Privacy policy

SonicPadel is operated by ViVélo Holding AS, Norwegian organisation number 920 045 014. We are the data controller for the personal information described here.

Contact us at info@sonicpadel.com.

• Account information: your name, email address, profile image where provided, login provider identifier and sign-in records. For email accounts, we store a password hash, not your readable password. If you add a passkey, we store its public key, identifier and the name you choose. Your private key and biometric information stay with your device or password manager.
• Tournament information: player names, settings, rounds, scores, rankings and any custom cards entered by the organiser.
• Technical information: sign-in cookies, IP addresses used to limit abusive requests, and server logs needed to operate and protect the service.
• Messages: information you include when contacting us.

Please use display names for players and do not enter sensitive information into tournament names or custom cards.

If you choose Google, we request only the basic identity permissions: your name, email address and profile information. We receive a Google account identifier to recognise you on later visits. Google sign-in does not give SonicPadel access to your Gmail, contacts, Drive files or calendar.

We use this information to create or recognise your account, sign you in and attach saved tournaments to you. Provider tokens needed for sign-in are stored encrypted. We do not sell Google user data, use it for advertising or use it to train AI models.

You can remove SonicPadel from your Google account connections . This disconnects Google access. To delete your SonicPadel account and its saved tournaments, use Your account.

We process account and tournament information to provide the service you request: sign-in, saved games, scoring, rankings and account emails. This processing is necessary to perform our agreement with you (GDPR Article 6(1)(b)).

We use technical records to prevent abuse, diagnose errors and keep the service reliable. Our legitimate interest is operating a secure, functioning service (Article 6(1)(f)). Where a legal obligation applies, we process the relevant information to comply with it (Article 6(1)(c)).

Google's permission screen lets you choose whether to share your Google profile for sign-in. You can use an email account or create an open guest session instead. We do not make automated decisions with legal or similarly significant effects about you.

Player and results pages are accessible to anyone who has the tournament link or join code. They show player names, scores and rankings. A private session protects the organiser's management view; it does not make the results private.

An open session lets anyone with its management link change tournament settings and scores. Share links accordingly and tell players how their names and results will be displayed.

We use Vercel for hosting and analytics, DigitalOcean for account and tournament storage, Resend for account emails, Google for sign-in, and Domeneshop for contact email.

Vercel, DigitalOcean, Resend and Google may process data outside the EEA. Information about the countries and contractual transfer safeguards is available on request.

Essential sign-in cookies keep you logged in and protect the authentication flow. Your browser also stores your theme, recent-session history and a temporary creation draft. Drafts are restored only within one hour and are removed after successful creation or sign-out. Browser history remains on that device until removed or its site storage is cleared.

Vercel Web Analytics provides aggregate statistics for our public information pages without analytics cookies. We exclude authentication, tournament and account pages, and strip query parameters from the analytics events we send. We do not use advertising cookies or send your tournament names and scores as analytics events.

Saved sessions are kept until their owner deletes them. Unowned guest sessions are scheduled for deletion after 30 days. Account information is kept until you delete your account from Your account. Account deletion removes all its saved tournaments and signs you out on every device. Security records and service-provider logs may have separate retention periods; contact us for the applicable details. Deletion from backup copies, where they exist, follows the provider's backup cycle.

Payment records keep internal billing identifiers, transaction ownership and minimal deletion receipts after account removal. This prevents purchases from being reassigned. Provider records follow their retention rules; contact us for details.

When you delete your account, encrypted Apple sign-in credentials may be kept temporarily while we complete provider revocation. We remove these credentials after confirmation.

You can ask to access, correct, export or delete your personal information, restrict processing, or object to processing based on legitimate interests. These rights apply subject to the conditions in data-protection law. We may need to verify your identity before acting on a request.

You can delete saved tournaments from My sessions, or delete your account and all its saved tournaments from Your account. No email request is needed for these actions. For other privacy-rights requests or questions about retention, contact info@sonicpadel.com. Revoking Google access alone does not delete saved tournaments.

You may complain to Datatilsynet, the Norwegian Data Protection Authority, or your local supervisory authority. We update this page when our data practices change.