Privacy Policy

01 Information We Collect # link

Information you provide

• Account details: name, display name, email address, phone number, profile photo.
• Profile details you choose to add: bio, city and state, gender, skill level and self-rated rating, preferred hand and style of play.
• Sign-in data: a hashed password (Argon2id) if you set one, one-time codes we send by email or text, and, if you sign in with Google or Facebook, your account ID and the name, email and photo they share with us.
• Game and event data: scores, match results, ratings, club memberships, event registrations, check-ins and attendance.
• Birth year, when you enter a tournament division with age limits.
• DUPR: if you link your DUPR account, your DUPR ID, ratings and DUPR email, and, if you choose to have us remember it, your DUPR password, stored encrypted.
• Payments and orders: payments are processed by Stripe, and we do not store card numbers. For merchandise orders we keep your name and shipping address.
• Communications: messages you send to us by email or through support channels.

Information collected automatically

• Your IP address and browser or device type, stored with each sign-in session.
• Server request logs (IP address, page requested, time), kept for a short time to run and secure the Service.
• Your location, only if you allow your browser to share it. We use it to show games near you, and you can choose to save it to your account.
• A push subscription for your device, if you turn on notifications.
• Cookies and local storage, described under Cookies & Local Storage.

We do not use analytics tools, and we do not track the pages you visit or where you came from.

02 How We Use Your Information # link

• Provide, operate, and maintain the Service.
• Authenticate your identity and manage your account.
• Process payments, subscriptions, entry fees, tips and merchandise orders through Stripe, and fulfil orders through Printful.
• Calculate player ratings, statistics, and match history.
• Facilitate real-time score tracking, events and tournament brackets.
• Check eligibility for tournament divisions with age or rating limits.
• Submit your results to DUPR and refresh your DUPR ratings, if you link DUPR.
• Show games and events near you, if you share your location.
• Send service messages: sign-in codes by email or text, account verification, password resets, event RSVPs, and push notifications you have turned on.
• Keep the Service secure, fix problems, and prevent fraud, abuse, or violations of our Terms of Service.

03 Information Sharing # link

We do not sell your personal information. We may share information with:

• Other users: Your profile (display name, photo, bio, city, ratings and clubs) is visible to other signed-in users unless you set your profile to private. Players and organizers in an event you join see your name, registration and results.
• Anyone with a link: Live scoreboards, share cards and uploaded photos can be viewed without signing in by anyone a player or organizer shares the link with. They show display names and scores.
• Event organizers: Organizers see your registration, check-in and attendance for their events.
• Service providers: Stripe (payments), Google and Facebook (sign-in), Google Maps (location search), Twilio (text-message codes), Resend (email delivery), Printful (merchandise fulfilment), DUPR (ratings, if you link it), browser push services from Apple, Google and Mozilla (notifications), and the companies that host our servers and store our backups.
• Legal requirements: When required by law, subpoena, or legal process, or to protect the rights, safety, or property of dinked.in or others.
• Business transfers: In connection with a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction.

04 Cookies & Local Storage # link

We use a small number of cookies, all of them needed for the Service to work:

• Sign-in cookie: Keeps you signed in, for up to 180 days.
• Security cookies: Protect forms from cross-site request forgery (CSRF), and briefly remember where to send you after you sign in.

We also use your browser's local storage for small conveniences, like a dismissed tip or a layout choice, and save a copy of a few pages so the app works offline. The saved pages are cleared when you sign out.

We do not use analytics, advertising cookies or tracking pixels. You can configure your browser to reject cookies, but you will not be able to sign in.

05 Data Security # link

We implement industry-standard security measures to protect your information:

• Passwords are hashed using Argon2id (never stored in plaintext).
• A DUPR password you ask us to remember is encrypted (AES-256).
• Sessions use HTTP-only secure cookies.
• All data is transmitted over HTTPS/TLS encryption.
• CSRF protection on all form submissions.
• Rate limiting on sign-in and sign-in codes.

No method of transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

06 Data Retention # link

We retain your personal information for as long as your account is active or as needed to provide the Service. If you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law or for legitimate business purposes (e.g., fraud prevention, dispute resolution).

Game scores and tournament results may be retained in anonymized form for statistical purposes.

07 Your Rights # link

Depending on your jurisdiction, you may have the right to:

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate information. You can edit most of it yourself in your profile.
• Deletion: Request deletion of your personal information, or delete your account in Settings.
• Portability: Request your data in a portable format.

You can also make your profile private, turn push notifications off in Settings, and unlink DUPR at any time. We do not send marketing emails or texts.

08 California Privacy Rights # link

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information:

• The right to know what personal information we collect, use, and disclose.
• The right to request deletion of your personal information.
• The right to correct inaccurate personal information.
• The right to opt out of the sale or sharing of personal information. We do not sell or share personal information for advertising.
• The right to limit the use of sensitive personal information. We use your precise location only when you allow it, and only to show nearby play.
• The right to non-discrimination for exercising your privacy rights.

09 Children's Privacy # link

The Service is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected information from a child under 13, we will delete it promptly. If you believe a child under 13 has provided us with personal information, please contact us.

10 Third-Party Services # link

The Service relies on third-party services that have their own privacy policies:

• Google: Sign-in and Google Maps location search. See Google's Privacy Policy.
• Facebook: Sign-in. See Facebook's Privacy Policy.
• Stripe: Payment processing, including payouts to clubs. See Stripe's Privacy Policy.
• Twilio: Sends the sign-in codes we text to your phone.
• Resend: Delivers our emails.
• Printful: Prints and ships merchandise orders.
• DUPR: Ratings and result submission, if you link your DUPR account.

11 Changes to This Policy # link

We may update this Privacy Policy from time to time. We will post the updated policy on the Service and update the effective date above, and we will email registered users about material changes. Your continued use of the Service after changes are posted constitutes your acceptance of the revised policy.

12 Contact Us # link