CourtSpot

Privacy Policy

Last updated: 19 August 2026

NederlandsEnglish

CourtSpot brings together clubmates who are free to play tennis at the same time. That takes a handful of details, and nothing beyond them. This page describes exactly which.

Who is responsible

CourtSpot is built and operated by Maarten Grootoonk, who is the data controller under the GDPR for the processing described here. CourtSpot is not a product of your tennis club, and the club has no access to your CourtSpot account.

Contact is via privacy@maartendev.me.

What we process

When you sign in

You pick your club, enter your full name as the club knows it, and a two-digit verification code. We store your name; clubmates see it when you share a playing slot with them.

We do not store your date of birth. The verification code is derived from it — the first digit of your day of birth and the last digit of your year of birth — and is used only to check that you are who you say you are. We do not store the code either.

From your club membership

A few details belong to your membership and come with your account: your age group, your singles and doubles rating, and your gender. We fill these in so you do not have to type them, and they are used to match you with suitable opponents.

From your use of the app

• your weekly availability: the days and time slots you can usually play;
• your opponent preferences: playing strength and age group;
• an away period, if you set one;
• your favourite clubmates;
• your match requests and matches: with whom, when, on which court, and the sequence of invitations, counter-proposals, acceptances and cancellations.

From your device

• a push token from Apple or Google, so we can notify you when someone invites you or responds to your request, along with the platform and the language of your notifications;
• technical details of your requests to our server, including your IP address, in our logs.

What we do not process

CourtSpot never asks for or stores an email address, phone number, password, profile photo, location or GPS data, contacts, or payment details. There is no chat, so there are no messages.

The app contains no analytics, advertising, attribution or crash-reporting SDK of any kind. Nothing about your behaviour is measured for advertising, and nothing about you is shared with advertisers or data brokers. CourtSpot does not track you across other apps or websites.

Why we use it, and on what legal basis

• Performance of the service (GDPR Art. 6(1)(b)) — matching you with clubmates at times you are both free, sending and answering match requests, and notifying you about them. Without this data the app does not work.
• Legitimate interests (GDPR Art. 6(1)(f)) — the security and reliability of the service: logs used to detect faults and abuse.

Playing suggestions are generated automatically, from overlapping availability, playing strength and age group. They are suggestions: no decision with legal or similarly significant effects follows from them, and you are never obliged to accept one.

Who else sees your data

Other members of your club

Clubmates who, according to the app, are free at the same time see your name, age group, playing strength and gender, and whether you are away. They do not see your full availability schedule, your preferences, or your favourites list.

Processors

• Microsoft Azure — hosting, database, key management and logging, within the European Union.
• Apple (APNs) and Google (FCM) — solely to deliver push notifications to your device. Note that the text of such a notification contains a clubmate's first name and a playing time, so those pass through Apple's or Google's servers.

We do not sell data and we share nothing with advertisers or data brokers.

How long we keep it

• Your account and profile data — for as long as you use CourtSpot. Delete your account and it goes a day later; what exactly happens is set out under Deleting your account.
• Push tokens — until you sign out, turn off notifications, or your device replaces the token; tokens Apple or Google report as expired are cleaned up.
• Technical logs, including IP addresses — 30 days, then deleted automatically.
• Matches already played — a match belongs to everyone who was in it. If you delete your account your name is replaced by Oud-lid ("former member"); the match itself stays with the other participants, so their own history does not disappear from under them.

What is stored on your phone

One thing: the token that keeps you signed in. It lives in your device's secure storage (iOS Keychain, Android Keystore) and is deliberately excluded from cloud backup. Signing out erases it. CourtSpot uses no cookies and no trackers.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interests.

Most of it you exercise yourself in the app, without having to ask us:

• Access and portability — Instellingen → Mijn gegevens downloaden (Settings → Download my data) hands you everything we hold about you as a JSON file: your profile, your availability, your favourites and your matches.
• Rectification — availability, preferences, away period and favourites can be changed at any time. Your name, playing strength and age group belong to your club membership and are changed at your club; they come across the next time you sign in.
• Erasure — Instellingen → Account verwijderen (Settings → Delete account), or on this site. See below.

For restriction of processing, objection, or anything the app does not cover, email privacy@maartendev.me. You will get a reply within 30 days.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl.

Deleting your account

There are two ways, and neither of them requires asking us.

In the app: Instellingen → Account verwijderen (Settings → Delete account). You are first shown what it means and how many scheduled matches are affected.

On this site: courtspot.maartendev.me/delete-account-en, meant for when you no longer have the app installed. You sign in with the same details as in the app.

Either way it happens after 24 hours rather than immediately. Signing in to CourtSpot takes your name and a two-digit code, and that is too little to let an account be lost irrevocably. So all your devices are notified first, and one tap stops it if it was not you. Your account keeps working in the meantime. Do nothing, and everything below happens at the stated time.

When it happens:

• matches you organised that had not been played yet are called off, and invitations you had not yet answered are declined — the other players are notified, so nobody is left waiting on an answer that is not coming;
• your name, your link to the club register, your availability, your preferences, your away period and your favourites are erased — including from clubmates who had listed you as a favourite;
• the push tokens for all your devices are deleted, so no further notifications reach you;
• you are signed out everywhere: another device still signed in stops working immediately.

What remains is your participation in matches already played or called off. Your name is no longer on them — they read Oud-lid ("former member"). Those matches are the other participants' history too, and that must not vanish from under them. Nothing else is left on that row: your age group, your playing strength, your gender and the reference to the club register are all erased. So there is no route from such a match back to you.

Your club membership is separate: it belongs to your club and is unaffected. If you delete your CourtSpot account you can simply sign in again later with the same details — you start with an empty profile.

If neither route works for you, we will do it for you: email privacy@maartendev.me with your name and your club.

Children

CourtSpot is intended for members of a tennis club and is not directed at children under 16. Where a member is under 16, use is with the consent of a parent or guardian. Email us if you believe a child holds an account without that consent.

Changes

If what we process changes, we update this page and put a new date at the top. For a material change, we will say so in the app.