Privacy Policy

1. What we collect

When you create an account on CueClub.app, we collect:

• Account information: your email address, display name, and full name.
• Optional information: phone number, nationality, and profile avatar.
• League & tournament data: match results, scores, ratings, handicaps, and standings generated through the app.
• Google account data: if you sign in with Google, we receive your name and email from Google. We do not access your contacts, calendar, or any other Google data.

2. How we use it

• To provide the CueClub service — leagues, tournaments, standings, ratings, and handicaps.
• To display your display name and player ID in public standings and brackets.
• To allow organisers to contact you about match scheduling (via your phone number, if provided).
• To send you in-app notifications about your matches and leagues.
• To operate, maintain, improve, and develop the Service and its features.
• To compile aggregated, anonymised, and derived data — such as rankings, statistics, and competitive records — that forms part of the CueClub platform.

3. Aggregated and derived data

In addition to your personal data, the Service generates aggregated and derived data, such as ratings, rankings, handicap calculations, league and tournament histories, and statistical records. This aggregated and derived data forms part of the CueClub platform and is owned by CueClub (see our Terms of Service). Aggregated and anonymised records that do not identify you may be retained as part of the platform’s competitive history even after your account is deleted. Where such records can no longer identify you, they are not “personal data” and are not subject to deletion on account closure.

4. What is public

By default, only your display name and player ID (e.g. CC-00001) are shown publicly in league standings, tournament brackets, and scoreboards.

Your full name is not shown publicly unless you choose to show it. You can opt to display your full name in public standings and brackets via your profile settings; if you do not, it remains private. You can change this preference at any time.

Your email address and phone number are never shown publicly. They are only visible to league organisers who need to contact you for the operation of their league.

5. Organisers and partners

CueClub works with organisers, venues, and commercial partners who run leagues and tournaments on the platform. These parties may see the limited personal data necessary to operate their own competitions (for example, a player’s display name, player ID, and — if provided — a contact number for scheduling). Organisers and partners do not own your account or the CueClub user base, and may not use data accessed through the Service for any purpose unrelated to running their own league, or to build or seed a competing service. Players join the CueClub platform directly; the relationship is between you and CueClub, independent of any organiser or partner who introduced you.

6. Data storage

Your data is stored securely on Supabase (hosted on AWS infrastructure). Passwords are hashed and never stored in plain text. All connections use HTTPS encryption. As users are based in multiple countries, your data may be processed and stored on servers located outside your country of residence; where this happens we take reasonable steps to ensure a comparable standard of protection.

7. Third-party services

• Supabase: database, authentication, and file storage.
• Vercel: application hosting.
• Google OAuth: optional sign-in method (only if you choose “Continue with Google”).
• Mailtrap: transactional emails (magic links, password resets).

We do not sell your personal data to any third party. We do not use analytics or advertising trackers.

8. Google User Data

CueClub.app offers “Sign in with Google” as an optional authentication method. This section describes how we interact with Google user data in compliance with the Google API Services User Data Policy.

Data Accessed

When you sign in with Google, we request access to the following data from your Google account:

• Email address — used to create and identify your CueClub account.
• Name (display name / full name) — used to pre-fill your profile name during registration.
• Profile photo URL — provided by Google but not stored or used by CueClub.

We only request the email and profile scopes (OpenID Connect). We do not access your Google contacts, calendar, Drive files, Gmail, or any other Google services.

Data Usage

Google user data is used exclusively for:

• Authentication: verifying your identity and signing you into CueClub.
• Account creation: your email becomes your account identifier. Your name pre-fills the registration form (you can change it before saving).

We do not use Google user data for advertising, analytics, AI/ML model training, or any purpose unrelated to providing the CueClub service.

Data Storage

Your email address and name (as provided by Google at sign-in) are stored in our Supabase database alongside your CueClub profile. This data is treated identically to data provided by users who register with email and password.

Data Sharing

We do not share, sell, or transfer Google user data to any third party, except as required to provide the CueClub service (i.e. stored in our Supabase database hosted on AWS). We do not provide Google user data to any data brokers, advertising networks, or analytics services.

Data Retention & Deletion

Google user data is retained for as long as your CueClub account exists. You may request deletion of your account and all associated personal data at any time by contacting us (see Contact section). Upon account deletion, all stored Google user data is permanently removed. Aggregated or anonymised records that no longer identify you may be retained as described in Section 3.

9. Your rights

You can:

• View and edit your profile information at any time in Settings.
• Choose whether your full name is shown publicly (it is hidden by default).
• Request deletion of your account and all associated personal data by contacting us.
• Request a copy of the personal data we hold about you.
• Withdraw consent for optional uses of your data, recognising that some data is necessary to provide the Service.

Note that deletion or withdrawal applies to your personal data. Aggregated and anonymised records that no longer identify you form part of the platform and may be retained (see Section 3).

10. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After account deletion, personal data is removed within a reasonable period, except where we are required to retain it by law, or where it has been aggregated or anonymised such that it no longer identifies you.

11. Cookies

We use essential cookies only — for authentication session management. We do not use tracking cookies, analytics cookies, or advertising cookies.

12. Children

CueClub is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us personal data, please contact us and we will delete it.

13. Contact

For any privacy questions, data access, or deletion requests, email us at hello@cueclub.app.

14. Changes

We may update this policy from time to time. Changes will be posted on this page with an updated date.