Privacy Policy

1. Who We Are

Racket Ratings (racketratings.net) is a platform for tracking racket sport rating points, match results, and tournament standings. This policy explains what personal data we collect, how we use it, and your rights.

2. Data We Collect

• Name and email address — when you register or sign in with Google or Facebook
• Username — chosen by you during profile setup
• Optional profile details — date of birth, gender, handedness, equipment (blade, rubber)
• Phone number — optionally provided during profile setup
• Profile photo URL — from Google or Facebook if you sign in via OAuth
• Match and tournament records — scores, results, rating history

3. How We Use Your Data

• To create and manage your player account
• To calculate and display your rating on the public leaderboard
• To record match results and tournament participation
• To send email verification (if you register with email/password)
• We do not sell your data to third parties
• We do not use your data for advertising

4. Third-Party Sign-In

If you sign in using Google or Facebook, we receive only your name, email address, and profile photo from those services. We do not access your contacts, posts, or any other account data. Your use of those services is governed by their respective privacy policies.

5. Public Data

Your name, username, rating, and match results are publicly visible on the leaderboard and tournament pages. Optional profile details (equipment, gender, handedness) are visible on your player profile if provided.

6. Data Retention

We retain your account and match data for as long as your account is active. If you request deletion, we will remove your personal data within 30 days.

Singapore PDPA

We handle personal data in line with Singapore's Personal Data Protection Act (PDPA). We collect only what the service needs and use it for the purposes described here.

• Marketing & digest emails: the weekly digest is opt-in and off by default. You can turn it off any time in Settings or via the one-click unsubscribe link in every digest email.
• Data minimisation: you can hide your date of birth/age from other players in Settings, and control what appears on your public profile.
• Retention: match, rating and tournament records are kept while your account is active; uploaded analysis videos are deleted after 48 hours; community-chat messages are pruned on a rolling window; everything is removed when you delete your account.
• Your rights: you can access and correct your data in your profile, export a full copy from Settings, withdraw consent, and delete your account at any time.

Data Protection Officer

We have appointed a Data Protection Officer (DPO) responsible for ensuring our compliance with the PDPA. For any data-protection question, access or correction request, consent withdrawal, or complaint, you may contact our DPO at domksj23@gmail.com.

No Marketing Messages

We will never send you marketing or promotional calls, text messages, or emails, and we never sell, rent, or share your phone number or email for marketing purposes. The only messages we send are essential service messages — such as email verification and password resets — and, only if you opt in, the weekly digest, which you can switch off at any time in Settings. Because we do not conduct any telemarketing, we fall outside Singapore's Do Not Call (DNC) provisions.

Overseas Data Transfer

Our application, database, and media are hosted with third-party cloud providers (including Railway, Google Cloud, Vercel, and Cloudinary) whose data centres may be located outside Singapore. Where your personal data is transferred to and stored on servers overseas, we take reasonable steps to ensure that it continues to receive a standard of protection comparable to that under the PDPA, in accordance with the Transfer Limitation Obligation.

Data Breach Notification

We maintain a data-breach response plan and monitor for security incidents. If a data breach occurs that is likely to result in significant harm to affected individuals, or that affects 500 or more individuals, we will notify the Personal Data Protection Commission (PDPC) within 3 calendar days of assessing the breach as notifiable, and will notify affected individuals as soon as practicable. In all cases we will act promptly to contain the breach, assess its impact, and take steps to prevent recurrence.

7. Data Deletion & Your Rights

You have the right to access, correct, or delete your personal data at any time.

To request deletion of your account and all associated data, email us at domksj@yahoo.com.sg with the subject line "Delete My Account" and include your username. We will process your request within 30 days.

8. Cookies & Storage

Your refresh credential is kept in a secure, httpOnly cookie and the short-lived access token stays in browser memory. We use localStorage only for non-sensitive preferences and session hints. We use Vercel Web Analytics to understand aggregate, anonymous page traffic — it does not use cookies and does not track you across other websites. We do not use advertising or cross-site tracking cookies.

9. Contact

For any privacy questions, contact domksj@yahoo.com.sg.