CourtSpot

Privacy Policy

Last updated: 18 August 2026

NederlandsEnglish

CourtSpot brings together clubmates who are free to play tennis at the same time. That takes a handful of details, and nothing beyond them. This page describes exactly which.

Who is responsible

CourtSpot is built and operated by Maarten Grootoonk, who is the data controller under the GDPR for the processing described here. CourtSpot is not a product of your tennis club, and the club has no access to your CourtSpot account.

Contact is via privacy@maartendev.me.

What we process

When you sign in

You pick your club, enter your full name as the club knows it, and a two-digit verification code. We store your name; clubmates see it when you share a playing slot with them.

We do not store your date of birth. The verification code is derived from it — the first digit of your day of birth and the last digit of your year of birth — and is used only to check that you are who you say you are. We do not store the code either.

From your club membership

A few details belong to your membership and come with your account: your age group, your singles and doubles rating, and your gender. We fill these in so you do not have to type them, and they are used to match you with suitable opponents.

From your use of the app

• your weekly availability: the days and time slots you can usually play;
• your opponent preferences: playing strength and age group;
• an away period, if you set one;
• your favourite clubmates;
• your match requests and matches: with whom, when, on which court, and the sequence of invitations, counter-proposals, acceptances and cancellations.

From your device

• a push token from Apple or Google, so we can notify you when someone invites you or responds to your request, along with the platform and the language of your notifications;
• technical details of your requests to our server, including your IP address, in our logs.

What we do not process

CourtSpot never asks for or stores an email address, phone number, password, profile photo, location or GPS data, contacts, or payment details. There is no chat, so there are no messages.

The app contains no analytics, advertising, attribution or crash-reporting SDK of any kind. Nothing about your behaviour is measured for advertising, and nothing about you is shared with advertisers or data brokers. CourtSpot does not track you across other apps or websites.

Why we use it, and on what legal basis

• Performance of the service (GDPR Art. 6(1)(b)) — matching you with clubmates at times you are both free, sending and answering match requests, and notifying you about them. Without this data the app does not work.
• Legitimate interests (GDPR Art. 6(1)(f)) — the security and reliability of the service: logs used to detect faults and abuse.

Playing suggestions are generated automatically, from overlapping availability, playing strength and age group. They are suggestions: no decision with legal or similarly significant effects follows from them, and you are never obliged to accept one.

Who else sees your data

Other members of your club

Clubmates who, according to the app, are free at the same time see your name, age group, playing strength and gender, and whether you are away. They do not see your full availability schedule, your preferences, or your favourites list.

Processors

• Microsoft Azure — hosting, database, key management and logging, within the European Union.
• Apple (APNs) and Google (FCM) — solely to deliver push notifications to your device. Note that the text of such a notification contains a clubmate's first name and a playing time, so those pass through Apple's or Google's servers.

We do not sell data and we share nothing with advertisers or data brokers.

How long we keep it

• Your account and profile data — for as long as you use CourtSpot, and until you ask for deletion.
• Push tokens — until you sign out, turn off notifications, or your device replaces the token; tokens Apple or Google report as expired are cleaned up.
• Technical logs, including IP addresses — 30 days, then deleted automatically.
• Matches — a match belongs to everyone in it. If your account is deleted, your name is removed from it; the match itself may remain visible to the other participants, without data traceable to you.

What is stored on your phone

One thing: the token that keeps you signed in. It lives in your device's secure storage (iOS Keychain, Android Keystore) and is deliberately excluded from cloud backup. Signing out erases it. CourtSpot uses no cookies and no trackers.

Your rights

Under the GDPR you have the right of access, rectification, erasure, restriction of processing, data portability, and the right to object to processing based on legitimate interests.

Some of this you control directly in the app: availability, preferences, away period and favourites can be changed at any time. For the rest — access, a copy of your data, or full deletion of your account — email privacy@maartendev.me. You will get a reply within 30 days.

If you disagree with how we handle your data, you can lodge a complaint with the Dutch data protection authority, the Autoriteit Persoonsgegevens, autoriteitpersoonsgegevens.nl.

Children

CourtSpot is intended for members of a tennis club and is not directed at children under 16. Where a member is under 16, use is with the consent of a parent or guardian. Email us if you believe a child holds an account without that consent.

Changes

If what we process changes, we update this page and put a new date at the top. For a material change, we will say so in the app.