Privacy Policy
Effective Date: October 3, 2026
Last Updated: October 3, 2026
First Published: June 3, 2026
Company: Sands Technologies LLC
Contact: support@asandstech.com
Website: courtfinder.pro
1. Who We Are
CourtFinder is operated by Sands Technologies LLC ("we," "us," or "our"). This Privacy Policy explains how we collect, use, and protect information when you use the CourtFinder website (courtfinder.pro) and the CourtFinder iOS app.
2. Information We Collect
Automatically Collected
- Anonymous session IDs — a random ID stored in your browser or in the app, used to keep track of your check-ins without requiring an account
- Check-in data — court visited, skill level selected, time of check-in/check-out
- Device/browser info — browser or device type and operating system
Location
On the website, if you allow it, your browser shares your device's location with the page so it can sort courts by distance and center the map on you. This happens only on your device: your location is never sent to or stored by our servers. The map images on the website's map page are loaded from OpenStreetMap, which receives the area being shown. The iOS app does not use your location.
When You Create an Account
- Email address — when you sign in with email and password, Google, or Apple. With Google or Apple sign-in we may also receive your name. Passwords are handled by our authentication provider (Supabase); we never see them.
- Username and player profile — position, skill level, display name
- Play history — courts visited, games played, win/loss record
- Reputation data — ratings received from other players
- Reports you send — what you reported, the reason you chose and any note you add. Reports are visible only to you and our moderators.
- Players you block — visible only to you. The person you block isn't notified.
3. How We Use Your Information
- Displaying active player counts and who's at a court
- Linking check-ins to your player profile and history
- Calculating and displaying Elo/rank ratings
- Enabling game scheduling and score reporting
- Reviewing reports and acting on them, for example removing content or suspending or banning an account
- Applying your blocks: hiding a blocked player's games and check-ins from you in the app, and stopping you and a blocked player from joining the same game
- Sending account-related emails (no marketing without consent)
- Improving app performance and debugging errors
4. How We Do NOT Use Your Information
- We do not sell your data to third parties
- We do not use your data for advertising
- We do not collect or store your location or location history
- We do not process payments or store financial information
5. Third-Party Services
| Service | Purpose | Their Privacy Policy |
|---|---|---|
| Supabase | Database, authentication, realtime | supabase.com/privacy |
| Google Sign-In | Optional SSO login | policies.google.com/privacy |
| Apple Sign-In | Optional SSO login | apple.com/privacy |
| Netlify | Website hosting | netlify.com/privacy |
| OpenStreetMap | Map images on the website map | osmfoundation.org privacy policy |
| Upstash Redis | Rate limiting (no personal data stored) | upstash.com/privacy |
6. Data Retention
- Guest check-ins (made without an account) — a check-in counts toward a court's live player count until you check out or it expires after 3 hours. The record (court, skill level, times and the random session ID) is kept after that, and we delete it on request: email support with the court and roughly when you checked in.
- Player profiles — retained while your account is active
- Play history and ratings — retained for leaderboard and ranking integrity
- Deleted accounts — see "Deleting your account" below
Deleting your account
You can delete your account at any time in the iOS app or on the website: Profile → Account → Delete account, then type DELETE to confirm. Deletion can't be undone. When you delete your account:
- We delete your check-in history, court bookmarks, reputation votes you gave and received, the players you blocked and who blocked you, and any feedback sent from your account's email address.
- We remove your email address, sign-in credentials and sign-in sessions from our authentication provider, and you can no longer sign in to the account.
- If you signed in with Apple, we ask you to sign in with Apple once more and use that to revoke CourtFinder's access to your Apple ID. If that step doesn't complete, you can remove access yourself on your iPhone: Settings → [your name] → Sign-In & Security → Sign in with Apple → CourtFinder → Stop Using.
- Open games you created are cancelled, and you're removed from open games you joined.
What we keep, and why:
- Game records. Rosters, scores and ratings from games you played are shared records that other players' history and rankings depend on. They stay, but your username is replaced with "Deleted player", your profile details are cleared, and you're removed from leaderboards.
- Reports you filed are kept without your identity, so moderation decisions stand. Reports about your content are kept as moderation records.
- Administrative log. We keep an internal log of administrative actions, including a record that the account was deleted, for security and abuse prevention.
- Our authentication provider (Supabase) keeps its own security audit log, which may include your email address, for a limited period under its retention policy.
7. Your Rights
Depending on your location, you may have the right to:
- Access the personal data we hold about you
- Request correction of inaccurate data
- Delete your account and data (you can do this yourself in the app; see "Deleting your account" above)
- Opt out of non-essential data collection
To exercise any of these rights, email support@asandstech.com.
8. Children's Privacy
CourtFinder is not intended for users under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us at support@asandstech.com and we will delete it promptly.
9. Data Security
We use industry-standard security practices including:
- Row-Level Security (RLS) enforced at the database layer
- HTTPS/SSL for all data in transit
- JWT-based authentication with short expiry windows
- Rate limiting on public submission endpoints
10. Changes to This Policy
We may update this Privacy Policy as new features are added. We will update the "Last Updated" date at the top. Continued use of CourtFinder after changes constitutes acceptance of the updated policy.