Privacy Policy

This Privacy Policy explains how DinkFlow (“DinkFlow,” “we,” “us”) collects, uses, and shares personal information when you use our website, apps, and services (the “Service”). It applies to players, scorekeepers, and tournament organizers.

When an organizer uses DinkFlow to run an event, we process participant information on the organizer’s behalf to operate that event. For those activities the organizer is responsible for its own privacy practices; this Policy covers how DinkFlow handles information across the Service.

In data-protection terms, DinkFlow is the controller of the information used to run your account and the platform itself, and acts as a service provider (processor) on an organizer’s behalf for the participant information used to run their events, under our Data Processing Addendum with organizers.

Information you provide

• Account details — your name and email address, and login credentials (passwords are handled by our authentication provider; we do not see them in plain text).
• Date of birth — collected at signup to verify you meet our minimum age (13) and, where relevant, for age-based divisions.
• Profile details — gender and, if you provide it, your DUPR ID and rating, used for division eligibility; and location such as city and state.
• Organizer details — for organizer accounts, your organization name and contact details, which may include a mailing address and phone number.
• Tournament activity — the events, divisions, teams, partner invitations, and matches you take part in, and match scores and results.
• Communications — messages you send us, such as support requests.

Information collected automatically

• Basic technical and usage data needed to run the Service securely, such as your device and browser type, and log information.
• Essential cookies that keep you logged in and maintain your session. We use these to operate the Service, not for third-party advertising.
• Aggregated, privacy-preserving website analytics (via our hosting provider, Vercel) that help us understand overall usage and performance. These do not track you across other websites or build advertising profiles about you.

Payment information

When you pay an entry fee, payment is processed by Stripe. DinkFlow receives limited confirmation details (such as that a payment succeeded and related metadata) but does not receive or store your full card number.

We use personal information to:

• Provide the Service — run registration, partner matching, matchmaking, scheduling, scoring, and results;
• Check division eligibility (for example, using gender and DUPR where an event requires it);
• Process payments and manage organizer subscriptions;
• Send service and relationship messages — invites, schedules, reminders, results, and receipts — and, where you opt in, optional notifications;
• Keep the Service secure, prevent fraud and abuse, and enforce our Terms;
• Comply with legal obligations; and
• Understand and improve how the Service is used.

We do not sell your personal information, and we do not use it for third-party advertising.

If you are in the European Economic Area or the United Kingdom, we process personal information on these legal bases: performance of our contract with you (to provide the Service); your consent (for optional communications, which you can withdraw); our legitimate interests (to secure and improve the Service and prevent abuse); and compliance with legal obligations.

Service providers (subprocessors)

We share information with trusted providers that operate the Service under our instructions, including:

• Supabase — database hosting and authentication;
• Stripe — payment processing;
• Resend — transactional email delivery;
• Vercel — application hosting, delivery, and aggregated website analytics;
• (Planned) Twilio — SMS delivery, if and when SMS notifications are offered.

DUPR ratings and results

DinkFlow does not send your data to DUPR. The DUPR ID and rating on your profile are details you provide, used to check division eligibility. Organizers can download a file of completed match results (player names and scores) and upload it to DUPR themselves; DUPR then handles those results under its own terms and privacy policy.

Within events

Organizers can see the information needed to run their events (such as participant names, division and eligibility details, team and partner information, payment status, and results).

Public tournament information

Tournament brackets, schedules, standings, and results — including player and team names and match scores — may be publicly visible on the Service and indexed by search engines, so participants and the public can follow events. Please do not put information in your profile that you would not want associated with public results.

Legal, safety & business transfers

We may disclose information if required by law or to protect the rights, safety, and security of users, the public, or DinkFlow. If DinkFlow is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction, subject to this Policy.

We keep personal information for as long as your account is active and as needed to provide the Service, then retain what we must to meet legal, accounting, dispute-resolution, and security obligations. Event and results history may be retained as part of tournament records.

If you delete your account, we remove or de-identify your profile information. Competition records (such as historical scores and results) may be retained, and where your name appears in public results we will remove or de-identify it where reasonably feasible. You can request deletion as described below.

Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, and to withdraw consent. California residents have rights under the CCPA/CPRA, including the right not to be discriminated against for exercising them; because we do not sell or share personal information for cross-context advertising, there is no such activity to opt out of.

How to exercise them

• Update your profile at any time from your account;
• Manage which emails you receive, and unsubscribe from non-essential email, from your email preferences;
• Stop SMS (if offered) by replying STOP;
• Download a copy of your data, or delete your account, from your data & privacy page — or email hello@dinkflow.app.

We will verify your request and respond as required by applicable law. Some records may be retained where the law permits or requires it.

If you are in the EEA, UK, or Switzerland, you also have the right to lodge a complaint with your local data protection authority.

We use reasonable technical and organizational measures to protect personal information, including encryption in transit and access controls through our providers. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. Keep your login credentials confidential and contact us if you suspect unauthorized access.

Accounts may be created only by adults (18 or older). Players must be at least 13 years old, and a parent or guardian must register and manage participation for any player under 18.

You must not register or submit personal information about any child under 13. DinkFlow does not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly. If you believe a child under 13 has been registered, contact us at hello@dinkflow.app.

DinkFlow is operated from the United States, and our providers may process information in the United States and other countries. If you access the Service from outside the U.S., you understand your information may be transferred to and processed in countries whose data-protection laws differ from yours.

Where we transfer personal information of users in the EEA, UK, or Switzerland to the United States, we rely on appropriate safeguards, such as the Standard Contractual Clauses offered by our service providers.

We may update this Policy as the Service evolves. When we make material changes, we will update the “Last updated” date and, where appropriate, provide additional notice. Please review it periodically.

Questions or privacy requests? Email hello@dinkflow.app.