately marks the record as removed and hides it from normal use, and a scheduled process permanently erases it within 30 days — except a limited record we keep for accountability, fraud-prevention, or legal reasons (for example, an audit-log entry of an action already taken, which is only removed once the club it belongs to is itself erased, or a rate-limit counter, which is discarded automatically within minutes to hours regardless).
Deleting your account removes your login only — it doesn't touch a club's own roster/match data, which the club controls (see “Who this policy covers” above). If you own a club, you'll need to transfer ownership or delete it first.
Children and minors
Creating a CourtSide account (to run or staff a club, or log in as a player) requires confirming you're 16 or older. Junior players can still take part without one of their own: a club can add them straight to its roster, and a tournament's public registration form (which supports age-category entries, e.g. U15) can be completed by a parent or guardian on a junior's behalf — that form asks for this confirmation explicitly. We don't knowingly let a child create their own login.
Your rights
Depending on where you live, you may have the right to:
- Access the personal data we hold about you, and get a copy of it.
- Correct inaccurate data, or ask us to delete it.
- Object to or restrict certain processing.
- Withdraw cookie consent at any time (see Cookie Policy).
- Lodge a complaint with your local data protection regulator (in the UK, the ICO; in the EU, your national supervisory authority).
For account data, contact us directly at support@court-side.pro. For data a club entered about you, we'll help you reach the right club, or action the request on their behalf where we're able to.
Security
We use industry-standard measures — encrypted connections, access-controlled hosting, and row-level restrictions on our database — to protect the data we hold. No system is completely secure, and we can't guarantee absolute security.
Changes to this policy
We'll update the “Last updated” date above whenever this policy changes, and post the new version here.
Contact
Questions about this policy or your data: support@court-side.pro.