How we handle your data

Who is responsible

The data controller is Aleksandr Shibaev, a private individual: there is no company behind the app, and RacketDay is the name of the product. The organizer of a tournament answers for their own purposes: for entering your contact into a lineup, and for their own announcements. You may lodge a complaint with the supervisory authority of your country; in Portugal, where the first tournaments are held, that is CNPD.

What is collected

Only what a tournament cannot be run without, and what you added to your profile yourself.

• Your account: first and family name, phone number or email address, and — if you sign in through Telegram — your Telegram id. We ask your gender when you introduce yourself; the answer “Prefer not to say” is there on the web and in the app from version 2.6, while the tournament signup form offers “Female” and “Male”. You can change your answer in your profile, including to “Prefer not to say”. Tournaments with a gender rule need it. The rest only if you entered it yourself: year of birth (we use it to check your age when you sign up — on your own from 18), playing hand and court side (for now only you see them), and a profile photo if you uploaded one: the shooting details — place and phone model — are cut out of the file.
• Taking part: signups, pairings, schedule, match scores, standings and rating.
• Signing in: one-time codes and links — as hashes, not as you saw them — sessions, a fingerprint of the device you signed in from, and your IP address: it counts sign-in attempts so codes and passwords cannot be brute-forced. The counter keeps the address for a day; the service log keeps only a hash of it.
• Notifications: the push address of your device, the platform, and the phone name the phone reports itself.
• Running the service: a command log — who did what, when, and how it ended. It is what makes a failure possible to investigate.
• App screen openings: which device, which screen and how many times a day — one number per device, screen and day. Which tournament or whose page you opened, the counter does not know: it holds no request, no response and no address.

The product collects no health data, no payment details and no location. There are no ads in it, and no tracking of you across other sites either: not a single third-party advertising or analytics tag is installed — only our own counter of screen openings, described above.

Why, and on what basis

Signups, schedule, signing in and notifications about your own games are the performance of the contract to take part. Match results and the cross-tournament rating rest on the legitimate interest of sports record-keeping: a result belongs to your opponents and to the tournament table as well. Organization news is sent on consent only, and consent can be withdrawn. The command log is a legitimate interest: without it a failure cannot be investigated. The counter of screen openings is a legitimate interest too: we need to know whether the app gets opened, and a number is enough for that. A profile photo rests on your consent, to show you your picture in your profile: it is optional, and one button removes it.

What everyone can see

Tournament and organization pages are public: the name of a participant, match scores, standings and a player rating. Phone numbers, email addresses and device push addresses are never public — the tournament organizer and we see them. The phone number of a participant is visible to the organizer of their tournament, in the app as well. The organizer can export the participant list with phone numbers or share it, for example to a league chat; the organizer is responsible for that copy, and we record that it was handed out. Your profile photo is shown only to you: participants and organizers do not see it, nor does it appear on tournament pages.

Who else sees the data

Only those the service cannot run without.

• DigitalOcean — where the app runs, the database lives and profile photos are stored, in Frankfurt.
• Postmark — emails: the sign-in link, and notifications about your tournaments when Telegram isn't linked.
• Twilio — the SMS with a sign-in code. Sent to European destinations only: a number from anywhere else is refused before the provider is called.
• Telegram — the bot’s messages: your Telegram id and the text of the message.
• Expo, and through it Apple and Google — delivering a notification to your phone: the device address, the title and the text.
• Sentry — crash reports: what broke and where in the code. Your name, phone, email and personal links are stripped before the report is sent. Reports are kept in Frankfurt for thirty days and then deleted.

Data is not sold and not handed to advertisers. This list changes only together with this page.

Transfers outside the EEA

The app, the database and the profile photo storage (DigitalOcean Spaces, region fra1) are in Frankfurt, that is, inside the EEA. What leaves it: Telegram messages, email through Postmark, and notifications through Expo, Apple and Google. The last one cannot be opted out of: there is no other route to a phone screen for a push — it is the infrastructure of the operating systems themselves.

How long it is kept

Your account — until you delete it. After a deletion request you get 30 days to change your mind, then the profile is anonymized: the phone number, email and device addresses are erased, the password is forgotten, first and family name become “Player #N”, and year of birth, gender, playing hand and court side are erased, and the profile photo is deleted together with its file. An earlier photo is deleted as soon as you replace or remove it. Match results and rating stay — they belong to your opponents too. Sign-in codes and links live for hours, the command log for 24 months, the counter of screen openings for 30 days; when a profile is anonymized, the rows of your devices are erased without waiting for that term. If a sign-in link was requested for an address that has no account yet and was never opened, the account created for it is deleted together with the address after 7 days. An address added to a profile is kept with the profile, even if not confirmed.

Your rights

You may get a copy of your data, correct it, delete it, restrict processing, object to processing based on legitimate interest, and complain to a supervisory authority.

You can delete your profile yourself — in profile settings, both in the browser and in the app. For anything else, write to us.

Deleting your RacketDay profile

Children

The product is meant for adults and is not directed at children. If a child ended up in a lineup because an organizer entered them, write to us and we will delete it.

Changes

If something material changes — a new recipient of data, or a new purpose — we will change this page and its date. The date is at the top.

Getting in touch

Write to privacy@racket.day about anything to do with your data, deletion and complaints included.