Privacy Policy
Last updated: August 17, 2026
PickleballOfficials helps referees, tournament staff, and officiating organizations find one
another and run tournaments. This policy describes the information the product handles today.
Information you provide
This can include account name and email, an optional phone number, referee profile and profile
photo, credential claims and private evidence, availability, travel and location preferences,
tournament applications and invitations, community content, tournament communications, rosters,
assignments, attendance, duty events, corrections, and agreed compensation facts.
Automatically generated operational data
The product records server-side session and authentication data, IP address and browser user
agent, notification and delivery status, encrypted push-subscription material, application and
schedule activity, assignments, attendance and completed-match history, and ordinary security logs
containing path, response, request-size, and timing information. Token-bearing query strings are not
included in the normal access-log path.
How information is used
Information is used to operate and secure accounts, connect referees and tournament staff,
verify credentials, recruit and schedule officials, run tournament operations and communities,
deliver applicable notifications, produce completed-event reports, and support the service.
Who can see what
Not every profile or contact field is public. A referee controls public or members-only profile
visibility, and email or phone is public only after a separate choice to show it. Signed-in users
receive only authorized member and participant information. Accepted or rostered tournament staff
can receive needed private logistics. Organization member identifiers, notes, verification, and
staff permissions stay within authorized organization roles. Platform administrators can access
information needed for support, review, security, and platform operations.
Notifications
The in-app notification is the primary record. Push requires browser or device permission and
has category preferences. Email is used where a workflow calls for it. Operational SMS requires an
optional phone number and explicit consent and is used only when applicable and a provider is
available. No production SMS provider is configured as of this update.
Uploaded files and photos
Credential evidence and profile photos are stored outside the public website directory and
served only through authenticated or visibility-authorized routes. Profile and paddle images are
normalized to remove original metadata and filenames. A normalized paddle image may be held briefly
in private storage for an active tournament review.
Analytics
Google Analytics 4 processes page, acquisition, device/browser, approximate-location, and
engagement information and may use browser storage or cookies. Custom events use bounded,
allowlisted parameters and intentionally exclude names, contact details, passwords, tokens,
member or credential details, dynamic IDs, paddle search text, photos, and free-form content.
Google signals and ad-personalization signals are disabled.
Current service providers
DigitalOcean hosts the application, database, and private files. MXRoute carries transactional
email. Google Analytics 4 provides analytics. Browser and device push services deliver enabled
push messages. Anthropic may receive a normalized paddle image, fixed instructions, and bounded
public official-reference images for optional camera-assisted paddle analysis; the request does not
include the account name, email, filename, or location, and PickleballOfficials does not retain the
provider response body. External USA Pickleball and UPA-A links are governed by those sites.
Account deletion
Signed-in users can initiate deletion from Profile and Account using their current password and
the word DELETE. A sole organization owner must first transfer responsibility or add another valid
administrator. Successful deletion removes sign-in access and personal profile information, revokes
sessions and tokens, disables notification delivery, deletes push subscriptions, and removes the
private profile, credential, and temporary paddle files covered by the deletion process.
Historical records
Minimum completed-event facts may remain in anonymized or non-personal form so tournament and
report history stays accurate. These can include completed assignments and match counts, attendance
timestamps and corrections, duty or schedule facts, numeric agreed compensation, and bounded audit
events. The inactive anchor is shown as Deleted Official and retained community
content as Deleted User. Original email, phone, address, private notes, and
credential-document contents are not kept
merely for that history. Shared organization, tournament, community, and training-resource content
may remain when it belongs to the organization or platform.
Security
PickleballOfficials uses HTTPS, server-side sessions in Secure and HttpOnly cookies,
role- and relationship-based authorization, hashed passwords and one-time tokens, and authenticated
private-file routes. No website or storage system can guarantee absolute security.
Children
The product is designed for referees, tournament personnel, and officiating organizations. It
does not ask for a birth date or provide a separate children's account experience. A parent or
guardian who believes a child provided personal information can contact support for review.
Changes
This page will be updated when material product data practices or service providers change. The
date above identifies the current version.
Contact
Email support@pickleballofficials.com.