Who we are
bgtennis.chat is an independent service that helps parents keep track of junior tennis tournaments from the Bulgarian Tennis Federation and Tennis Europe. It is not affiliated with the Bulgarian Tennis Federation or with Tennis Europe.
For anything about your data, write to contact@bgtennis.chat.
What we collect, why, and for how long
We collect only what the service needs. Each card below says what the data is, why we have it, its legal basis under the GDPR, and how long we keep it.
Your account: email address, first name (if you give it), language, reminder settings, your choice about news by email, the link you signed up through, your plan, and when you last used the app
- Why
- Your account, signing in, sending you reminders; fixing problems and answering you when you write to us
- Legal basis
- Contract; legitimate interest (fixing problems and answering you when you write to us)
- Kept for
- Until you delete your account. After 24 months without signing in, we warn you by email and then delete it.
If you tap Subscribe for Pro: the numbers Stripe gives you as a customer and your subscription, and the subscription’s status and dates. Your email address, your language and your account’s number go to Stripe, so that it can make you a customer; your card and your billing name and address go to Link (Stripe), which sells Pro in its own name; we never see your card
- Why
- Knowing whether your account has Pro, and until when; cancelling your subscription when you delete your account
- Legal basis
- Contract
- Kept for
- Until you delete your account; the customer record at Stripe (your email address, your language and your account’s number) stays in our Stripe account after that, unless you ask us to remove it. Link (Stripe) keeps its own records of your payments, as tax law requires, under its own privacy policy
Your children: first name, birth year, boys’ or girls’ draws, the age categories you follow, which tournament sources you follow for them (the federation, Tennis Europe) and, for Tennis Europe, in which countries, the tournaments you mark (entered or skipping, for example), with the history of those changes
- Why
- Working out which tournaments and deadlines apply to each child
- Legal basis
- Contract
- Kept for
- Until you remove the child or delete your account
Calendar links: a random private code for each child’s calendar feed, and when a calendar app last fetched it
- Why
- Your calendar feeds
- Legal basis
- Contract
- Kept for
- Until you replace the link, remove the child or delete your account
Reminders and notices we send you, whether they arrived, and the devices on which you turned on notifications
- Why
- Sending you reminders
- Legal basis
- Contract
- Kept for
- Until you delete your account. A device is removed when you turn its notifications off, when you sign out on it, when a notification to it is refused, and when you turn off the app’s notifications in your phone’s or browser’s settings.
Addresses our emails can’t reach, or that marked one of them as spam, on the list Resend keeps for us
- Why
- Stopping our emails to them; honouring a spam report
- Legal basis
- Legitimate interest
- Kept for
- Until you ask us to remove it, also after you delete your account
Your questions in the Ask tab and our answers
- Why
- Answering you; preventing misuse; improving the app: we read questions it couldn’t answer
- Legal basis
- Contract; legitimate interest (preventing misuse; improving the app)
- Kept for
- 90 days
Sign-in events: coded (hashed) forms of your email and IP addresses, and their times
- Why
- Limiting sign-in attempts; counting sign-ups
- Legal basis
- Legitimate interest (security)
- Kept for
- 90 days
Sign-in records at our sign-in provider (Supabase Auth): email address and sign-in times
- Why
- Signing you in; security
- Legal basis
- Contract; legitimate interest (security)
- Kept for
- Your email and sign-in times until you delete your account; security logs for a limited period
Actions our administrator takes in the admin panel (record numbers only; no parent’s name or email address)
- Why
- Accountability for those actions
- Legal basis
- Legitimate interest
- Kept for
- Kept; once an account is deleted, its record numbers no longer identify anyone
Admin records: our administrator’s own attempts to sign in to the admin panel or confirm an action in it (when, and whether the password was right), and alerts about faults in the service (record numbers only; no parent’s name or email address)
- Why
- Keeping the admin panel secure; noticing faults
- Legal basis
- Legitimate interest (security)
- Kept for
- 30 days for these attempts; 180 days for the alerts
Messages you send to contact@bgtennis.chat, by email or through the contact form
- Why
- Replying to you
- Legal basis
- Legitimate interest
- Kept for
- In our inbox until answered, then 12 months
Coded (hashed) forms of the IP addresses that send the contact form, and their times
- Why
- Limiting how many messages can be sent
- Legal basis
- Legitimate interest (preventing misuse)
- Kept for
- 1 day (deleted daily, so up to 2 days)
The weekly digest, new-tournament alerts, and news and tips by email
- Why
- Sending you the free plan’s emails (the weekly digest and the new tournaments for your children) and occasional news about bgtennis.chat
- Legal basis
- Consent (the unticked box when you sign in, or the news switch under Account and data)
- Kept for
- Until you unsubscribe or switch the news off
Google Analytics: the pages you visit, your device and approximate location, through cookies
- Why
- Usage statistics
- Legal basis
- Consent (the cookie banner)
- Kept for
- 2 months (the cookies in your browser can last up to 2 years: see Cookies)
Page views (Vercel Web Analytics): the page, the site you came from, your country and type of device, without cookies and without identifying you
- Why
- Usage statistics
- Legal basis
- Legitimate interest
- Kept for
- Only as totals that identify no one
People named on federation tournament pages (referees, organisers): names and contact details as published there
- Why
- Keeping tournament details accurate. Never shown to parents.
