swtspot
Last updated: October 22, 2026
This page says what swtspot keeps about you, who can see it and how to have it changed or removed. swtspot (swtspot.app) is run by Ethan Winiger, Portugal, who is responsible for your data.
For anything on this page, write to [email protected]: a question, a correction, a copy of your data or a removal.

Your login

•
Your sign-in email, to send you sign-in codes and the emails you ask for (bookings, invites, claim codes, and the emails about join requests).
•
A password, only if you set one. It is stored only by our sign-in service (Supabase Auth) as a one-way code, never as the password itself. Signing in with an email code always keeps working.
•
Whether the login is a Player or a Business. This cannot be changed later: a wrong one is fixed by deleting the account and making a new one.
•
What you save in Settings: your name, language, the sports you play and manage, and your services (for example organizer or coach).
•
Your player profile, if you fill it in: photo, nickname, level, singles or doubles, your home and current city, and if you want your age, gender, nationality, when you can play and how far you travel. Places of people are cities only, with the city centre as the point; only venues have an address.

What other people see

•
Published tournaments and leagues (draws, results, order of play, rankings) show the players' names and nicknames to everyone.
•
Find players lists every Player login with name, nickname, photo and city to other signed-in players. Your email, phone and exact place are never shown.
•
Your player page shows other signed-in players your age, gender, nationality, when you can play and how far you travel, but only what you filled in. Leave a detail empty to keep it off the page.
•
If you organize, your name, photo, contact email, website, social links and city (and a public phone, if you add one) show on your published tournaments and leagues.
•
Coaches publish their own contact details (phone, email, website, social links) and their city on their coach page. Never a home address.
•
A venue's phone, email and website are public on its venue page.

Your private phone

The phone in your profile is private and never shown on any page. It is given only to the organizer and managers of a tournament or league when you switch on "Share my phone number with the organizer" when you ask to join or join its waiting list. They then see it on your request and on your entry in that event (with Message on WhatsApp) for as long as your account exists. Deleting your account removes it.

Asking to join a tournament or league

When you ask to join, or join a waiting list, you tick a box to agree that the organizer and the event's managers see your name and contact details (and the email of your login if you are signed in). They use them to run the event.
We email the organizer and the event's managers when someone asks to join or asks for the waiting list, and we email you when your request is accepted, put on the waiting list or refused, in your language. Every such email ends with an unsubscribe link that works without logging in; signed in, Settings › Profile has a switch "Emails about join requests". An address that unsubscribed is kept for as long as it wants no more of these emails.
In a pair request you give your partner's name, and maybe their contact, and confirm that your partner agrees. Your partner can write to [email protected] to have their details removed.

Players added by others

Organizers and venues can add a player by name, with an optional nickname and contact, without that person having a login (an "unclaimed profile"). The contact is seen only by that player's organizers and the venue team that added them; the name and nickname show on published events.
•
You can link such a record to your own login through an invite from the organizer.
•
swtspot may join two records of the same person into one. Entries, levels, contact and the link to a login move to the record that is kept.
•
The emails an organizer invites to a private tournament are kept and shown to that tournament's organizers and managers. Organizers can also invite their past players by email.
To have a player record about you removed, use the removal form with a link to the page, or write to [email protected]. To stop such emails, write to [email protected].

Venues, sponsors and places added by others

Anyone with a login can add a venue (also a free public court), and organizers can add sponsors. We keep who added each one. The details on a venue page come from the person who added it or from the venue's own published phone, email and website.
•
The real owner can claim a venue: a code is sent to the venue's public email. Links people send to prove a venue (Google Maps, website, social pages) are kept for our check for 6 months.
•
The person who added a record sees who claims it (name and sign-in email), to tell if it is really the owner.
•
A sponsor's contact person, email and phone are seen only by the person who added it, its owner and the swtspot team.
A venue, club or company that wants a page removed uses the removal form; to have it changed, it writes to [email protected] with a link to the page.

Court bookings

When you book a court we keep your name, email and phone for that booking. The venue and its team see them to hold the court and reach you, and we email you the details with a private link to see or cancel the booking. If you are signed in, the venue team sees your player's contact on your bookings.
Bookers' details are kept 12 months after the day of the booking, then deleted. You pay at the venue: swtspot takes no payments.

