MatchPoint Privacy Policy

Last updated: 8 October 2026

The short version

MatchPoint stores what you give it — your account, your matches, your friends and clubs — so the app can work.
We don't sell your data, show ads, or use analytics trackers.
Other signed-in users can see your name, handle, profile picture and skill ratings. Your matches are visible to the people who played in them and to your friends. Your messages are visible to the people in the conversation.
A few service providers help us run MatchPoint. They are listed in section 5.
You can ask to see, correct or delete your data at any time: craig.weston1@gmail.com.

1.Who we are

MatchPoint is a tennis and badminton scoring app. It is a website at matchpoint.cwsport.co.uk and an iPhone app with an Apple Watch companion.

It is run by Craig ("we", "us"), who decides how your personal data is used and is responsible for it under UK data protection law (the UK GDPR and the Data Protection Act 2018). You can contact us at craig.weston1@gmail.com.

2.What we collect

What you give us

Account: your email address and a password. We never see your password: our sign-in provider stores it in scrambled (hashed) form. If your account was set up earlier with Google or Apple sign-in (no longer offered), we also received the name and email address they shared.
Profile: your display name, a handle that friends use to find you, and a profile picture, which is either one of our preset avatars or a photo you upload.
Matches: the matches you score or log: the players, scores, sport, format, and when it was played.
Other people's names: if you add an opponent or partner who doesn't have an account, you type their name and it is stored as part of the match.
Friends, invites and clubs: friend requests and friendships, game invitations (with dates, places and notes), chat messages, Find Players posts, and what you create in teams, leagues and tournaments (names, descriptions, fixtures and team messages).
Ratings and achievements: your skill ratings (one for tennis, one for badminton) and your achievements are worked out from your recorded matches.

What is collected automatically

Technical data: whenever your device connects to MatchPoint, or to the services it relies on (section 5), those services receive standard technical information such as your IP address and the type of browser or device. We don't use this to track you across other websites or apps.
Your sign-in: to keep you signed in, the app stores a session token in your browser (section 7).

On the iPhone and Apple Watch app, only if you allow it

Bluetooth: to connect to a courtside LED scoreboard. Nothing about that connection is sent to us.
Calendar: to add a match to your calendar when you ask it to.
Notifications: match reminders, which are scheduled on your phone itself.
Apple Watch: scores are shared between your iPhone and your Apple Watch.

You can switch any of these off in your device's Settings.

3.How we use your data, and why

To run MatchPoint: to create your account, record and show your matches, work out ratings and leaderboards, and power friends, invites, chat and clubs. Why we're allowed to: it is necessary to provide the service you asked for.
To email you about things you're involved in: a friend request, an invite, a message, a team or league update, a Find Players update, confirming your email address, or resetting your password. Emails about messages include a short preview of the message. We don't send marketing emails. Why: to provide the service, and our legitimate interest in keeping you informed about activity you're part of.
To show the weather for upcoming matches (section 5). Why: to provide the service.
To keep MatchPoint secure and working: preventing abuse and fixing faults. Why: our legitimate interest in running a safe service.
To meet legal obligations, where the law requires it.

We don't sell personal data, we don't use it for advertising, and we don't make automated decisions about you that have legal or similarly significant effects. Your skill rating only affects what you see in the app.

4.Who can see your information

Other people using MatchPoint

Other signed-in users can see your display name, handle, profile picture and skill ratings, so they can find and add you. Your email address is never shown to other users.
The people who played in a match can see it, and your friends can see your completed matches.
Messages are visible to the people in the conversation. They are not end-to-end encrypted: they are stored on our servers like the rest of your data.
Anyone signed in can search for a team and see its name and description. Members of a team can see its roster, messages and tournaments. League tables and fixtures are visible to the members of the teams in that league and to the league's organisers.
Find Players posts are visible to the audience chosen when posting: friends, a team, or a league.
Profile pictures you upload are public: anyone who has a picture's web address can open it, even without signing in. Treat an uploaded photo as public.

Us

We run the service, so we can access the data stored in it when that is needed for support, security and maintenance.

These providers help us run MatchPoint. They handle data on our behalf, only to provide their service.

SupabaseOur database, sign-in (accounts and passwords), file storage for profile pictures, and real-time updates. Holds everything you put into MatchPoint.

CloudflareHosts the website and runs the small server that sends our emails and builds calendar files. It handles technical data such as IP addresses, and it passes email and calendar content through without storing it.

ResendDelivers our emails. Receives the recipient's email address and the content of each email, and keeps a record of emails sent under its own retention policy.

Open-MeteoWeather forecasts for your matches. When a match has a location, the place name is sent to Open-Meteo to find its coordinates, then the coordinates and date are sent to get the forecast. Your device makes these requests, so Open-Meteo also sees your IP address.

Google FontsThe fonts the app uses. Your device downloads them from Google, which sees your IP address and browser details.

Content delivery networks (jsDelivr, unpkg, esm.sh, cdnjs)The app loads its sign-in library from one of these. They see your IP address and browser details when your device downloads it.

AppleIf you use the iPhone app, Apple provides the App Store and the device features described in section 2, under its own privacy policy.

We may also share information if the law requires it, or to protect someone's safety or our legal rights.

6.Other people's information

Opponents and partners without an account appear in matches under the name another user typed. If you are named in a match and want your name changed or removed, contact us at craig.weston1@gmail.com.

7.Cookies and local storage

The MatchPoint app doesn't include advertising or analytics trackers. It keeps your sign-in session in your browser's local storage so that you stay signed in. That is essential for the app to work, so there is no cookie banner. Signing out, or clearing your browser's site data, removes it. The providers in section 5 may set their own technical cookies or keep logs for security and delivery.

8.How long we keep your data

We keep your data while your account is open. You can delete matches you created from your match history.

To close your account and have the personal data attached to it deleted, email craig.weston1@gmail.com. We'll do it within one month. Where you appear in matches owned by other people, we'll remove or anonymise your details in those records. Our database provider may keep backups for a short time afterwards. We may keep limited information for longer where the law requires it or to deal with a dispute or abuse.

9.Your rights

Under UK data protection law you have the right to:

be told how your data is used (this policy);
get a copy of the data we hold about you;
have mistakes corrected (you can change your name and picture in Settings);
have your data deleted;
restrict, or object to, some uses of it; and
receive your data in a portable format.

Where we rely on your consent, for example the device permissions in section 2, you can withdraw it at any time in your device settings.

To use any of these rights, email craig.weston1@gmail.com. We may ask you to confirm who you are, and we'll reply within one month. If you are unhappy with how we have handled your data you can complain to the Information Commissioner's Office at ico.org.uk. We would appreciate the chance to put things right first.

10.Transfers outside the UK

Some of our providers are based in, or process data in, other countries, including the United States and the European Economic Area. When your data is transferred outside the UK it is protected by safeguards such as UK adequacy regulations or standard contractual clauses (with the UK addendum), as offered by those providers.

11.Security

Connections to MatchPoint use HTTPS. Passwords are stored hashed, and the database has access rules so that people can read and change only what they are allowed to. No system is perfectly secure. If a data breach affects you, we'll tell you and the regulator as the law requires.

12.Children

MatchPoint isn't intended for children under 13, and we don't knowingly collect their data. If you think a child under 13 has an account, contact us and we'll delete it.

13.Changes to this policy

We'll update this policy if how MatchPoint works changes. The date at the top shows when it was last updated. If a change matters to you, we'll tell you in the app or by email.

14.Contact

Craig
craig.weston1@gmail.com