Privacy & your data

Information we use

One approved account supports both playing and organising. Your profile contains your name, email, self-reported rating and source label (DUPR or Other), optional club and registration history. Ratings are not independently verified. Passwords are stored as salted hashes, not readable passwords. Signup uses a security check, email verification and administrator approval.

Event records include the organiser’s setup, venue, dates, participants, registration status, pairs or teams, availability, check-in, court assignments, recorded match times, scores and results. Provide only information needed for the event; do not enter sensitive explanations for an absence.

When an organiser imports players from Excel, the preview runs on their device. Only selected name, email, club and rating fields are submitted; the workbook, unused columns and unselected rows are not uploaded by this importer.

Why we use it

We use these records to provide accounts, manage participation, plan and run events, communicate relevant changes, display authorised results and help resolve problems. Account emails support verification and password recovery. Organisers can send reviewed event messages to selected participants.

Necessary account and event messages are separate from marketing. Reading this information or joining an event does not give blanket consent to unrelated uses. The current account signup does not collect marketing consent.

Who can see your information

Event plans are private by default. Owners and authorised editors can manage participant information; read-only members do not receive email addresses. Registered participants can see their own matches and the names of their partners and opponents, without unrelated players’ contact details or availability answers.

The organiser may publish event details and choose to publish numbered schedules and results. Public result views exclude roster names, email addresses, account IDs and private check-in lists. Numbered results are not necessarily anonymous: an event title or a small group can still make someone recognisable. Publication can be withdrawn, but copies made by visitors cannot be recalled.

Court and display access can be shared through secret links that expire within 24 hours and can be revoked. Anyone holding such a link can use its permitted view until it expires or is revoked. Treat these links as private.

Event statistics and timing estimates

PickleTour records match scores, progress and timing as you run your event. Statistics are on by default and follow your event’s privacy settings.

PickleTour uses grouped, anonymous match-duration statistics to help improve estimates for everyone. Sharing is on by default; names, contact details and individual event records are not included in the shared pool.

Shared models use completed months and update monthly. Small groups are withheld; individual durations, exact counts and extreme values are not published. Your own comparable timings are preferred once sufficient; otherwise an eligible shared model or a standard estimate is used.

Existing disabled choices remain disabled. Earlier accounts whose choice cannot be recovered keep sharing off until reviewed. Manage this account-level choice in Statistics & shared predictions. Changes affect future models; previously released anonymous summaries are not linked back to an account. Missing timing is never invented. Simulations and test runs are excluded. Estimates are guidance, not guaranteed finish times.

Storage, security and this device

PickleTour uses Cloudflare for hosting and database storage. Google reCAPTCHA connects to Google after you request the signup security check. Resend receives selected email addresses and message content when account or event emails are sent. These providers may process data outside your country; we do not promise EU-only processing.

Session cookies keep you signed in. This device also stores preferences such as language. Some event tools keep an account-scoped working copy on the device. A temporary migration cookie may carry an encoded sign-in identifier; it is removed after migration or expires within ten minutes. Do not leave a signed-in account, local working copies or downloaded exports on a shared device.

The competition workspace does not load third-party advertising analytics or external fonts. Security controls use limited technical records, including short-lived sign-in rate-limit identifiers. No security system can guarantee that information will never be accessed improperly.

Retention and deletion

Retention is handled through a reviewed process. Unverified signups may expire after 30 days with a seven-day warning. Empty inactive accounts may be deactivated after 12 months, and never-started event drafts may be archived after six months. Eligible accounts and drafts receive 30 days’ warning and a 90-day recovery period. Scheduled automatic cleanup is not currently enabled; permanent deletion is not automatic.

Accounts awaiting approval, future commitments and linked event, organiser, support or account history may need review before removal. Deleting a participant can unlink their identity while preserving other players’ fixtures and completed results. Small-event results may remain indirectly identifiable.

Copies downloaded or held independently by organisers cannot be removed through the server. Removal from backups is not immediate. Some limited operational and security records may need to be retained; contact us to discuss the scope of a deletion request.

Problem reports

The event support control deliberately submits a bounded diagnostic report to restricted support. Automatic diagnostic fields contain technical activity and error codes, revisions, timestamps and pseudonymous event or account references. They exclude player names, email addresses, credentials and raw requests.

Support can associate these references with an account, so diagnostic reports are pseudonymous rather than anonymous. Submitting a report does not silently send it to an AI provider.

Your controls and contact

Use your account area to correct profile details, withdraw registrations, export data or request deletion. An unused account without linked event or organiser history can be removed directly; linked accounts require support review so other participants’ records are handled correctly.

Contact info@pickle-tour.com for questions or requests about access, correction, export, deletion or other uses of your data. We may need to verify your identity before acting. For information entered or managed by an event organiser, contact the organiser as well.

Changes as PickleTour develops

As PickleTour develops, features and data use may change. We will update this information; check the date on the privacy page. Your acknowledgement does not automatically approve unrelated future uses. Any additional approval needed will be requested separately before that use starts.