- Most of what we hold, your club put there or your play created — check-ins, matchups, scores, standings.
- We don’t sell your information, don’t share it for advertising, and run no ads.
- League play is visible to your league. Names and results show on standings, screens and the pages your club publishes.
- Results reach DUPR only if your club turns that on.
- One cookie keeps you logged in. No tracking cookies, no third-party analytics.
- Ask us for a copy, a correction or a deletion at any time — privacy@raliera.com.
This summary is here to be readable. The sections below are the ones that count.
1Who we are, and who is responsible for what
Raliera makes league software for racquet clubs. Clubs use it to run leagues, drop-in nights, ladders and tournaments; players use it to join a league, check in on league night, and follow standings. In this policy, “Raliera”, “we” and “us” mean Raliera, the company that builds and operates the service. “You” means whoever is reading — a club operator, a league organizer, or a player.
Two different relationships run through the product, and they matter for privacy:
When your club runs a league
The club decides who is in the league, what gets recorded, and what gets published. For that league data, the club is the one calling the shots — in legal terms it is the controller, and we act on its instructions as a processor (a “service provider” under US state privacy laws). If you want your name taken off a league, your results corrected, or your club account closed, the fastest route is usually your club. We will help either way.
When you deal with Raliera directly
For your Raliera login, the emails we send you about the service, this website, and the security and reliability of the platform, we are the controller and this policy is our commitment to you.
Clubs on Raliera are bound by our Terms of use, which require them to have a lawful basis for the player data they put in and to honour the requests their players make. If your club signed a separate data processing agreement with us, that agreement governs our handling of its league data.
2What we collect
What you give us
| Category | What it is |
|---|---|
| Account details | Name, email address, and a password (stored hashed, never in plain text). Optionally a phone number, a profile photo, and your DUPR ID. |
| Club and league details | Club name, location, courts, schedules, league formats, fees the club sets, and the roster the club builds. |
| Things you write | Messages to us through the contact form or by email, support requests, feedback, and any notes an organizer adds to a league. |
| Payment details | For paying clubs: billing contact, plan, and invoice history. Card numbers go straight to our payment processor — we never see or store a full card number. |
What league play creates
Most of what Raliera holds about a player is not filled into a form — it is produced by playing: check-ins and attendance, who you were paired with and against, court assignments, scores, wins and losses, standings, ladder position, ratings and rating history, season and playoff results, and the timestamps attached to all of it.
What we collect automatically
| Category | What it is |
|---|---|
| Session data | A signed session cookie that keeps you logged in, and the pages or screens you request while you are. |
| Technical logs | IP address, browser and device type, referring page, and timestamps. Used to keep the service running, diagnose faults, and detect abuse. |
| Email delivery events | Whether a message we sent you was delivered, bounced, or failed, so we can keep league emails working. |
Details of every cookie and storage key we use are in the Cookie policy.
What we get from other people
- Your club. Clubs import rosters and add players. If your name is in Raliera and you never signed up, a club put it there.
- DUPR. Where a league is connected to DUPR, we may read your rating and rating history to seed matchups and standings.
- Our providers. Hosting, email and payment providers return operational data to us, such as delivery status or a failed charge.
What we do not collect
- Full payment card numbers.
- Precise geolocation. We know the club's courts because the club typed the address.
- Biometric data, health records, or the sensitive categories under GDPR — we don't ask for them and you shouldn't put them in a league note.
- Advertising identifiers. We buy no data from brokers and we sell none to them.
3Why we use it
| Purpose | What that means in practice | Legal basis (EEA/UK) |
|---|---|---|
| Run your leagues | Build matchups, assign courts, record scores, compute standings and ratings, drive the check-in board and the display screens in the club. | Performance of a contract |
| Your account | Sign you in, keep you signed in, recover your password, remember your preferences. | Performance of a contract |
| Service messages | Confirmations, schedule changes, results, reminders about a league you joined, and important notices about the platform. | Performance of a contract |
| DUPR submission | Send match results to DUPR when a league has that turned on. | Contract, and consent where required |
| Support | Answer your questions and investigate problems you report. | Legitimate interests |
| Keep it working | Monitoring, backups, debugging, load and capacity planning. | Legitimate interests |
| Security and abuse | Detect account takeover, spam, scraping and misuse; protect players and clubs. | Legitimate interests |
| Improve the product | Understand which features get used, in aggregate, so we build the right things. | Legitimate interests |
| Billing | Charge club subscriptions, issue invoices, keep tax and accounting records. | Contract and legal obligation |
| Marketing to clubs | Reply to club enquiries and, if you asked to hear from us, send occasional product news. Players do not get marketing email because they played in a league. | Consent or legitimate interests |
| Legal | Comply with the law, respond to lawful requests, establish or defend legal claims. | Legal obligation, legitimate interests |
We do not use your personal information to train third-party AI models, and we do not feed player data into advertising systems.
5DUPR and other rating systems
DUPR is an independent rating system, not part of Raliera. A club can connect a league to DUPR so that match results submit automatically instead of being typed in twice.
- Nothing is sent to DUPR unless your club turns the connection on for that league.
- What gets sent is match data: the players in the match, the format, the score, and the date. We do not send your password, your address, or unrelated leagues.
