Privacy Policy

1. Data we process

• Account data: email address, display name, login information and internal account ID.
• Google sign-in: if you use Google, we receive the basic data required for sign-in, in particular your email address and account identity. We do not access Google Drive, contacts or other Google content.
• Tennis and activity data: matches, training sessions, scores, set and point events, duration, distance, calories, serve data and, where recorded and transmitted, heart-rate values, heart-rate zones and heart-rate histories.
• Location data for outdoor activities: where the Garmin app can determine a sufficiently stable GPS fix, one representative position per activity may be transmitted. Center Court does not receive an additional full GPS track in the Center Court payload for this purpose.
• Profile and social data: friends, friend requests, opponents, display name, level, XP, achievements, public profile information and assigned matches.
• Local Hero data: city, region/state and country derived from the activity position, ranking level, Hero points, qualifying matches and training sessions, and internal plausibility signals used for ranking eligibility.
• Billing data: subscription status, Stripe customer/subscription references and information required for payment processing. Center Court does not store full card details.
• Technical data: device identifiers, language, request timestamps, monitoring data and security-relevant technical information where required for operation, protection and troubleshooting.
• Legal confirmations: time, language and version of the accepted Terms of Use and acknowledged Privacy Policy.

2. Purposes and legal bases

We process data to provide your account, store and analyse tennis activities, provide social and opponent features, levels, achievements, Premium, Local Hero and maintain the security and functionality of the service.

Legal bases include performance of the contract (Art. 6(1)(b) GDPR), legal obligations (Art. 6(1)(c) GDPR) and legitimate interests in secure, abuse-resistant and reliable operation (Art. 6(1)(f) GDPR). Where transmitted activity data qualifies as health data under the GDPR and consent is required, processing takes place only on the basis of the explicit consent required for that purpose (Art. 9(2)(a) GDPR).

The one-time confirmation at first sign-in records which versions of the Terms of Use were accepted and which Privacy Policy was acknowledged. This confirmation does not replace separate consent where such consent is legally required.

3. Location data and Local Hero

For outdoor matches and outdoor training sessions, after the activity starts the Garmin app may determine one fixed representative activity position from multiple stable GPS measurements. If a sufficiently stable fix is not obtained within the intended time window, no position is transmitted. Indoor activities are transmitted without a Local Hero position.

The position is used to assign the activity to a city, region/state and country. For reverse geocoding, the coordinate is sent server-side to Geoapify. To avoid repeated requests, Center Court may cache location assignments based on rounded coordinates.

The exact activity coordinate is not displayed in public Local Hero rankings or public player profiles. Only derived location information such as city, region and country, together with ranking data, is shown there. Participation in the public Local Hero ranking can be enabled or disabled in the account.

For Local Hero, activities may be checked automatically for plausibility, for example using activity duration, score/point data, distance, heart-rate data, temporal overlaps and geographically impossible activity sequences. These checks support ranking quality and abuse prevention; exact internal thresholds are not published.

4. Service providers

We use only the services that are actually needed to operate Center Court:

• Supabase – authentication, database and backend infrastructure.
• Google – optionally for Google sign-in.
• Stripe – payment and subscription processing.
• Resend – delivery of technical account and authentication emails.
• Vercel – hosting and delivery of the website where the website is operated there.
• Geoapify / KEPTAGO LTD – reverse geocoding of the representative activity position into city, region and country. Center Court uses Geoapify's EU-focused endpoint for this purpose.

For providers outside the EEA, transfers may rely on the applicable data-protection safeguards, in particular adequacy decisions or EU Standard Contractual Clauses. Where a provider acts as a processor, the applicable contractual data-protection arrangements are used.

5. Visibility to other users

Your display name and social features such as level, achievements, friendship status and shared tennis information may be visible to other Center Court users. If you participate in Local Hero, your public rank, Hero points, qualifying matches/training sessions and city, region and country may also be displayed. Other users can send you a friend request from your public player profile. Your login email address and exact activity coordinate are not displayed as public profile information.

6. Storage and deletion

Account, match and training data are generally stored while your account exists or until you delete individual content. The representative activity position and derived location data are stored as part of the relevant activity. Disabling public Local Hero participation does not automatically delete activity data already stored. If you delete an activity or your account, associated Center Court data is removed through the intended deletion processes. Data that must be retained due to legal obligations, in particular billing-related records, may be kept for the legally required period.

7. Cookies and local storage

Center Court uses storage mechanisms for sign-in, session management and technically necessary state. Google sign-in and Stripe payments may additionally use the technically necessary mechanisms of those providers. Center Court currently does not use its own advertising or marketing tracking cookies.

8. Your rights

Where the legal requirements are met, you have rights including access, rectification, erasure, restriction of processing, data portability and objection. You may withdraw consent with effect for the future.

For privacy requests, you can use the contact form.