Privacy

What is stored

Your name, email address and playing positions.
Which sign-in provider you use (Google or Apple) and the stable account id they give us. We never see or store a password — there isn't one.
Games you played in, scores, and the rating change each produced.
Sessions you said you were coming to.
An activity log of significant actions, including the IP address they came from.
If you turn on notifications, a push subscription for each device.

What is not stored

No analytics, no third-party trackers, no advertising identifiers. There is no tracking script on any page in this app.

Retention

Activity log entries, including the IP addresses in them, are deleted automatically after 30 days. This happens on write rather than on a timer, so in a quiet week the practical window is 30 days plus the time until the next recorded action.

Getting your data out

Any member can download a copy of their own data from More → Data → Download my data. The file contains:

Your profile: name, email address, role, current and peak rating, and primary and secondary positions.
Every game you played: when it was played, the score, the winning side, which side you were on, whether you came in as a sub, the position you played, and your rating before and after.
Your achievements, with the date each was earned.

It does not include everything the app holds about you. Your RSVPs, linked sign-in accounts, notification settings, devices registered for notifications, score confirmations and activity log entries are not in the file. To see or remove any of those, email admin@hardwoodclub.app. Club admins can export the full club.

Deletion

Ask a club admin to remove you.

If you have never played a game, they can delete you outright and nothing is left. If you have played, they deactivate you instead: you disappear from the roster and the team generator, and your game history stays. That is not stubbornness — deleting those records would rewrite the recorded result of every game you played in, changing other people’s results too.

If you need a complete erasure regardless, email admin@hardwoodclub.app and it will be done by hand. It is deliberately not a button, because the damage falls on people other than whoever presses it.

Cookies

Hardwood Club sets two cookies, both required for sign-in to work:

hc_session — what keeps you signed in. A signed token containing your user and club id, and nothing else.
hc_oauth — a short-lived random value used only while you are being sent to Google or Apple and back, to prove the reply is genuinely for you. It is deleted the moment you land back here.

Both are marked HttpOnly and Secure, so page scripts cannot read them and they never travel over plain HTTP.

Both are strictly necessary cookies: the app cannot work without them, and under UK and EU rules it does not require a consent banner. There are no advertising cookies, no tracking pixels and no third-party scripts on any page. Signing out deletes it.

We do count two things, and this is the promised cookieless kind. The first is how many requests this site served, which Cloudflare already totals as the host — no script, no pixel and no cookie is involved, and nothing about an individual visitor is looked at. The second is how many clubs and accounts exist, which is a count of rows already stored here. Both are totals, kept on an internal page only we can open. Neither reads your name, your email address, your club or anything you did. If that ever changes to something that identifies anyone, this page changes first and a banner appears.

The iOS app

Hardwood Club also has a native iPhone and iPad app. It talks to this same server and stores the same things — there is no separate account and no second copy of your data.

It uses no cookies. A native app cannot hold the ones above, so signing in returns the same signed token, and the app keeps it in the device Keychain — the system's encrypted store. It is marked as staying on that device, so it is not synced to iCloud or copied to your other devices.
Sign-in is Sign in with Apple. If you use Apple's “Hide My Email”, we only ever receive the relay address, and that is what is stored.
There are no third-party SDKs of any kind: no analytics, no crash reporting, no advertising frameworks. The app makes network requests to hardwoodclub.app and nowhere else.
Signing out deletes the stored token from the Keychain. Deleting the app removes it too.

Who else sees your data

Two companies necessarily handle it:

Cloudflare hosts the app, the database and the photos.
Google or Apple, whichever you sign in with, tells us your account id and — unless you use Apple’s Hide My Email — your email address. They learn that you signed in to Hardwood Club. They are not told anything about your club.

One more, but only if you choose it:

Stripe handles payment if you use the optional support link on the About page. That happens on a page Stripe hosts, not here — Hardwood Club never sees your card, and is not told who contributed. Nothing in the app changes either way, and if you never tap it, Stripe is never involved at all.

Nobody else. Your data is not sold, not shared with advertisers, and not used to train machine-learning models.

Contact

Questions, or a request to have your data removed: admin@hardwoodclub.app.