Privacy Policy

Last updated: March 2026

1. Data Controller

SmashRating is the data controller for personal data processed through this service. For data-related inquiries, contact us at privacy@smashrating.com.

2. Data We Collect

We collect the following personal data when you use SmashRating:

Account data: Email address, display name, country, city (optional), club name (optional), gender (optional), birth year (optional).
Match data: Match scores, dates, match type, and the players involved.
Rating data: Computed Glicko-2 ratings for singles, doubles, and mixed doubles; full rating history.
Profile photo: If you choose to upload one.
Push notification token: If you opt in to push notifications.
Consent record: Date and time you accepted this Privacy Policy and our Terms of Service.

3. Legal Basis for Processing

Contract performance (Art. 6(1)(b) GDPR): Processing your account data, match data, and ratings is necessary to provide the SmashRating service you signed up for.
Consent (Art. 6(1)(a) GDPR): Push notifications and optional profile fields (gender, birth year, city) are processed only with your explicit consent, which you can withdraw at any time.
Legitimate interests (Art. 6(1)(f) GDPR): We process minimal usage data to maintain service security and prevent abuse.

4. How We Use Your Data

To create and manage your player profile and account.
To log, confirm, and display match results.
To calculate and display your badminton ratings.
To show your profile and rating to other players on leaderboards and player search.
To send match confirmation and notification emails (if applicable).
To send push notifications (only if you opt in).

5. Data Sharing and Third Parties

We share your data only with the following service providers under data processing agreements:

Supabase: Database and authentication hosting. Data may be stored in the EU or US under standard contractual clauses.
Vercel: Application hosting and serverless functions. Data processed in the EU/US.
Resend: Transactional email delivery (match confirmations, notifications).

We do not sell your personal data to any third party.

6. Data Retention

Your personal data is retained for as long as your account is active.
When you delete your account, your personal data (email, display name, location, profile photo, push token) is permanently and immediately deleted.
Match scores are retained anonymously after account deletion to preserve the match history of other players.

7. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights:

Right of access: You can download all your personal data from Settings → Your Data → Download My Data.
Right to rectification: You can update your profile information in Settings at any time.
Right to erasure (“right to be forgotten”): You can permanently delete your account from Settings → Your Data → Delete Account.
Right to data portability: You can download your data as a machine-readable JSON file.
Right to restriction of processing: Contact us at privacy@smashrating.com to request restriction.
Right to object: You may object to processing based on legitimate interests by contacting us.
Right to withdraw consent: You can withdraw push notification consent in your device or browser settings at any time.

You also have the right to lodge a complaint with your national supervisory authority. In Slovenia, this is the Information Commissioner (Informacijski pooblaščenec).

8. Security

We take reasonable technical and organisational measures to protect your personal data, including encrypted connections (HTTPS), row-level security on our database, and access controls. No internet transmission is 100% secure; use SmashRating at your own risk.

9. Children

SmashRating is not directed at children under the age of 14. If you believe a child under 14 has created an account, contact us at privacy@smashrating.com.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting a notice in the app. Your continued use of SmashRating after changes constitutes acceptance of the revised policy.

11. Contact

For any privacy-related questions or to exercise your rights, contact us at privacy@smashrating.com.