Privacy Notice

1. Who controls your information

NE GAMES LTD, company number 13211167, is the data controller for personal information processed to provide Squash Players Diary. This notice explains how we handle your information when you browse, create an account or use the diary.

2. What we collect and why

• Account information: email address, account identifier, securely handled login credentials and, if you choose Google sign-in, profile information supplied for authentication. We use this to create and protect your account and deliver the service (contract performance and legitimate interests in security).
• Diary information: dates, times, opponents, clubs, courts, competition names, results, notes, personal appointments and saved names that you enter. We use this to store and display your private diary (contract performance). Only enter information you are entitled to share; avoid sensitive medical details in appointment notes.
• Preferences and reminders: saved time choices, alarm settings and, if you enable notifications, a browser push subscription and device endpoint. We use these to personalise the diary and send requested reminders (contract performance; permission for optional notifications can be withdrawn in your browser or device settings).
• Subscription information: your plan, subscription identifier, status and billing-period dates, used to manage access and respond to billing enquiries (contract performance and legal obligations). Card details are handled by Paddle, not stored in your diary.
• Technical and usage information: IP address, device/browser information and service or error logs, used to deliver, secure, troubleshoot and improve the service (legitimate interests).
• Support correspondence: contact details and the messages you send us, used to answer enquiries, resolve complaints and respond to rights requests (contract performance, legitimate interests and legal obligations).

3. Who receives information

We use service providers for hosting, database storage, account authentication, email delivery and technical support, including Lovable Cloud and its infrastructure providers. Google receives information when you choose Google sign-in; browser and push-delivery providers process the information needed for notifications. These providers receive only the information needed for their services.

We share necessary account and order information with Paddle, our Merchant of Record, for product sales, subscription management, payments, tax compliance and invoicing. Paddle also collects checkout information directly and handles it under its own privacy notice. We may share information with professional legal or accounting advisers and authorities where required by law. Other players cannot view your private diary or saved names.

4. Retention and security

We keep account and diary data while needed to provide your account and service. When you request deletion or it is no longer needed, we delete or anonymise it, subject to necessary legal, accounting, fraud-prevention and dispute-resolution retention. Technical logs, support correspondence and backups are retained only as long as necessary for their purpose and applicable obligations; backups may take time to expire.

We use appropriate technical and organisational safeguards, including encrypted connections and access controls that restrict private diary data to the relevant account. No online service can guarantee absolute security.

5. International transfers

Service providers may process information outside the UK or EEA. Where required, transfers are protected by adequacy decisions, approved standard contractual clauses and the applicable UK transfer addendum or equivalent lawful safeguards. Contact us for information about the safeguards relevant to your data.

6. Your rights

Subject to applicable law, you may request access, correction, erasure, restriction or portability of your personal data, and object to processing based on legitimate interests. You can withdraw consent where processing relies on it, without affecting earlier lawful processing. We normally respond to UK/EEA data-rights requests within one month; lawful extensions may apply and we will explain them. You may complain to the UK Information Commissioner's Office at ico.org.uk, or your local supervisory authority.

7. Cookies and browser storage

The diary uses essential browser storage to remember your sign-in session and personal time preferences. Authentication services may also use essential cookies. Google sign-in and Paddle checkout may use storage or cookies needed to authenticate you, complete payments and prevent fraud under their own notices. The diary does not currently add optional advertising or analytics cookies. You can clear or block storage in your browser settings, although this may sign you out or prevent parts of the service from working. Any future non-essential cookies will require an appropriate preference choice before they are used.

8. Contact and updates

For service enquiries, privacy requests or rights-holder complaints, write to NE GAMES LTD at its registered office, listed on Companies House. Please identify your account and the nature of your request; do not include your password or full payment details.

We may update this notice as the service changes; the date above identifies the latest version.