Business logins and venue teams

•
A business sees in its Players list everyone it created, added to its tournaments or leagues, who booked there or made it a favorite. Its Members list holds the players it adds, also people without a login.
•
Venue teams can find players who have a login by name and city.
•
Team members see each other's name and sign-in email.
•
To be taken off a venue's lists, ask the venue or write to [email protected].
Several logins can stay signed in on one device, and anyone using that device can switch between them. Sign out on a shared device.

Photos

Profile, coach, venue, shop and tournament pictures and sponsor logos are kept in public storage: anyone with the link to a photo can see it, also without a login. You can remove a photo at any time (Remove photo); a photo that is removed or replaced is deleted from storage.

Maps and places

•
Cities come from GeoNames (geonames.org, CC BY 4.0). Maps and addresses: © OpenStreetMap contributors (openstreetmap.org, ODbL).
•
When you type a city or address, your browser asks OpenStreetMap directly, and Photon by Komoot when OpenStreetMap finds nothing. Map pictures also load from OpenStreetMap. Like any website, they see your internet address.
•
A short Google Maps link you paste is opened by our server; its answer is kept 30 days. To limit lookups we count them by a scrambled (hashed) form of your internet address, kept one day.
•
"Near me" and "Nearest to me" ask your browser for your location only when you use them. It is never stored.

Files organizers download

Organizers can download the players file of their tournament or league, with names, emails and phones. They must keep it private and delete it when they no longer need it (see the Terms of use).

Why we use your data

•
To run your login and what you ask for (joining an event, booking a court, an invite): because you asked for it.
•
To show names and results of published events, the players organizers add and the venues people add: because running and following sports events is a fair reason ("legitimate interest"). You can object by writing to [email protected].
•
Contact details you share on a join request or booking, and your private phone: because you agreed. You can take it back at any time.
•
The captcha on public forms and the limits on how often they can be sent: to keep out spam and fake requests ("legitimate interest").
•
Error reports and the uptime check: to find and fix faults quickly ("legitimate interest").

Who works for us

Supabase keeps the database, the logins and the photos; Cloudflare serves the website; Brevo sends the emails; Cloudflare Turnstile checks that a person, not a program, sends the join request, booking and removal forms when you are not signed in (it sees your internet address and details of your browser and device, only for this check); Sentry (its data kept in the EU, in Frankfurt) gets a short report when something breaks in the app or on our server: what went wrong, on which page or server function, the name of the browser and system, and the app version, never your name, email, phone number, internet address or what you typed; Better Stack checks every few minutes that the website and the database answer, and sees no personal data. They handle data only to run swtspot. We show no ads, sell no data and do no tracking for advertising. Your browser keeps your sign-in, language and the logins on this device; there are no advertising cookies. Some of them are companies outside the European Union (Supabase, Cloudflare and Sentry are American); data sent outside the EU is protected by the EU's standard contract clauses.

How long we keep things

•
Your login and profile: until you delete your account in Settings › Account type (a business can do it once none of its leagues, tournaments or bookings still runs; otherwise it writes to [email protected]). Leagues and tournaments a player ran, entries and results stay, and players linked to the login become unclaimed profiles again; a business's venue, leagues and tournaments go with it.
•
Details of a deleted login: 1 month, so a mistake can be undone, then erased.
•
Bookers' names and contacts: 12 months after the booking.
•
Contact details on join requests and entries: 12 months after the event ends. Names and results of published events stay as the event's history.
•
Deleted drafts of tournaments and leagues: 3 months.
•
Emails invited to a private tournament: 12 months.
•
Links sent to prove a venue: 6 months.
•
The history of changes to tournaments, entries, draws and scores: 24 months.
•
Unsubscribe links in emails: 12 months; the count of emails sent, for the hourly limit (without the address): one day.
•
Place lookups: 30 days; lookup counters: one day.
•
Error reports: 30 days at Sentry.
•
Removal requests: 24 months after they are answered.
Every night the app deletes what is older than these periods, also from the history of changes.

Your rights

Signed in as a player, Settings › My data › Export my data downloads a copy of your data at once. You can ask for a copy of your data, to correct it, or to have it removed, also for a record someone else added about you. You can also object to how we use your data, or take back an agreement you gave. Write to [email protected]; we answer within one month. If you think we handle your data wrongly, you can complain to the data protection authority of Portugal, the CNPD (cnpd.pt).
swtspot is not meant for children to sign up on their own. An organizer who adds young players needs a parent's or guardian's agreement.

Changes

When this policy changes we update this page and the date at the top.
Privacy policy
·
Terms of use
© 2026 swtspot