Privacy notice

If you have just found a page about yourself

You’re probably here because someone sent you a link, or you searched your own name, and found a result naming you that you didn’t create. My Pila collects results from padel tournaments so that players who use the site can have a fair, accurate rating. When a club or organiser sends us the results of an event, those results include everyone who played, so we hold a record of you having played in it.

If you don’t have an account with us, you’ll still see your name in the results. Once an organiser has published an event and the draw exists, the draw, live scores, standings and results show the names the organiser gave us. Anyone who is signed in sees your full name, the same as every other player in that event. Anyone who isn’t signed in sees your given name and the initial of your family name. Before the draw exists, the entrant list is visible only to people who are signed in. We don’t publish a rating for you, and there’s no profile page about you.

You didn’t sign up, and we didn’t ask you. The organiser confirmed to us, before publishing, that they’d told you your name and results would appear here. Why we’re allowed to do this is explained under “Tournament entrants” below.

If you’d rather not be listed, use our rights request form. You don’t need an account, and you don’t need to explain why. Your name is hidden the moment you submit the form: it’s replaced by “Player” everywhere a visitor could see it, and the scores stay as they are. We confirm by email within one month, usually within a few days, and that email carries an undo link in case you change your mind. The organiser still sees your name in their console so they can run the event.

Who we are

We’re the data controller for the information described in this notice. We decide why and how it’s used, and we’re responsible for it.

Operated by

NX-TECH Innovations

What we hold

If you have played in a tournament we have results for, we may hold, given to us by the organiser, not by you:

• your name, as the organiser recorded it, and the club or venue where you played
• the matches you played: who you partnered, who you played against, and the scores

Only if you have an account with us, we also hold:

• your email address, display name, town or region, gender, and a yes/no confirmation that you’re 18 or over
• a rating and a level band worked out from your results, and its full history
• the level you claimed when you signed up, and any Playtomic profile link you gave us (we never show this to anyone else)
• corrections to a score, and countersign records confirming a result
• if you run events: your organisation’s name and the contact details you give us for entrants
• if you use Team Up to find a partner: your town or county, your availability, and any note you write (up to 280 characters)
• if you claim a player record, or someone claims a record naming you: the evidence given (for example, an email address or a Playtomic link). Only the organiser managing that participant can see it
• your push notification endpoint, if you turn on push notifications
• a log of the emails we have sent you, and your choices for each of the five email categories below
• if you subscribe to Premium: your Stripe customer reference, your subscription status, and the payment events Stripe sends us
• which Premium pages you visited and whether you started a checkout, so we can see which parts of the site explain Premium well — never your IP address or device
• your cookie consent choice, and standard sign-in session cookies

Only if you join our launch waiting list (you don’t need an account to do this), we hold:

• your email address, whether you play, organise, both, or run a club or venue, and the region you chose
• your town and first name, if you gave them, and whether you ticked the box for our occasional newsletter
• a record of your consent: the version of the wording you saw, the time you agreed, a one-way hash of your IP address, your browser details, and the campaign or site that sent you to the page

For security and legal reasons we also keep:

• a one-way hash of your IP address and device details, kept for 24 hours, used only to stop abuse of our sign-in and forms
• a record of any data rights request you make, and how we decided it
• a tamper-evident audit log of changes to ratings and to rights decisions

We do not hold your card number, your bank details, or your date of birth. We ask only for a yes/no confirmation that you’re 18 or over. We don’t collect scoresheet photographs; My Pila has no such feature.

Tournament entrants (names given to us by an organiser)

Where it comes from. When a club or organiser runs an event on My Pila, they type in or paste the names of the people playing. We don’t collect anything else about you from them: no email address, no phone number, no date of birth. The organiser confirms, before the event is published, that every entrant is 18 or over and that they’ve told every entrant their name and results will appear on My Pila. We record who gave that confirmation, and when.

What we show, and to whom. Once the draw exists, the draw, live scores, group tables, standings, results and winners of that event show your name: in full to anyone who’s signed in, and as your given name plus the initial of your family name to anyone who isn’t. Event pages are public pages, so search engines can find them, and a completed event stays up as the historical record of who played and who won. Your profile page, and the pages you use to claim, hide or delete your record, are marked so that search engines don’t list them. Your name doesn’t appear in our players directory, in the circuit leaderboard or on any profile page unless you create an account and claim your record.

