Privacy

What Shuttler holds

• Your email address and name. The address is how you sign in and how you get back in if you forget your password. The name is what your group sees on the board.
• The matches you played — who was on court, the scores, and the date. Not the time of day.
• Your ratings and ranks, which are worked out from those matches rather than supplied by anybody.
• Anything you type — a note on a change, a group's name and description.
• Which groups you are in, which is visible to you and to those groups, and to nobody else.
• If you sign in with Google, the account identifier Google gives us and the tokens that keep you signed in.
• If you turn notifications on, the address your browser's push service gives us for that device, and the two keys everything sent to it is encrypted with. One row per browser, and it is deleted the moment you turn it off.

What Shuttler does not hold

This list is deliberate rather than accidental, and most of it comes from decisions made before any of it was built.

• No payment details, no health data, nothing about race, religion, politics or anything else in a special category. None of it is asked for and none of it is stored. Shuttler never asks your device where it is either, and nothing in it — no screen, no export, no ranking — uses where you are.
• No contact details at all for players who have not signed up. Somebody added to a group by an admin is a display name and nothing else, and Shuttler never emails them. An invitation to claim that place is passed on by the person who added them, not by us.
• No advertising, no advertising identifiers, no data sold or shared with anybody for their own purposes, ever.
• No profile of you across groups. Nothing here adds your groups together, including for us.

Counting visits

Shuttler counts page views using Umami, which runs on the operator's own server rather than an advertising company's. It sets no cookie and stores no identifier that could follow you to another site. What it records is that a page was opened, from roughly where, and on what sort of device.

It exists to answer one question — whether anybody is using this — because that is what decides whether it keeps being paid for.

The email Shuttler sends

Two messages exist, both about getting into your account: a password reset when you ask for one, and a confirmation of your address when you sign up. There is no third, and there is no newsletter.

Everything else — a result waiting for your approval, a deadline, a rank that moved — reaches you inside the app and, if you allow it, as a notification on your device. Never by email.

Notifications are off until you turn them on, per device, from the You screen, and turning them off deletes what made them possible. Nothing in Shuttler depends on them: what needs your answer is on your home screen in the app either way, and no result is treated differently because a notification did or did not arrive.

Who else sees it

Shuttler is run by one person and uses a small number of services to do it. This is the whole list.

• Convex stores everything above and runs the backend.
• Cloudflare serves the site, holds the domain, and forwards mail sent to help@shuttler.club.
• Resend, and Amazon SES beneath it, deliver the two emails above. They see the address and the message.
• Google, if you choose to sign in that way.
• Your browser's push service — Google's, Apple's or Mozilla's, depending on the browser — if you turn notifications on. It carries the message to your device and cannot read it: everything is encrypted to that device's own key before it leaves us. It does know that a message was sent, and when.
• Umami, self-hosted by the operator.

What you can do about it

• Take it. You screen, “Your data” — everything Shuttler holds about you, as a JSON file and a spreadsheet of your matches, straight away and with nothing to request.
• Correct it. A wrong result is corrected through the app, with the agreement of the person you played.
• Delete it. You screen, “Deleting your account”. Your name, your address and your login go, in every group at once, and you become an unnamed former player.
• Object. Write to help@shuttler.club. If you are in the EU or the UK you may also complain to your data protection authority; in India, to the Data Protection Board.

What deletion does not do

Your matches stay, without your name on them. This is the one place Shuttler does not do what you might expect, so it is worth saying plainly why.

A match is a record of something two or four people did together. It is as much your opponent's history as it is yours, and every rating in the group is worked out by replaying the whole log of them. Deleting yours would erase games other people actually played and silently change their ratings and ranks. So the record survives and the person in it stops being identifiable: no name, no address, no way back in.

How long

Your account and your name last until you delete them. Matches and the log of changes to them are kept indefinitely, because they are what every rating is derived from and what makes a disputed result answerable months later.

The short-lived exception: a record that a recovery email was sent to an address, kept for up to a day so that nobody can be mailed repeatedly, and deleted after that.

Age

Shuttler is for people aged 13 and over. If you are under 18, you may only use it with a parent or guardian's permission, and creating an account asks you to confirm you have it.

A junior who does not have an account can still play and be rated: somebody in the group adds them as a player, which stores a display name and nothing else.

Where it is

Shuttler is operated from India. The services above run in data centres outside it, which means your data crosses borders to reach them. Using Shuttler involves that happening.

Changes

If this changes in a way that matters, the date at the top changes and the app will say so rather than relying on you to re-read it. The terms are the other half of this.