What is stored

What it keeps

• The name you type when you join. Usually a first name. It is shown to everyone else in your league, because a league table is no use without names.
• A PIN. Stored as a bcrypt hash, never as the digits you typed. Nobody, including the person running the league, can read it back.
• Your results. Scores, who you played, when it was confirmed.
• Match arrangements you make: a date, a time and a court name if you enter one.
• An icon if you pick one for your profile.
• A phone number, only if you give one. It is optional, you can take it off at any time from the You tab, and it exists for one reason: so somebody in your league can message you to arrange a game. It is never shown to anybody holding only the join code, and it is not included in the backups, which means a restore would lose it and everyone would enter theirs again.

That is all. No email address, no location, no analytics, no advertising identifiers, no cookies for tracking. Nothing is shared with anyone outside your league.

Where it lives

On Supabase, a hosted Postgres database, in their EU (Ireland) region. A copy of the data is backed up every six hours to a private repository so a league is not lost if something breaks.

Your browser stores your session locally so you do not have to sign in every time. Clearing your browser data removes it from your device.

The iPhone app

The app from the App Store is this same app, wrapped so it installs like any other. It keeps one thing the website does not: a notification token.

The website version stores the equivalent when you turn notifications on in a browser: a push subscription (an address and two keys your browser creates). It is used only to send the same notifications, and turning them off deletes it.

When you turn notifications on, your phone hands the app a device token from Apple. It is stored against your player record and used for one purpose: sending you notifications about your own matches. The draw, a score waiting to be checked, a time waiting to be agreed, a match nobody has logged. It is not an advertising identifier and it is never used to follow you anywhere.

Turn notifications off in the app and the token is deleted. Delete your account and it goes with the rest. Delete the app without turning notifications off and the token stops working, and it is dropped once Apple reports it as gone.

No analytics, no crash reporting, no adverts, no third-party trackers of any kind. Nothing about how you use the app is measured. Apple itself sees the token and the words of a notification while it is being delivered, because that is how notifications on an iPhone work.

Who can see it

• People in your league see your name, your team and your results, plus your phone number if you gave one. They have to be signed in as a player of that league: the join code on its own never opens a list of numbers.
• The person running your league can additionally reset your PIN and remove you.
• The person running Padeliga can see every league on the database.

Be aware that names and league names are readable by anyone who has the app's address and knows where to look. Do not put anything in a name field you would not want seen. PINs and join codes are never readable this way.

Getting removed

Open the app, go to You, and choose Delete my account. You type your own name to confirm and your player record is deleted immediately: name, PIN and the results you were part of. There is no undo and nobody has to approve it.

If you are in more than one league on this phone, it takes you out of all of them, not just the one on screen. The app tells you which ones before it asks you to confirm.

One thing to be straight about: the six-hourly backups are snapshots, and old ones are kept rather than pruned. Data you delete disappears from the app at once, but a copy of it stays in those private snapshots. Ask the person running Padeliga if you need it gone from those too.

Children

Padeliga is meant for adults arranging their own games. If a child is added to a league, that is for the adult running it to judge, and the same deletion route applies.

Asking about any of this

The person who runs your league can answer most things and can remove you themselves. For anything else, ask whoever sent you the link to the app.

To ask what is held about you, or to have it taken out of the backups as well as the app, email supportpadeliga@gmail.com.