Why we’re allowed to. Our legal basis is legitimate interests. Tournament results are public by nature: draws are pinned up at the venue and winners are announced. Publishing a complete draw and complete results is what makes an event run fairly and what makes other players’ ratings honest, and a result you can read is a result you can recognise and claim as yours. We’ve weighed that against your interest in not being named, and written the assessment down. You can ask us for a copy.

Your right to object, stated on its own because it matters most. You can object to being named at any time, without giving a reason, using our rights request form. Your name is hidden the moment you submit the form, and we confirm by email within one month, usually within a few days. We don’t argue the point. If someone else files for a player who has an account, that player can hide themselves from their own account, and an admin decides the request. The match scores stay, with “Player” where your name was, because other players’ ratings depend on them. Hiding your name on My Pila doesn’t remove copies a search engine has already made; those fade as the engine revisits the page, which can take days, and we can’t speed that up.

How long. Results are kept permanently as the historical record of the event. An unclaimed record with no activity is anonymised after 3 years (see “How long we keep it”).

Who’s responsible. For the names an organiser gives us, the organiser and My Pila are joint controllers: the organiser decides to run the event on My Pila and tells you about it; we decide how the names are shown and for how long, and we handle every rights request. You can contact either of us, and we’ll deal with it together. If you contact the organiser, they pass it to us within 48 hours.

If you sign in with Google

If you choose “Continue with Google” instead of a password, Google sends us your email address, your name, your profile picture, and an identifier for your Google account. We use this only to create your account and sign you in. That’s the same purpose, and the same legal basis, as the rest of your account information.

Google is a separate data controller for your Google account itself. What we hold about you through it is covered by this notice; how Google handles your wider account is covered by Google’s own privacy policy.

Who can see what

In tournament context (the draw, live scores, group tables, standings, results and winners of a published event once the draw exists), every player’s name is shown, whether or not they have an account. Signed-in viewers see full names. Signed-out visitors see a given name and the initial of the family name. Before the draw exists, the entrant list is visible only to signed-in viewers.

If a player has claimed their profile (signed up and linked it to their account), their given name and initial, their town or region, and their rating band (for example, “C”) are also visible in our players directory to anyone, signed in or not. Their full profile, match-by-match history and exact rating number are visible only to Premium subscribers.

If a player hasn’t signed up, that’s all there is: their name in the events they played. No profile, no rating, no directory entry.

We never show anyone’s email address or Playtomic link, at any tier, to any other player.

Tournament listings are open to anyone, signed in or not. They name the organiser and the club, and, once the draw exists, the players.

We share information with the clubs and organisers whose events you played in, so they can manage entries and results, and with service providers who host and run the platform on our behalf, under contract and only on our instructions (see “Where your information is held” below). Event pages are published on the open internet, so the people who can see a name include anyone who finds the page, and search engines. We don’t sell your information, and we don’t share it for advertising.

Payments

My Pila itself only ever processes one kind of payment: a Premium subscription, handled entirely by Stripe. We never see or store your card details. Stripe does, under its own privacy terms.

Tournament entry fees are a different matter entirely: they are arranged directly between you and the organiser, off-platform. We don’t process, hold, or see those payments. We only recognise the pattern of a payment method an organiser has entered (for example, naming a well-known card-link provider) so you know roughly what to expect. Recognising a pattern isn’t an endorsement of the organiser or the payee, and we hold no financial data about that transaction at all.

Why we hold it, and the legal basis

UK data protection law requires us to have a lawful basis for everything we do with your information. Here’s ours, purpose by purpose:

Emails and notifications

We send emails in five categories, and you can turn each on or off separately in your account settings:

• reminders (for example, an unpaid entry fee reminder)
• results (your matches and rating changes)
• partner countersign requests
• organiser messages, sent to entrants of events you have joined
• product updates and service news

Product updates are news about My Pila itself. We don’t send third-party marketing, and we never pass your details to anyone else to market to you. You can turn this category off, the same as any other.

Separately, you can join our waiting list without an account. If you do, we email you when My Pila launches in your region, and, only if you tick the box, send you our occasional newsletter. These emails go only to people who asked for them, and every one carries an unsubscribe link. They are not part of the five categories above, and joining the list doesn’t create an account.

A small number of essential emails (for example, sign-in links and confirmation of a data rights request) aren’t part of these categories and can’t be turned off, because they’re part of running your account. Every non-essential email carries an unsubscribe link.