- Once a result reaches DUPR, DUPR's own privacy policy and correction process apply to it. We cannot delete a result from DUPR's system on your behalf, though we will help you ask.
- If you do not want your results submitted, tell your organizer before the league starts. They control the switch.
7How long we keep it
| What | How long |
|---|---|
| Your account | While it is active. We delete or anonymize it within 30 days of a verified deletion request. |
| League results and standings | For as long as the club keeps the league, because it is the club's competition record. When a club leaves Raliera, we delete or return its data within 90 days of the account closing. |
| Technical logs | Up to 12 months, then deleted. |
| Support and contact messages | Up to 24 months. |
| Billing and tax records | As long as tax and accounting law requires, typically seven years. |
| Backups | Deleted data can persist in encrypted backups for up to 90 days before those backups roll off. |
We may keep aggregate, anonymized statistics — how many matches a format produced, say — indefinitely. Those cannot be traced back to you.
8How we protect it
- Traffic runs over HTTPS/TLS.
- Passwords are stored hashed and salted. Nobody at Raliera can read yours.
- Session cookies are
HttpOnly,SecureandSameSite-restricted, so a script on another site cannot read them. - Access is role-based: an organizer sees their club, not someone else's. Staff access to production data is limited to the people who need it and is used only to operate and support the service.
- Data is backed up regularly and backups are encrypted.
No system is perfectly secure, and we will not claim otherwise. If a breach affects your personal information, we will notify you and any regulator that has to be told, within the time the law allows. If you think you have found a security problem, email security@raliera.com — we would rather hear it from you than read about it.
9Your choices and your rights
Whatever jurisdiction you are in, you can ask us to:
- Show you what we hold about you, and where it came from.
- Give you a copy in a portable format.
- Correct anything wrong. Scores and standings get corrected by your organizer, since they are the record of what happened on court.
- Delete your account and personal details.
- Stop marketing email at any time. Operational messages about a league you are in are not marketing and will continue while you are in it.
- Limit or object to a particular use, where the law gives you that right.
How to ask
Email privacy@raliera.com from the address on your account, or write to info@raliera.com. We will verify it is you — usually by confirming control of that email address — and respond within 45 days, extending once by another 45 days if the request is complex, in which case we will tell you why. An authorized agent can act for you with written proof. Using your rights never costs you anything and never gets you worse service.
If the data belongs to a league your club runs, we will forward your request to the club and work with them on it, because they decide what the league record contains.
If you are in the United States
Residents of California, Colorado, Connecticut, Texas, Virginia and other states with comprehensive privacy laws have the rights listed above, plus the right to opt out of the sale of personal information, of sharing for cross-context behavioural advertising, and of profiling with legal effects. We do none of those three, so there is nothing to opt out of — but you may still tell us to treat it as opted out and we will honour it. We do not knowingly sell the personal information of anyone under 16. If we deny a request, you can appeal by replying to our decision; we will answer the appeal within 45 days and tell you how to contact your state Attorney General if you are still unhappy.
The categories of personal information described in section 2 map to the CCPA categories of identifiers, customer records, commercial information, internet activity, and inferences drawn for scheduling and matchmaking. We collect them for the business purposes in section 3 and disclose them only as described in section 4.
If you are in the EEA, UK or Switzerland
You have the rights of access, rectification, erasure, restriction, portability and objection under GDPR, and the right to withdraw consent where consent is the basis. Where we rely on legitimate interests, we have weighed them against your rights and will explain that assessment if you ask. You can complain to your supervisory authority; we would appreciate the chance to fix it first.
Raliera operates from the United States, so your information is processed there. Where we transfer personal data out of the EEA or UK, we rely on the European Commission's Standard Contractual Clauses, plus the UK Addendum where relevant, together with technical measures such as encryption in transit and at rest.
10Children and junior programs
Raliera is built for adult league play. We do not knowingly collect personal information from children under 13, and children under 13 may not create their own Raliera account.
Clubs do run junior programs. Where a club enters a minor into a program or league, the club is responsible for having the parent or guardian's permission, and for limiting what it records to what the program actually needs — a name and an age group, not a phone number and a photo. A parent or guardian may email privacy@raliera.com to see, correct or delete what we hold about their child, and we will act on it. If we learn we hold a child's information without the right permission, we delete it.
11Global Privacy Control and Do Not Track
Raliera does not track you across other companies' websites, so there is nothing for a Do Not Track header to switch off. We recognise the Global Privacy Control signal where the law requires it; since we neither sell nor share personal information, honouring it changes nothing about how we treat you — which is the point.
12Changes to this policy
We update this policy when the product changes or the law does. The effective date at the top always tells you which version you are reading. If a change materially affects how we use your information, we will give notice by email or in the app before it takes effect, and where the law requires consent we will ask for it rather than assume it.
13Contact
Privacy questions, requests, or a complaint about how we handled something:
- Privacy and data requests — privacy@raliera.com
- Anything else — info@raliera.com
- Security reports — security@raliera.com
- Post — Raliera, Houston, Texas, United States
A real person reads these. If your club is the one holding the data, tell us that too and we will route it correctly rather than bounce you between us.