Privacy

Operator and scope

PULSE is a separate pickleball rating beta operated by:

The first beta accepts U.S. residents only. Court Pilot accounts, scores, court assignments and rotations are not automatically linked or changed.

Information and purposes

We use display name, account email, password hash, PULSE ID, private birth month/year and gender, game participants/date/format/scores, permitted event/location text, derived ratings/statistics, security records and parental-consent records. Birth month/year screens age; birth year and gender automatically affect the server-owned rating calculation and are not optional player toggles. Do not submit exact birthdays, home addresses, government IDs, payment information, contact details or other unnecessary child information in names, games or forms.

Visibility and results

Adult display names, ratings and eligible results are available only to signed-in verified members, not the anonymous web. Account email, birth details, gender, credentials, consent documents and authenticator information are private. Minor profiles/general history are restricted to the player, verified linked guardian and authorized admins. Limited game-participant sharing requires the separate optional permission below. Ordinary member submissions affect ratings only after all other participants verify. Admin CSV submissions do not require peer verification.

Optional one-time game-participant permission

A guardian may separately sign this optional section during the same account setup. After operator review, the child adds games and the other players verify results like an adult. No parent signature or approval is required for each game. Private-account consent alone does not authorize this disclosure; an existing guardian can provide a one-time update.

Only verified signed-in accounts listed as players in the same reported game may view its display names, teams, played date, format, scores and confirmation/status. This includes pending entries needed for verification. It does not open a public child profile, child roster search, age, gender, email, private account ID or general game/rating history. Every participating minor needs their own current guardian permission. Do not report fabricated games or include unnecessary private details.

Declining this optional sharing leaves the private account and admin-entered results available. A verified guardian can withdraw sharing without closing that private account. Withdrawal blocks future participant access but cannot recall information already viewed/copied. Corrected results require fresh player verification, not another guardian signature. Materially different disclosure needs new notice and applicable consent.

Children and guardian controls

A child under 13 must not enter account credentials before a verified adult guardian receives the direct notice, returns a signed consent form and obtains operator approval. The approved child receives a separate login and verifies its account email. Email verification or a checkbox alone is not parental consent. Teen profiles also stay private; participant sharing needs a reviewed guardian link. Guardians can privately review/export child information, withdraw permission and request deletion. The master reviews signed forms and privacy requests. Adult transition requires the player’s own acceptance; birthdays do not reactivate withdrawn accounts.

Service providers and security

Render hosts the application and database, Cloudflare R2 stores encrypted backups and the non-personal encrypted recovery checkpoint, and Resend delivers verification/reset and required account/retention notices. They support the described service. There is no sale, advertising, behavioral targeting, third-party analytics or public child messaging. Host-only Secure/HttpOnly cookies support sessions and CSRF protection. Passwords are hashed; private signed documents, server-side score drafts, authenticators and backups are encrypted using separate purpose keys. Draft acknowledgement is not game submission or peer verification. The hosted app does not deliberately persist raw score drafts or CSV uploads in browser storage; keep unacknowledged edits open. Privileged operations need fresh authenticator confirmation and, where required, current-password reauthentication. No system can guarantee absolute security.

Retention, removal and recovery

Under-13 account/profile and identifiable game data are removed after 24 calendar months without a successful account login or confirmed recorded play, after a full 30-day notice period. Played dates, not later import dates, count as play. A late warning gives the recipient a full 30 days. Verified guardians may request removal sooner. Uncertain warning delivery never authorizes removal.

Unused consent requests/invitations expire after 14 days. A created child login whose email activation remains uncompleted is removed after 14 days. An under-13-origin account awaiting its adult transition remains subject to inactivity review; after age 18 the notice goes to its verified adult owner, not the former guardian. Signed documents and ended-consent records are removed within 30 days after consent ends or the private account is removed. Verified withdrawal immediately suspends the child account; active-data removal following an ended consent or verified deletion request completes within 30 days. Only minimal non-content security/deletion-status metadata is retained for up to 90 days. These limits are not permission to retain unnecessary personal information.

Encrypted hourly snapshots expire after 30 days under the private snapshots policy; provider deletion is asynchronous. Removal can void/redact affected results and recalculate ratings, while unrelated games remain. A separate encrypted recovery checkpoint prevents an older backup from reopening account access after a protected privacy/security change. A mismatched restore stays closed for operator reconciliation; it is not silently served. Do not call every copy erased while backups remain.

Your rights, changes and contact

Contact the operator above or use the verified guardian/account controls for review, correction, withdrawal or deletion. We verify authority without requesting unnecessary identity documents. Privacy requests remain possible if normal play is restricted. Material changes to child information practices are explained before use and receive new verified consent where required.

Adult organizer imports and optional invitations

Authorized organizers may add an adult player name, private invitation email, gender and birth year before that player creates a login. Admin-entered results can build the same player’s rating and history before login activation. Adult names, ratings and eligible results follow the signed-in-member visibility rules above. The email is private and is not a public directory field. Resend sends invitations only after an admin explicitly selects recipients and confirms permission to contact them; there are no automatic marketing messages.

The adult may choose a password and accept the current U.S. beta notices through a single-use invitation link, valid for up to 7 days. Activation attaches the login to the same player ID and does not reset results or rating. Unused invitation contact addresses are removed after 14 days and cleared on activation; minimal invitation security/status records remain for up to 90 days. Expiring or removing an invitation contact does not remove a player’s scored history. Contact the operator for profile/result correction or removal. Minors cannot be added through this adult roster shortcut; existing private account and guardian safeguards still apply.