Privacy Policy

1. Who We Are

set.club is an amateur sports ranking platform that helps clubs track player ratings, organize tournaments, and maintain leaderboards. When we say "we", "us", or "our", we mean the operators of set.club.

2. What Data We Collect

Account data: Name, email address, and password (hashed) when you register.

Player data: Match results, scores, ratings, rankings, tournament participation, and win/loss records. This is the core of what the platform does.

Technical data: IP address, browser type, and basic usage data to keep the service running and secure.

We do NOT collect: Payment card details (handled by third-party processors), location data, or any data from your device beyond what your browser sends.

3. Why We Process Your Data

• To provide the service (contract): Your account, matches, ratings — this is why you're here.
• To maintain rankings (legitimate interest): Match results and ratings are the core purpose of the platform.
• To keep things secure (legitimate interest): Audit logs, fraud prevention.
• Analytics (consent): Only with your explicit consent via cookie preferences.

4. Your Privacy Controls

You have granular control over your visibility on the platform:

• Profile visibility (public, club only, or hidden)
• Name display (full name, first + initial, or nickname)
• Match history visibility
• Rating visibility
• Activity status

Manage these in your Privacy Settings page within your club.

5. Your Rights (GDPR)

If you're in the EU/EEA, you have the right to:

• Access your data — see everything we have about you
• Correct inaccurate data via your profile page
• Delete your account — we'll anonymize your match history and remove personal data
• Export your data in a machine-readable format
• Object to processing (e.g., opt out of public rankings)
• Restrict processing by freezing your account

To exercise these rights, contact us at [email protected].

6. Data Sharing

We don't sell your data. Period. We share data only with:

• Your club administrators (to manage the club)
• Other club members (based on your privacy settings)
• Infrastructure providers (hosting, as needed to run the service)

7. Data Retention

• Active accounts: kept while you use the service
• Deleted accounts: personal data removed within 30 days, match data anonymized
• Inactive accounts: we'll notify you after 12 months, delete after 24 months
• Audit logs: retained for 2 years

8. Cookies

We use minimal cookies. See our Cookie Policy for details.

9. Security

Passwords are hashed with bcrypt. All data is transmitted over HTTPS. We maintain audit logs of administrative actions. We'll notify you within 72 hours if a breach affects your data.

10. Contact

Questions about privacy? Email [email protected].