- Legal basis
- Legitimate interest
- Kept for
- With the tournament’s record. We will set a fixed deletion period and state it here.
“Contract” means we need the data to provide the service you signed up for (Article 6(1)(b) GDPR). “Legitimate interest” means we need it to run the service safely and fairly, and have weighed that against your privacy (Article 6(1)(f)). “Consent” means we use it only because you said yes, and you can withdraw it at any time (Article 6(1)(a)).
Within bgtennis.chat, only our administrator sees your account, your children’s details and the questions the Ask tab couldn’t answer, in a password-protected admin panel, to run the service, help parents who write to us and fix problems.
Your children
The account holder is always a parent. Children never use bgtennis.chat themselves. For each child we store only a first name, birth year, whether they play in boys’ or girls’ draws, the age categories you choose, which tournament sources to follow (the federation, Tennis Europe) and, for Tennis Europe, in which countries, and the tournaments you mark. We never ask for a surname, photo, school or health details, and we use the birth year only to work out age categories.
People named on federation pages
Tournament pages on the Bulgarian Tennis Federation and Tennis Europe websites name referees and organisers, sometimes with a phone number or email address. We read those pages to keep tournament details accurate, and keep what they publish with the tournament’s record. Parents never see these details: phone numbers and email addresses are removed from everything the app shows. If you are named on such a page, you can ask us about it or object at contact@bgtennis.chat.
Who handles your data for us
These companies process data on our behalf, under data processing agreements:
- Supabase: our database and sign-in. Your data is stored in the EU (Paris).
- Vercel: hosts the website and the app on servers in the EU (Paris), with a worldwide network that delivers the pages.
- Resend: sends our emails (sign-in codes, reminders and the messages you send through the contact form). If an email to you is refused for good, or you mark one as spam, Resend adds your address to a list it keeps for us and stops our emails to it; it stays there after you delete your account unless you ask us to remove it.
- Our email provider for contact@bgtennis.chat: keeps the messages you send us.
- Google (Google Analytics): usage statistics, only if you accept analytics cookies.
- Vercel Web Analytics: counts page views without cookies and without identifying you.
- Anthropic: answers questions in the Ask tab. It receives your question and the one before it, your children’s first names and categories and the tournament details an answer needs; never your email address or your name; and it does not train its models on them.
Payments for Pro go through Link (Stripe), which sells Pro as merchant of record and holds the payment data in its own right, under its own privacy policy: it collects your billing name and address and your card, and we never see your card. When you first tap Subscribe, we give Stripe your email address, your language and your account’s number, so that it can make you a customer; that customer record stays in our Stripe account after you delete your account unless you ask us to remove it. We keep only the numbers Stripe gives you as a customer and your subscription, and the subscription’s status and dates. Link and Stripe may process this data outside the European Economic Area, including in the United States, under the safeguards their privacy policy sets out.
Error reporting (Sentry, with data kept in the EU) will join this list; we will update this notice before it does. We don’t sell your data, share it with anyone else or use it for advertising.
Some of these companies are based in the United States. Where your data may be processed outside the European Economic Area, the transfer relies on the European Commission’s standard contractual clauses or on the EU–US Data Privacy Framework, as set out in each provider’s data processing terms.
Notifications reach your phone or computer through the push service of the browser you use (Apple’s, Google’s, Mozilla’s or Microsoft’s), which the browser chooses, not us. What a notification says is encrypted, so that service can’t read it. It sees only that a notification is on its way to your device, and when. These services may be outside the EU.
Your rights
You can ask us at any time to show you the data we hold about you and give you a copy, to correct it, to delete it, to restrict how we use it or to stop using it, and you can withdraw any consent you gave.
In the app you can delete everything yourself (you’ll need to sign in):
To get a copy of your data, or for anything else, write to contact@bgtennis.chat. We reply within one month.
If you think we have handled your data wrongly, you can complain to Bulgaria’s Commission for Personal Data Protection (КЗЛД) at www.cpdp.bg.
Cookies
We use only the cookies and browser storage below. All of them except Google Analytics’ are needed for the site and the app to work, so they need no consent. Google Analytics cookies are set only if you accept them in the cookie banner.
| Name | What it’s for | How long |
|---|---|---|
| locale | Remembers your language | 1 year |
| sb-… | Keeps you signed in (Supabase) | 400 days |
| bgt_pending | Remembers your sign-in while you enter the code | 30 minutes |
| bgt_link | Holds a sign-in link until you tap “Sign in here” | 10 minutes |
| __Host-bgt_admin | Set only for our administrator: keeps the admin panel unlocked | 12 hours |
| bgt_push_endpoint | Browser storage, not a cookie: remembers the device on which you turned on notifications, and for which account | Until you turn them off, sign out or delete your account |
| sw.js | Browser storage, not a cookie: the app’s service worker, which shows notifications. The app registers it when you open it | Until you clear this site’s data in your browser |
| bgt_push_card_closed | Browser storage, not a cookie: remembers that you closed the notifications card on “Upcoming” | Until you clear this site’s data in your browser |
| analytics_consent | Remembers your cookie choice | 180 days |
| _ga, _ga_… | Google Analytics, only with your consent | Up to 2 years |
Vercel Web Analytics sets no cookies. To change your choice, use the button below: it forgets your choice and reloads the page, so the banner asks again.
Changes to this notice
When we change this notice, we update the date at the top. If a change affects how we use your data, we will tell you by email or in the app before it takes effect.