Legal - Privacy Policy

PadelRank (“we”, “us”, “our”) operates the PadelRank API and dashboard at padelrank.dev. For questions about this policy, contact us at hello@padelrank.dev.

Account data — when you sign up, we collect your name and email address via Clerk (our authentication provider). This is required to create and manage your account.

Billing data — if you subscribe to a paid plan, Stripe processes your payment details. We never store card numbers or sensitive payment information on our servers. We store your Stripe customer ID and subscription status.

API usage data — we log API call counts per billing period for usage tracking and billing purposes. We do not log the content of individual API requests.

Player data (submitted by you) — you may submit player identifiers and match results through our API. This data belongs to you. We process it solely to compute ratings and return results. We are a data processor; you are the data controller for your end users' data.

Analytics — we use Vercel Analytics on our website. It is privacy-friendly by design: no cookies are set, no personal identifiers are collected, and IP addresses are not stored. It is compliant with GDPR without requiring a cookie consent banner.

• To create and maintain your account
• To process payments and manage your subscription
• To provide the rating API service
• To send transactional emails (account creation, billing receipts)
• To understand aggregate website usage via Vercel Analytics

We do not sell your data. We do not use your data for advertising.

We share data with the following third parties only as necessary to provide the service:

• Clerk (clerk.com) — authentication and user management
• Stripe (stripe.com) — payment processing
• Railway (railway.app) — API server and database hosting
• Vercel (vercel.com) — website hosting and privacy-friendly analytics

Each sub-processor is contractually bound to handle data in accordance with applicable law.

If you are located in the European Economic Area, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate data
• Erasure — request deletion of your account and associated data
• Portability — receive your data in a structured, machine-readable format
• Object — object to processing based on legitimate interests

To exercise any of these rights, email hello@padelrank.dev. We will respond within 30 days.

• Account data — retained until you delete your account
• Player and match data — retained while your account is active and deleted within 30 days of account closure
• Billing records — retained for 7 years as required by applicable tax law

We use one session cookie set by Clerk to keep you logged in to the dashboard. This cookie is strictly necessary for the service to function and does not require consent under GDPR.

Vercel Analytics does not set any cookies. No tracking or advertising cookies are used on this site.

API keys are stored as SHA-256 hashes — we cannot retrieve your plaintext key. All data in transit is encrypted via TLS. Database access is restricted to application servers within a private network.

We may update this policy from time to time. Material changes will be communicated by email. The date at the top of this page always reflects the latest revision.

Questions or requests: hello@padelrank.dev or via our contact page.