About This Policy
This Privacy Policy explains how OnlyBadminton handles information when you visit our website or use our sports community, scoring, and player-management services. The public website is available at onlybadminton.com and the app at app.onlybadminton.com. Contact us at support@onlybadminton.com with privacy questions.
Information You Provide
Account and profile information may include your name, email address, Google account identifier, username, player ID, age, gender, profile picture, location labels, playing category, play style, handedness, preferences, selected themes, and cosmetics. We also process friend and opponent relationships, doubles-team membership, invitations, lobby presence, venue and time suggestions, match chat, scores and set history, shot and fault reviews, opponent skill ratings, league and ranking history, tournament registrations, brackets, and results. Support messages, disputes and supporting explanations, administrator decisions, notifications, and read status are also stored when you use those features. For email/password sign-in, authentication credentials are processed through Supabase Auth; passwords are not shown in player profiles or recorded by the API-usage tracker.
Identity & Age Verification
When you submit verification or an age-change request, we may collect an identity document image/file, document name and type, identity number if supplied, selfie, requested age, reason, notes, request time, review status, and administrator feedback. These materials are processed to review identity or age eligibility by administrators with the relevant access. Do not submit documents through public chat. Verification is an account-review feature and does not guarantee that another player is safe, qualified, or trustworthy.
Google Sign-In
If you choose Google sign-in, we receive the basic account information made available for authentication, such as your Google account identifier, email address, name, and profile picture. We use it to sign you in and associate your account with your player profile. Signing in does not give us access to your Gmail messages, Google Drive files, or Google contacts. You can review and revoke access through your Google account settings. Google-derived account information is used for authentication and account features, not advertising targeting.
Location, Camera & Microphone
With device permission, GPS coordinates, location accuracy, permission status, and refresh timestamps are used for nearby-player and radius rankings, distance displays, venue lookup, and match-start proximity checks. Location-dependent features require permission to work. Location coordinates may be sent to reverse-geocoding providers; typed venue searches are sent to an address-search provider. Venue suggestions and accepted locations may be visible to other participants. Camera access supports QR/PIN-based match access, profile images, and verification selfies. Camera and microphone access support live broadcasting where enabled. We do not state that all players’ raw GPS coordinates are public. Manage permissions in device or browser settings; refusing or withdrawing them may make related features unavailable.
Activity, Cookies & Technical Information
Authentication uses HTTP-only session cookies and a short-lived Google sign-in verification cookie. Browser storage holds preferences, filters, cached app data, screen-activity batches, and scoring drafts. Screen names, visit counts, visit durations, visibility, session identifiers, and timestamps support screen-usage statistics. API metadata includes endpoint, screen attribution, user identifier where authenticated, response status, response duration, and request time; the app’s API-usage tracker does not store request bodies, passwords, or authentication credentials. Connection activity supports lobby and online-status features. Hosting and other service providers may process IP addresses, browser/device information, and diagnostic logs. Public pages do not load the signed-in app or request player records; their web server still receives ordinary page requests.
How We Use Information
We process information to create accounts and maintain sessions; show player profiles and sports statistics; find players and validate participation; coordinate matches, teams, and tournaments; deliver scoring and live viewing; generate rankings and progression; process reviews and disputes; manage purchases, subscriptions, wallets, gifts, and cosmetic ownership; show in-app notifications and on-screen messages; provide support; and prevent fraud or misuse. Authorised administrators use restricted management tools to review verification requests, handle disputes and support, manage tournament access, and inspect service performance. Notifications currently appear inside the app, including notification panels and on-screen messages where enabled.
Purchases, Rewards & Gifts
We store purchase/product identifiers, transaction and entitlement records, Pro duration/expiry and renewal state, coin/gem balances and ledger entries, reward and adjustment records, owned-item quantities, equipped cosmetics, and gift sender/recipient/item information. Payment platforms process payment credentials; the app’s APIs do not request full payment-card details. Purchased or earned virtual items are linked to your account and may appear publicly when equipped. Administrative gifts and auto-equip actions can change your equipped items.
