Privacy Policy
Effective: April 26, 2026 · Last updated: July 13, 2026
Who we are
PadelRound (the "Service") is a mobile and web platform for padel players. It includes a strategic card-based padel game, ranked leagues, real-life match organization, and social features. This policy applies to the iOS and Android apps, and to padelround.net.
What we collect
Information you provide
| Data | Why |
|---|---|
| Email address | Account creation, sign-in, password reset |
| Password | Stored only as a bcrypt hash — we never see your password in plain text |
| Display name | Shown to other players in lounges, leaderboards, and team rosters |
| Profile (avatar, bio, city, preferred position) | Displayed on your public profile and visible to other players |
Information collected as you play
| Data | Why |
|---|---|
| Match history, card plays, points | Run the game, track stats, calculate ELO |
| ELO rating, league tier, season standings | Matchmaking, ranked progression |
| Team membership, lounge participation | Run multiplayer features and tournaments |
| Messages and chat | Deliver chat between players you're matched or teamed with |
Information collected automatically
| Data | Why |
|---|---|
| Device identifier (Expo push token) | Sending push notifications you've opted into |
| Approximate or precise location | Only when you grant permission — used to find nearby padel courts |
| Crash logs and diagnostic data | Sent to Sentry to fix bugs and crashes |
| Advertising ID (Apple IDFA / Google Advertising ID) | Collected by the Meta (Facebook) SDK to measure the performance of our app-install and marketing campaigns. On iOS this only happens if you allow tracking in the App Tracking Transparency prompt. |
| Photos you choose to upload | Profile picture and feed posts — taken with your camera or chosen from your photo library; we only receive the image you submit |
| IP address | Routing requests, basic abuse prevention, approximate country |
What we do not collect
- We do not sell your personal data for money.
- We do not show ads inside the app.
- We do not collect your contacts, calendar, or microphone. The camera and photo library are accessed only when you tap to take or pick a photo; we never read them in the background.
- We do not knowingly collect data from children under 13. The Service is intended for users 13 and older.
Advertising and analytics
We use the Meta (Facebook) SDK to measure how well our marketing and app-install campaigns perform — for example, to see whether someone who installed the app after seeing one of our ads went on to sign up or play a match. To do this, the SDK may collect your device's advertising identifier (Apple IDFA on iOS, Google Advertising ID on Android) and app-event data, and share it with Meta. This is considered "tracking," and Meta may combine it with data from your Facebook/Instagram account for ad measurement and targeting.
- iOS: we ask for your permission first through Apple's App Tracking Transparency prompt. If you decline, the advertising identifier is not used.
- Android: you can reset or delete your advertising ID, or opt out of ad personalization, in Settings → Privacy → Ads.
How we use it
- To run the Service: create your account, run matches, calculate ELO, deliver notifications.
- To keep you signed in (JWT access tokens, with refresh tokens stored server-side in Redis).
- To prevent abuse, fraud, and policy violations.
- To fix bugs, monitor performance, and improve the app.
Who we share it with
We share data only with infrastructure providers needed to run the Service:
| Provider | What for |
|---|---|
| Sentry | Crash and error reporting |
| Expo Push (operated by Expo) | Delivering push notifications to your device |
| Meta (Facebook) | Advertising ID and app-event data, to measure and target our marketing campaigns (see "Advertising and analytics" above) |
| Hosting provider | Running the API, database, and static site |
Other players see only what you'd expect a multiplayer game to expose: your display name, avatar, ELO, stats, league standing, and any chat messages you send.
Data retention and account deletion
You can delete your account at any time from the app: Settings → Delete account.
When you delete your account, we deactivate it and remove your email from the active user table so it can't be re-used to sign in. To preserve the integrity of completed matches, leaderboards, and tournament results that other players were part of, some game-history records (match outcomes, ELO changes, league results) are retained but disassociated from your account. We do not keep your password, push token, or location after deletion.
If you want a full erasure of all retained records, email padelround2026@gmail.com from the email address on the account and we will process it within 30 days.
Your rights
Depending on where you live, you may have the right to:
- Access a copy of the data we hold about you
- Correct inaccurate data
- Delete your data (see above)
- Object to or restrict certain processing
- Lodge a complaint with your local data protection authority
To exercise any of these, email padelround2026@gmail.com.
Security
All traffic between the app and our servers uses HTTPS. Passwords are hashed with bcrypt. Refresh tokens are stored server-side in Redis and can be revoked. No system is perfectly secure — if you spot a vulnerability, please report it to padelround2026@gmail.com.
International transfers
The Service is operated from infrastructure that may be located outside your country. By using PadelRound you understand that your data may be processed in those locations.
Changes to this policy
We may update this policy. When we make material changes we'll update the "Last updated" date at the top and, where appropriate, notify you in the app. Continued use of the Service after changes means you accept the updated policy.
Contact
Questions or requests: padelround2026@gmail.com