Privacy policy

1. Controller

The controller of your data is Jakub Nowosad, e-mail kontakt@padelradar.pl. For anything about your data, write to kontakt@padelradar.pl.

2. What we collect and why

Account: email address and identifier from Google, Apple or the email link; notification language; plan. Purpose: creating your account and providing the service (Art. 6(1)(b) GDPR).

Alerts: city, days and hours you pick, notification channel, Telegram chat ID (if you connect it) and the history of notifications sent. Purpose: sending notifications (Art. 6(1)(b) GDPR).

Technical data: IP address and basic server logs. Purpose: security and debugging, and on the home page picking the nearest city (legitimate interest, Art. 6(1)(f) GDPR). We don't store the city detected from your IP.

Browser location: only when you click “Use my location”. It's used solely to pick the nearest city and show distances to clubs, is processed in your browser, and never reaches our server.

Visit statistics (Vercel Web Analytics): page views, pages visited, referring site, country, device and browser type. It works without cookies and stores nothing in your browser; instead of your IP address it uses an anonymous hash that is valid for one day. Purpose: knowing how many people use the service and what to improve (legitimate interest, Art. 6(1)(f) GDPR).

3. Who receives data

Supabase (database and sign-in, servers in the EU), Vercel (hosting and visit statistics), OpenStreetMap (club page map, only after you click “Show map”), Resend (email delivery), Telegram (if you connect it), and Google or Apple when you sign in with them.

Some providers are based in the US. Transfers rely on the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

4. How long

Account data and alerts: until you delete your account. Notification history: until you delete the alert or account. Server logs: up to 30 days.

5. Your rights

You have the right to access, correct, delete, restrict and port your data, and to object to processing based on legitimate interest.

You can delete your account and all data yourself on the Account page. You can also complain to your data protection authority.

Providing data is voluntary, but without an email or Telegram account we can't send notifications. We don't make decisions about you based solely on automated processing.

6. Cookies and browser storage

We only use strictly necessary cookies: the sign-in session (sb-…), your saved language (lang) and city (city, city_src), plus browser storage for an alert while you sign in. The service doesn't work properly without them, so they don't require consent.

Visit statistics work without cookies. We don't use analytics or advertising cookies; if that changes, we'll ask for your consent first.