1. Who we are

Vamoset is a padel tournament management platform operated by Vamoset AS, a company registered in Norway (organisation number 938 384 398), Bråtenlia 6, 1391 Vollen, Norway. Vamoset AS is the data controller for the personal data described in this policy. You can contact us at info@vamoset.com.

2. What data we collect

We collect only what is necessary to provide the service:

Account data: your display name and email address when you create an account.
Social login data: if you sign in with Google or Apple, we receive your name and email address from that provider (with Sign in with Apple you may choose to hide your email address, in which case we receive a private relay address instead). We do not receive your password or other account data.
Tournament data: player names, scores, and results that you or an organiser enter during tournaments.
Club and series membership: which clubs and series you belong to, your role, and when you joined.
Usage data: which tournaments you have participated in (game codes and timestamps), stored to show your recent tournament history.
Profile data: if you add them, your username, a profile photo, a short bio, your country and your preferred language.
Stats and rating: your statistics and Vamoset rating, which we calculate from your results.
Purchase data: if you subscribe, your plan, its status and renewal dates, which store sold it (our website, the App Store or Google Play) and that store's subscription identifier. We never see your card or payment details.
Technical data: your IP address is processed briefly to protect the service against abuse (rate limiting and an automated bot check on sign-up and sign-in), and appears in our hosting providers' standard request logs.
Venue locations: when an organiser sets a club's venue, the place they search for or pick on the map. We do not access your device's location.

We do not collect your contacts, phone number, photos other than the profile photo you choose, or your device's advertising identifier.

3. How we use your data

To provide and operate the Vamoset platform.
To display your name and results within clubs and series you are a member of.
To allow club organisers to find and add you to tournaments by name.
To maintain your tournament history and season standings.
We do not sell your data to third parties.
We do not use your data for advertising purposes.

4. Who can see your name

Your display name is visible to club organisers when they search for players to add to tournaments. This allows organisers to find and add you without needing your email address. Finding other padel players is a core function of the platform.

Your profile page (display name, username, profile photo, bio and results) can be viewed by anyone who has its link. Your Vamoset rating is shown to other members unless you hide it in Settings.

If you no longer wish to be discoverable, you can permanently delete your account at any time in Settings → Danger zone → Delete account. On deletion, your profile is anonymised and removed from organiser searches.

5. Data storage and security

Your data is stored on Supabase (hosted on AWS in the EU). We use industry-standard security practices including encrypted connections (HTTPS), row-level security on all database tables, and secure session management. Passwords are hashed and never stored in plain text.

6. Third-party services

Supabase: database, authentication, and real-time services. Privacy policy
Google: optional sign-in provider, and the seller of subscriptions bought in our Android app (Google Play). We receive confirmation that a subscription is active and Google Play's purchase identifier; we never see your payment details. Privacy policy
Apple: optional sign-in provider, and the seller of subscriptions bought in our iOS app. We receive confirmation that a subscription is active and an anonymous transaction identifier; we never see your payment details. Privacy policy
Paddle: merchant of record for subscriptions bought on our website. Paddle collects the billing and payment details needed to take payment and issue invoices; we receive the subscription status and the invoice, not your card details. Privacy policy
Vercel: web hosting. Privacy policy
Cloudflare Turnstile: an automated check on sign-up and sign-in that tells people from bots. Privacy policy
Resend: sends our account emails (confirmations and password resets) and so receives your email address. Privacy policy
OpenStreetMap: the map and place search used when an organiser sets a club's venue; it receives the search text and map position. Privacy policy
Strava: only if you choose to connect your Strava account. Privacy policy

7. Your rights (GDPR)

If you are based in the EU or UK, you have the following rights:

Access: request a copy of your personal data.
Correction: update your display name in Settings at any time.
Deletion: request deletion of your account and personal data. Your tournament scores will be anonymised (your name replaced with "Deleted Player") but aggregate results are retained for series integrity. You can delete your account yourself in Settings, or email us at info@vamoset.com to request deletion. See how to delete your account for what is deleted and what is kept.
Portability: request an export of your data.
Objection: opt out of name searchability in Settings at any time.

To exercise any of these rights, contact us at info@vamoset.com.

8. Cookies and sessions

We use a single session cookie to keep you signed in. This cookie is essential for the service to function and does not track you across other websites. We do not use advertising cookies or analytics cookies.

9. Data retention

We retain your account data for as long as your account is active. Tournament data linked to series is retained indefinitely to maintain historical standings. Abandoned tournaments (not linked to any series and inactive for 30+ days) are deleted periodically. When you delete your account we keep a short record of the deletion (your email address, name and plan, and the payment or store reference of any subscription you had, plus anything a payment provider or app store tells us about it afterwards) for five years, to handle refunds, disputes and legal obligations. Deleting your account does not cancel a subscription bought in the App Store or Google Play: cancel those with Apple or Google.

10. Account ownership and transfers

Vamoset accounts are personal and non-transferable. You may not buy, sell, gift, trade, or otherwise transfer your account or username to another person. Accounts found to have been sold, purchased, or transferred will be suspended.

Usernames are assigned to individual users and cannot be purchased, reserved, or transferred. We reserve the right to reclaim usernames that are inactive, misleading, or obtained in violation of these rules.

11. Changes to this policy

We may update this policy from time to time. The date at the top of this page will reflect the latest update. Continued use of Vamoset after changes constitutes acceptance of the updated policy.

12. Contact

For any privacy-related questions or requests, contact us at info@vamoset.com.

Privacy Policy