Privacy Policy.

padelOS is a padel tournament system from Bandung, Indonesia, running at padelos.id. It lets organizers create and run tournaments, players register and follow their results, and referees score matches live. padelOS decides how the data on padelos.id is processed and is responsible for it.

Each tournament is run by its organizer. For the registrations of a tournament, the organizer decides which questions to ask and which teams to accept, and is responsible for using that data only to run the tournament.

• Your account: your WhatsApp number, which is your sign-in name, your name and your role (player, organizer, referee or admin). Your PIN is never stored: we keep only a one-way hash of it. We also record when you sign in and failed sign-in attempts, to protect your account.
• Your profile: anything you choose to add on My account: a photo, an organizer name, your province and city, an Instagram handle, a WhatsApp number to show on your tournaments and your gender, which places you in the men's or women's ranking. All of it is optional.
• Tournament registration: both players' names, WhatsApp numbers and genders, the answers to the questions the organizer asks and, if you add one, a photo or file of your payment proof.
• Tournaments and matches: teams, line-ups, scores point by point, results, placements, ranking points and medals.
• Messages you start: the Create tournament and Contact us forms open WhatsApp with your message written out. We do not store the form; what you send reaches us as a WhatsApp chat.
• Technical data: the cookies described below and server logs (your IP address, browser and the time of each request), which we use to keep the service running and secure.

• To create your account, sign you in and lock it after too many wrong PINs.
• To run tournaments: registrations, approvals, waiting lists, draws, schedules, live scores and results.
• To build the rankings, player pages and the Hall of Fame from finished tournaments.
• For player curation: helping organizers keep every pair in the category of its level and flag sandbaggers. We compare a player's results on padelOS and, where available, match results that are publicly published elsewhere.
• To answer your questions and requests, and to prevent abuse and fraud.

We do not sell your personal data and we do not use it for advertising.

Tournament pages, live scores, rankings, player pages and the Hall of Fame can be seen by anyone without signing in. They show players' names, photos, teams, line-ups once a match is played, results and ranking points. Player pages are not offered to search engines.

Your WhatsApp number, your gender as entered on a registration, your answers to the registration questions and your payment proof are never shown on a public page. An organizer's contact number appears only on the tournaments they choose to show it on.

• Organizers: the organizer and co-organizers of a tournament see the registrations for that tournament, including the players' numbers and answers. Only they open a payment proof.
• Referees: referees see the matches they score and the players in them.
• padelOS administrators: a small team that manages accounts, approves tournaments and gives support.
• Service providers: the company that hosts our server and the storage that keeps our encrypted off-site backups. They process data only on our behalf.
• WhatsApp: when you choose to chat with us or an organizer on WhatsApp, Meta processes that conversation under its own privacy policy.
• Authorities: when Indonesian law requires it.

We use only the cookies the site needs: one that keeps you signed in, one that protects forms against forged requests, short-lived ones for set-PIN and referee links, and small ones that remember your theme and that you have already seen the home page's intro. We use no advertising or tracking cookies.

• Your account and profile, for as long as the account exists.
• Failed sign-in attempts, 30 days.
• Registration numbers, genders and answers, 90 days after the tournament's last day; the team itself stays in the tournament's record.
• Declined sign-up requests, 180 days after the decision.
• Results, placements and ranking points, as part of the sport's public record.
• Backups, up to 14 days on our server and up to 12 months in encrypted off-site storage.

Every page is served over HTTPS. PINs and sign-in links are stored only as hashes, accounts lock after repeated wrong PINs, payment proofs open only to the tournament's organizers, and off-site backups are encrypted. No system is perfectly secure; if a breach affects your personal data, we will tell you and the authorities as the law requires.

You can ask us for a copy of your personal data, to correct it, to delete it, to limit how we use it or to withdraw your consent. Much of it you can change yourself on My account. For anything else, email us from a contact you have used with padelOS or chat with us on WhatsApp from your account's number, so we can confirm it is you.

We respond within 3 × 24 hours. If you ask us to delete your account, results you have already played may stay in tournaments' records, without your name.

Players under 18 must be registered by, or together with, a parent or guardian, who can use the rights above on their behalf.

We may update this policy as padelOS changes. The date at the top shows the current version; for significant changes we will tell signed-in users on the site or on WhatsApp.

Questions or requests about your personal data go to halo@padelos.id.