Privacy Notice
Last updated: October 2026
This page is a plain-language summary of what the service does today. It is a placeholder awaiting legal review and is not a substitute for a full privacy policy.
What we collect
- Email address when you subscribe to updates, create an account, or send an invite, so we can confirm signups and deliver notifications you asked for.
- Court searches, such as your search area and filters, so results work and we know which areas need better court coverage.
- Optional home address, only if you enter one, to calculate real drive times and find courts that work for both players. It is stored with your profile; contact us to have it removed.
- Billing details if you buy a plan. Stripe processes the payment and keeps your card details; we store only your Stripe customer reference and which plan you’re on.
Analytics and your choice
With your permission we use Google Analytics and PostHog to understand how the product is used. These tools load only after you accept in the cookie banner. If you decline, they stay off entirely. You can change your choice at any time with the “Cookie settings” button at the bottom of any page.
We also store a few things in your browser’s local storage to make the site work: your consent choice, theme preferences, and your last search location if you save one. These are not used for tracking and keep working regardless of your analytics choice.
Advertising
Free and signed-out visitors may see ads served by Google AdSense; paid plans are ad-free. Google and other third-party vendors use cookies to serve ads based on your prior visits to this and other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on those visits.
Visitors in the European Economic Area, the UK and Switzerland are asked by Google’s consent message before any personalised ad is shown. Anyone can opt out of personalised advertising in Google Ads Settings or, for other vendors, at aboutads.info. Our own cookie banner covers analytics only.
Security and delivery
Every request to Where.Tennis passes through Cloudflare, which protects the site against attacks and abuse and delivers it quickly. To do that Cloudflare processes your IP address and the details of each request, such as the page asked for and your browser type, and may set strictly necessary security cookies. The anti-spam check on sign-up and support forms (Cloudflare Turnstile) is also run by Cloudflare.
The iPhone and Android app
If you use our app, it handles the same account data as the website, plus the following.
- Your devices. Each phone you sign in on keeps its own session, with the device name, platform and app version, so you can see and sign out each one from your account. Signing out ends that device’s session at once.
- Push notifications, only if you allow them. We store the token Apple or Google gives your device, tied to that device’s session, and delete it when you sign out, are signed out, or delete your account. A notification carries only a general title such as “Game update”; the app then fetches what it says from us directly, so Apple and Google never see who or what it is about. You can turn each kind of notification off, for push and email separately.
- Location, only when you ask to search near you. It is used for that search and is not stored unless you save it as your search location.
- Camera and photos, only when you add a photo to a court report, a new court or a support request.
- Device integrity checks. To keep bots from creating accounts, sending support requests and spamming contributions, the iPhone app asks Apple (App Attest) to confirm requests come from the real app on a real device. The Android app does not run such a check yet.
- Crash reports that tell us which screen failed and why, without your messages or notes.
- Ads. Free accounts see ads served by Google AdMob; paid plans are ad-free. On iPhone the app asks your permission before any tracking for personalised ads, and visitors in the European Economic Area, the UK and Switzerland are asked by Google’s consent message first.
Signing in with Apple can give us a private relay address instead of your own; mail we send it reaches you through Apple.
Deleting your account
You can delete your account from your account page on the website or in the app. Your profile, sign-ins, devices, notification settings, shortlist and support requests are deleted; a paid plan stops renewing at the end of the period you paid for. Courts you added or corrected stay on the map without your name, and the games you played in keep your seat as “a deleted player”. Payment records are kept because the law requires them.
Legal basis
Essential data described above is processed to provide the service you request. Analytics data is processed only on the basis of your consent, which you can withdraw at any time. A full policy covering retention periods and processor agreements is pending legal review.
Contact
Questions or requests about your data: [email protected]