PickleTab stores what it needs to run your pickleball group, and not much else. This page lists all of it. Who runs the service and how to reach them is on the legal notice page.
What gets stored
Your account. Your email address and a hashed form of your password. The password itself is never written to the database; at sign-in we only check that what you typed produces the same hash. An account whose email address is never confirmed is deleted automatically after 30 days. A record that keeps you signed in is deleted once it expires, which is 30 days after you sign in.
Your signed-in devices. For each sign-in we also keep which browser and system it came from — for example “Chrome on macOS” — and when it was last used, updated at most once an hour. The label is worked out from what your browser reports when you sign in; we keep only those two names, never the report itself or your IP address. We show it only to you, on the app’s Account security page, so you can spot a device you don’t recognise and sign it out. It is deleted with the sign-in record, 30 days after you signed in. Signing out ends the sign-in at once but does not delete the record sooner.
What your group enters. Sessions, venues, court counts, prices, who played, what the evening cost, and the organizer's note about how to be paid. Amounts here are records you type in — PickleTab never touches actual money (more on that in the terms).
Player names. Someone joining a session through its link types a name, and that name is shown to everyone else who has the link. A first name or nickname is enough. If a player cancels, the name they typed is removed 30 days after the cancellation. The exception is a player who was still signed up when the group finalized that session's costs: their name stays with the group's cost records.
Payment details. A member's own note on how to be paid, and, if they upload one, a QR code or similar image — shown to whoever is settling up. Editing yours later keeps a copy of what a past session already showed, so a correction cannot rewrite what people were told at the time.
Prepaid access. Your trial status, purchased terms and payment reference identifiers. When you pay by PromptPay or bank transfer, we also keep the payment's amount, date and reference and the transfer slip you upload, so the payment can be checked; location data embedded in the image is removed before it is stored. Slips are kept as part of the payment record and are not deleted automatically. If you ask for a refund, we keep the request with the same record: its date, the amount the refund policy gives, any note you add (such as the account to pay into) and, once paid, the refund's amount, date and reference. We do not store cards or renew automatically. PickleTab does not receive, hold or transfer money between players (more on that in the terms).
A technical log. Which account did what, and when — created a session, changed a setting. This log never contains player names.
Messages to us. If you write to us through the contact form in the app, we keep the message, its subject and the account it came from, so we can answer. These are not deleted automatically.
Who can see it. The operator can see account email addresses, purchases and payment records, uploaded transfer slips, refund requests and contact messages, and uses them only to handle payments and support.
Cookies
Cookies here are required for the site to work. One keeps you signed in. One remembers which of your groups you opened last, so the app opens there next time; it holds only that group's identifier and lasts a year. One, set only on a session's player page when you join, remembers that you joined so you can take your name off again. One remembers the language you picked. We use Cloudflare Web Analytics on these public marketing pages to understand how people find and use them. It records aggregated page, referral and performance information; it does not use cookies or track people across other websites.
The typefaces on these public pages are served from pickletab.app itself, so opening a page sends no request to Google or to any other font service. The app makes no such request either.
Where the data lives
PickleTab runs on Cloudflare (Workers and the D1 database). Cloudflare processes the data on our behalf and does not use it for its own purposes.
Session links
A session's player page is reachable by anyone who has its link — that is what makes joining work without an account. Treat the link like a group chat: it stays private as long as it is shared carefully. An organizer can hide a session's page at any time, and hiding it takes the player names off the internet immediately. A player link also stops working by itself 90 days after its session ended, once nothing is still owed for that session, and it does not come back. Closing a group also stops every one of its player links at once, and they do not come back either.
PickleTab sends only a few kinds of email, all about your account or your group: a link to confirm your address when you sign up; a link to reset your password, when someone asks for one for your address; an invitation to join a group, which goes out only when the organizer writing that invitation chooses to type an address for it; a reminder near the end of a paid term; and a message when a refund you asked for has been sent. When you report a PromptPay or bank-transfer payment, the operator is also emailed so it can be checked. There is no newsletter and no marketing.
Anyone who knows your address can ask for a password-reset link, so receiving one does not mean your account was touched — the link is useless to whoever asked unless they can also read your mailbox. We limit how many can be sent to one address per hour. To do that we store a one-way hash of the address and of the requesting IP address rather than either value itself, and those counters are deleted within a few hours. A hash of a short value is not a secret from someone who can guess the value and check it, so treat this as us not keeping the list rather than as us protecting it.
Mail is queued before it is sent, so the address it is going to is held with the queued message until it is delivered or given up on. Thirty days after that, the address is erased and only the record that something was sent remains. Delivery itself is carried out by Resend, which receives the address and the message text in order to deliver it.
An address typed into an invitation is held that way and no other way — it is never added to the group's records, so the queued message is the only copy and the same thirty days above are the whole of it. That is also true when the invitation is withdrawn or used before the message goes out: the message stops, and the address is erased on the same schedule rather than straight away. Somebody who is invited and never joins leaves nothing behind once that window passes.
Connected apps
You can connect an app, such as an AI assistant, to your account. It connects through a standard sign-in (OAuth) that you approve on our consent page. A connected app acts as you: it can read and change what you can in your groups — venues, sessions, sign-ups, costs and who has paid — including other members’ names and what they owe. It cannot see your password, change your account or touch billing. Anything it changes is recorded as your action. What the app then does with what it reads is governed by that app’s own terms and privacy policy, not this one.
You can disconnect an app at any time on PickleTab’s Account security page, under Connected apps; it loses access at once. Changing your password, signing out everywhere, asking for your account’s deletion, or the operator disabling your account also cuts off every connected app. A connection that has been cut off is deleted the next time the app tries to renew it, and at the latest 30 days after it was last used.
Deletion and your rights
Deleting your account. Signed in, open the app’s Account security page, choose “Delete my account” and confirm with your email address and password. Asking signs you out on every device and gives up your places on upcoming sessions. We email you to confirm, and your account is deleted within 30 days of your request. Until then, signing in and choosing “Keep my account” cancels the request; places you gave up stay given up.
What deletion removes, and what stays. Deleting your account removes your email address, your password, your names in your groups, your payment details (QR images included) and your messages to us. Three kinds of record stay. A cost split the group already finalized keeps the name it was split under, so what everyone owed stays readable to the group. Billing and payment records are kept because accounting law requires them. And the technical log keeps its record of what was done, identified only by an internal id with nothing about you behind it. Everywhere else you show as “Former member”.
Groups you own. If you own a group that is still open, hand it over to one of its organizers, or close it, before deleting your account. A group you hand over moves onto the new owner’s plan. Closing a group is not a deletion request: a closed group becomes read-only, and nothing in it is removed beyond the automatic deletions described on this page, which do not remove sessions, the names of players still signed up, or activity and payment records.
A copy of your data. On the same page, “Prepare my data” builds one file, in JSON, of what your account holds about you: your account and signed-in devices, the groups you belong to, your sign-ups and what you owed, your payment details, your plan, payments and refunds, your messages to us, the apps you connected, and what you did in the app, including when you connected or disconnected an app. It holds nothing about other members. It is usually ready within a few hours. Download it with “Download my data” within 7 days; after that it is deleted.
Players without an account. Cancel on the session’s player page, and the name you typed is removed 30 days later, as described above. For anything else, write to privacy@pickletab.app.
Response time and your other rights. A deletion request is completed within 30 days. Depending on where you live, the law may also give you rights to access, correct or export your data. Write to privacy@pickletab.app for any request the app does not handle, or if you cannot sign in.