Privacy

What Play knows about you, who can see it, and why

Draft — not yet approvedTwo things below are marked to confirm and must be settled before anybody real joins — where the database sits, and the address to write to. This has not been reviewed by a lawyer.

What we hold

All of it, not a summary.

Your account: An email address and a password, held by Supabase, who host the database and the sign-in for us. We never see your password.
Your details: Your name as it appears on the ladder, an email address, a phone number, and your date of birth. The phone number is not optional: it is how an opponent reaches you to arrange a court, and it is the only way this works without a chat system nobody wanted.
If you are under 16: A parent or guardian’s name and contact, and a record that the organiser confirmed with them before letting you in. Your date of birth is what decides whether this applies.
Your competitions: Which competitions you asked to join, when, whether you were approved, your position on the ladder and every change to it.
Your matches: Who you challenged or were challenged by, the agreed time and court, the deadline, the score set by set, when play finished, and any correction an organiser made afterwards.
A record of actions: Who did what and when — approvals, results, corrections, withdrawals — including attempts that were refused. This is what makes a disputed ladder position answerable rather than a matter of opinion.

Who can see it

Enforced by the database, not by the screens.

Anyone with the join link: The competition’s name, its dates, its rules, and the organiser’s first name. No players, not even how many.
Players in your competition: Your name, your position, your movement and your results. Not your phone number, not your email, not your date of birth.
Your opponent: Your phone number, and only while the two of you have a match on. It appears when the challenge is made and stops appearing once the result is in. Nobody can browse the club’s contact details.
Your organiser: The details of everyone in the competition they run, so they can approve people and sort out problems. An organiser of a different competition sees nothing of yours.
Nobody else: There is no public directory, no search, no advertising, and nothing is sold or shared with anyone. Play is not connected to any other service.

The rest

Why we hold it, where it lives, and what you can ask for.

Why we hold it: To run the competition you asked to join: to place you on the ladder, to let your opponent reach you, to enforce the deadline, and to keep a record that explains how the ladder came to look the way it does.
Who is responsible: Espanoso Holding B.V., registered in Curaçao, is the data controller for Play. Your club decides who may join and who organises, but the records described above are held by Espanoso.
Where it lives: In a database hosted by Supabase, and on Vercel, who serve the site. Nowhere else, and nothing is copied anywhere on the way. The database is in the United States (Ohio) and Espanoso is in Curaçao, so your details cross a border to be stored. To confirm — whether Curaçao law requires anything further to be named here. That is a question for a lawyer in Curaçao, not an engineering decision, and it must be answered before anybody real joins.
How long: Two clocks, because two different things are being kept. Your account and contact details — email, phone, date of birth, and a guardian’s details if you are under 16 — are kept while your account is open and erased 36 months after the last competition you played in ended. Three years is roughly three seasons: long enough that somebody who sits out a year and comes back does not have to be re-entered from scratch, and short enough that a club is not holding phone numbers for people who have moved on. Your results and ladder history are kept as the club’s record, under the name you played as rather than against a live account: the ladder other people played on was shaped by your results, and removing them would rewrite their season too. The record of actions is kept for two years.
Changing your details: Your name, phone and email are yours to change at any time under Settings. A wrong date of birth is fixed by your organiser, because it is what decides whether the under-16 consent rule applies.
Closing your account: You can close your account whenever you want, without giving a reason. Closing it erases your contact details straight away rather than waiting out the 36 months, and takes you off every ladder you are on. Your past results stay, under the name you played as — see above for why. The button is under Settings, and it does all of that in one step. There is one case where it will stop you: if you are the only organiser of a competition that is still running, hand it to somebody else first, so the people on it are not left stranded. If you would rather ask a person than press it yourself, tell your organiser and they will pass it on.
Cookies: One, which keeps you signed in. There is no analytics, no tracking and no third-party script of any kind.