Cookies

We use strictly necessary cookies by default (for example, to keep you signed in). These need no consent under UK law.

• a cookie called mycourt_cookie_consent, which remembers your cookie choice for 1 year
• standard Supabase sign-in session cookies

We don’t currently set any analytics or advertising cookies. If we introduce them in future, we’ll ask first, using the banner on this site. You can change your mind at any time using the “cookie preferences” link in the footer.

If you view a page with a map on it, the map tiles are loaded from OpenStreetMap, and your IP address reaches the OpenStreetMap Foundation’s own servers when it loads. That’s outside our control.

How long we keep it

Automated ratings

Your rating is calculated automatically from your match results. It’s provisional until you have played around 10 verified matches, after which it settles into a confident, stable figure.

A mistaken score can be corrected by an organiser or an admin within 168 hours of the match being recorded. A claim linking an unclaimed record to your account is always decided by a person: an organiser or an admin.

Your rating band has one automated effect: some events are capped by level, and the site checks your band against the cap when you enter. It’s not a judgement about you as a person, and it’s not used for anything else. If you think your rating is wrong, or your band has stopped you entering an event you believe you belong in, use our rights request form to tell us: a person will look at it, and can explain exactly which matches produced it.

Your rights

You have the right to:

• be told what we hold about you, and get a copy (a full, machine-readable export)
• have mistakes corrected, including a result recorded against the wrong person
• restrict what we do with it while a question is being sorted out
• get a copy in a portable format to take elsewhere
• object to being named, which we honour by hiding your name the moment you file the request, and without asking why
• have your information deleted; see “Deleting your account” below
• complain to the Information Commissioner’s Office

To use any of these, use our rights request form. You don’t need an account. We’ll normally respond within 1 calendar month of receiving your request. If it’s complex, we may extend that by up to 2 further months, and we’ll tell you if so and why. If you ask for a full export, the download link we send you stays valid for 7 days.

We may need to check who you are before acting, particularly for deletion. That protects you, since without a check someone else could delete your record by asking on your behalf.

Deleting your account

Your name is hidden from every public and signed-in surface the moment you file the request, and an admin then approves it. You don’t wait for the permanent step.

The permanent deletion happens after a short pause, normally 14 days. Deleting is permanent and can’t be undone, so we leave you time to change your mind. Tell us before then and we restore things fully. If you’d rather not wait, say so and we delete everything immediately; the pause is there so you can change your mind.

When deletion runs, we permanently remove everything that identifies you: your name and anything linking the record to you. One thing remains, and we want to be straight about it: the scores of the matches you played will stay in our records, with your name removed. This is because other players’ ratings are calculated from those matches, and removing the matches themselves would make those players’ ratings wrong. What remains will not say who you were; it will show that a match happened and what the score was.

We should be honest about one limitation: someone who already knew you played a particular match on a particular day could, in principle, work out which anonymised record was yours. We think that risk is low, because it needs knowledge the record itself doesn’t supply, but it’s not nil, and we’d rather tell you than let you find out later.

Children

My Pila is for adults. Every account holder confirms they’re 18 or over when they sign up, and every entrant in an event is confirmed 18 or over before they can be entered. If we learn that an account holder is under 18, we close the account.

Security

We protect your information with access controls, encryption in transit and at rest, and a tamper-evident record of every change to a rating or a rights decision.

Where your information is held

• Supabase hosts our database, in London
• Vercel hosts the application; the functions that read and write your data run in London. A small routing layer runs at the network edge globally, but doesn’t process your personal data there
• Stripe processes Premium subscription payments
• Resend sends our emails, including sign-in emails
• MailerLite sends launch and newsletter emails to people who join the waiting list (hosted in the EU)
• Sentry receives error reports to help us fix bugs
• Google provides sign-in, and venue search for organisers setting up events
• Apple, Google and Mozilla deliver push notifications, if you turn them on
• OpenStreetMap serves map tiles on pages showing a venue location

Changes

If we change this notice we’ll update the date at the top. If a change materially affects you and we can contact you, we will. Version 3.0 is the first to describe names appearing in tournament results; earlier versions said players who hadn’t signed up didn’t appear by name on public pages, which was true until that date.

Complaints

We’d rather hear from you first: use our rights request form and tell us what has gone wrong. You also have the right to complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.