Privacy Policy — Letzpadel

This policy explains what personal data Letzpadel processes about you, why, and what rights you have. It is written to align with the EU General Data Protection Regulation (GDPR).

Data controller

The operator of Letzpadel is the data controller for personal data processed through the service. To contact us about privacy, write to hello@letzpadel.app.

What we collect

Account data

Email address (required to sign in and to send match notifications)
Display name, self-declared padel level, and preferred courts
Optional profile picture

Match and activity data

Matches you post or join, and the courts and times involved
Chat messages you send in a match
Recorded match results

Technical data

Session and authentication tokens (stored in your browser)
Server logs (IP address, timestamps, user agent) for security and to keep the service running
Email delivery status (sent, delivered, bounced, unsubscribed)

Why we process this data (legal bases)

Contract — to provide the account, matches, chat, and notifications you asked for.
Legitimate interests — to keep the service secure, prevent abuse, and improve reliability.
Consent — for optional communications (e.g. product updates) where required. You can withdraw consent at any time.
Legal obligation — when we must retain data to comply with law.

Who sees your data

Other players see your display name, level, profile picture, and the matches and chat messages you're in.
Match hosts see who joined or left their match.
We do not sell your personal data.

Processors we rely on

We use trusted infrastructure providers to run Letzpadel. Each of them acts as a processor bound by a data processing agreement.

Lovable Cloud / Supabase — database, authentication, file storage (EU region).
Cloudflare — hosting, CDN, and edge compute.
Resend — transactional email delivery.

These providers may process limited technical data outside the EU under appropriate safeguards (Standard Contractual Clauses).

How long we keep data

Account data — for as long as your account is active.
Match history and chat — kept while the account exists so you can look back at past matches.
Server logs — typically 30 days, then deleted or aggregated.
Email suppression records (bounces / unsubscribes) — kept as long as needed to respect your preference.

When you delete your account, we remove your profile and personal data within 30 days, except records we must keep for legal reasons.

Your rights

Under GDPR you can ask us to:

Access the personal data we hold about you
Correct data that's inaccurate
Delete your account and associated personal data
Export your data in a portable format
Object to or restrict certain processing
Withdraw consent where processing is based on consent

Email hello@letzpadel.app to exercise any of these rights. You also have the right to lodge a complaint with the Luxembourg data protection authority (CNPD, cnpd.public.lu) or the authority in your country of residence.

Security

Data is transmitted over TLS and stored in EU-hosted databases with row-level access controls so a signed-in player only sees data they are entitled to see. No system is perfectly secure — please choose a strong, unique password and let us know at hello@letzpadel.app if you spot a security issue.

Children

Letzpadel is not intended for children under 16. If you believe a minor has created an account, contact us and we'll remove it.

Changes

We'll update this page when our practices change and note the "last updated" date at the top.

See also: Terms of Service · Cookie Notice