What Other Players Can See
Names, usernames, avatars, age/gender or playing-category details, selected cosmetics, rankings, league information, and sports statistics may appear in profiles, challenges, teams, and tournament screens. Other players may see opponent ratings or the resulting skill score and participant/lobby status where provided. Match messages, venue/time suggestions, and scheduling details are shown to the relevant participants; scores and results may be shown to live viewers and history users. Gift recipients receive information identifying the sender and item. Verification documents and selfies are handled through restricted administrator workflows rather than ordinary player listings. Never include sensitive personal information in public names, images, chat, or broadcasts.
Service Providers & Optional Integrations
Supabase provides authentication and database services; Microsoft Azure hosts the app. Google supports Google sign-in and serves Google Fonts used by the app and public pages. Unsplash and ui-avatars.com may serve profile/avatar images; avatar-generation requests may contain the text used to create the avatar. BigDataCloud and OpenStreetMap/Nominatim support location lookups, while Photon/Komoot supports typed venue searches. These requests may disclose the relevant coordinates or search terms plus ordinary connection metadata to the provider. Where configured, RevenueCat and the checkout/store provider (including Stripe for supported web checkout, Google Play, or Apple App Store) handle purchases and entitlements using account-linked user, product, and transaction identifiers where required. Website ad code and mobile ad units may use Google AdSense, AdMob, or another configured advertising provider. Cloudflare Stream and YouTube support enabled live streams and recordings. Loading embedded video or third-party assets can expose network/device information and trigger the provider’s cookies or storage. Providers’ own privacy policies apply to their processing, and data may be processed outside your country.
Advertising & Google Account Data
Advertising is used only where configured and available. Ad providers may collect device or advertising identifiers, IP addresses, ad interactions, and cookies under their own terms; rewarded-ad completion may be used to grant in-app benefits. Availability and privacy controls vary by platform. Google sign-in information is used for authentication/account features, not sold or used to target advertising. Use and transfer of information received from Google APIs is limited to the disclosed app functions and applicable Google API Services User Data Policy requirements. We do not access a signing-in player’s Gmail, Drive, or contacts.
Retention & Security
Retention depends on the information and purpose. Account/profile, match, ranking, team, tournament, wallet, gift, support, and dispute records may remain while needed to provide the service or retain legitimate sports records. The app’s local API metadata tracker keeps at most 100,000 retained events and prunes records older than 365 days; separate screen-usage data and hosting-provider logs have their own retention. Verification material is not subject to an automatic deletion deadline in the current implementation. Supported archive processing deletes Cloudflare video only after the YouTube copy is successfully processed and saved; an unsuccessful upload can leave the Cloudflare recording retained. Deleting an app account does not automatically remove a recording already published to YouTube; request its review through support. Backups, disputed transactions, fraud-prevention records, and information required by law may be retained longer. We use access controls, restricted administrator functions, and encrypted transport; no system can guarantee absolute security.
Your Choices & Requests
Update supported fields in Edit Profile, manage permissions in your device/browser, and revoke Google sign-in access in your Google account settings. Revocation alone does not delete your OnlyBadminton account or its history. To request access, export, correction, deletion, or restrictions on use of your information, email support@onlybadminton.com from your account address. Tell us whether your request concerns your account, a verification document, a recording, or another record. We may verify ownership before acting. Rights and exceptions depend on applicable law; some records may need to be retained or anonymised for disputes, security, purchases, or sports history. There is no automatic self-service deletion workflow in the current app. Cancel subscriptions separately through the purchasing platform.
Processing Grounds & Disclosures
Depending on applicable law, information is processed to provide the service you request, with your permission for relevant features, for service-security and operational interests where permitted, or to meet legal obligations. We may disclose relevant information to authorised service providers, participants/viewers of the feature you use, or where legally required to investigate abuse or respond to lawful requests. We do not sell Google sign-in account information. We do not claim that all third-party ad processing is covered by the account sign-in consent; review applicable provider and platform controls.
Younger Players
The app records age and supports age/category eligibility and verification. Younger users must have the parental or guardian consent and supervision required by the law in their location. An age field or verification badge alone is not proof of parental consent or appropriate supervision. Parents or guardians may contact support to review or request removal of a child’s information.
Changes & Contact
We may update this policy as the service changes. The updated date will appear on this page. For questions about this policy or your information, contact support@onlybadminton.com.