Privacy policy

• Account. When you sign in with Apple or Google we receive your email address, name and avatar from that provider. You choose your own display handle; it does not have to be your real name.
• Match record. Every confirmed result: opponents, score, sport, venue, timestamp, and the rating change it produced. This is the product.
• Profile. Handle, avatar, faction, level, titles, and the achievements you have unlocked.
• Location, momentarily. A single position check when you join a queue or confirm a match, to verify you are at the venue. See the location section below.
• Waitlist email. If you sign up on this website we store the email address and the date. Nothing else.
• Device token. A push notification token so the app can tell you your turn is up. Removed when you disable notifications or delete your account.

We do not run third-party advertising or analytics SDKs inside the app, and we do not sell data to anyone, in any form, ever.

Competitive standings only work in the open, so part of your profile is public by design. That boundary is fixed and worth understanding before you play.

• Public. Your handle, avatar, Elo, level, faction, achievements, and your match history including opponents and scores. These appear on venue pages, city ladders and the global ladder — including on this website.
• Private. Your email address, your device identifiers, your push token, and every location check we have ever made. None of these are shown to other players, to venues, or to anyone else.
• What venues see. A venue admin sees the public profiles of players currently in their queue, plus aggregate counts for their own tables. They never see contact details.

BarSport does not track you. There is no background location collection, no movement history, and no location data attached to your public profile.

• When it is checked. Only at the moment you join a queue, create a match, or confirm a result — and only to answer one yes-or-no question: are you inside this venue's geofence.
• What is kept. The answer, not the coordinates. The venue is recorded against the match; your position is not.
• If you decline. You can use the app without location permission. You will not be able to join a venue queue, because there is no other way to establish that you are actually at the table.

We process personal data under the GDPR on these grounds:

• Contract. Account data and match records — we cannot provide a ranking service without them.
• Consent. Location checks, push notifications, and the marketing waitlist. Each is opt-in and each can be withdrawn without losing your account.
• Legitimate interest. Anti-cheat and abuse investigation, and keeping anonymised match history so that other players' rating calculations stay valid.

• Supabase. Our database and authentication provider. Data is stored on servers inside the EU.
• Apple and Google. Sign-in, push delivery, and subscription billing. We never receive your payment card details — the store handles the transaction and tells us only whether a subscription is active.
• Nobody else. No data brokers, no ad networks, no resale. If that ever changes it will be announced before it happens, not buried in a revision.

• While your account is open. Profile and match history are kept for as long as you have an account.
• After deletion. Personal identifiers are erased. Match rows survive in anonymised form, because deleting them would silently corrupt the rating history of everyone you ever played.
• Waitlist. Kept until launch or until you ask us to remove it, whichever comes first.
• Location checks. Not retained. The geofence answer is used and discarded.

Under the GDPR you can access, correct, export, restrict or erase your personal data, and object to processing based on legitimate interest.

• Delete your account. Settings → Account → Delete. It runs immediately: identifiers erased, history anonymised, no waiting period and no retention offer.
• Export. Request a machine-readable copy of everything tied to your account and we will send it within 30 days.
• Correct. Handle, avatar and profile fields are editable in the app at any time.
• Complain. You can lodge a complaint with your national data protection authority. We would rather you told us first, but it is your right either way.

Privacy questions, export requests and deletion problems go to privacy@barsport.app. We answer inside 30 days, usually far sooner.

If this policy changes in a way that affects what we collect or who sees it, we will say so in the app before the change takes effect.