What we collect
Your mobile number, display name, district and city, plus your bookings, attendance and room messages — what running the service requires, no more.
Location is used, not stored
When you check in, your location is sent so your distance from the venue can be computed, and then it ends: no column holds it and no row records it.
Photos
Photos are uploaded without EXIF — that is, without the coordinates they were taken at. The file name is generated by the server, not by your device.
Messages
A match room closes 48 hours after the match ends, and its texts are folded away after ninety days. Blocking folds a message for the blocker alone and does not delete it.
What never enters our logs
Phone numbers, verification codes and secrets are redacted at write time, not at display time — so they never enter the error log at all.
Who sees what
Public pages show the venue, the time, the seats and the organizer name. They show no player phone, no balance and no sign-up list.
Retention
Verification hashes are erased within a week and the delivery record stays ninety days. The financial ledger and the audit log are never deleted — a record outlives its subject.
Your rights
You may ask for what we hold about you and you may end your account. Ending it stops the account and does not erase the records accountability requires us to keep.
Deleting your account in the app
From “My account” you delete your account yourself: it stops at once, you are signed out everywhere, and your name is no longer shown. Your phone number becomes free to register again — registering with it creates a new account, it does not restore the old one. An account with an upcoming match cannot be deleted: cancel it or wait until it ends.