Privacy Policy
Last updated: May 2026 • Version 1.0
Who we are
ShuttleCode is a small, private badminton match tracker built for friend groups. It is not a commercial product and does not serve advertisements. Your data is used solely to make the app work for you and your group.
What we collect
When you sign in with Google we receive your email address, display name, and profile picture URL from Google. We also store a unique identifier (your Google ID) so we can recognise you on future visits.
During onboarding you optionally provide a nickname and gender. These are stored to personalise fixture generation and scoreboards.
We record match results, fixtures you participated in, votes you cast, and awards you received. This data is tied to your account and used to generate statistics.
We store a session token in an encrypted cookie on your device so you stay logged in. Sessions expire automatically after 7 days of inactivity. Signing out immediately invalidates your session.
What we do NOT collect
- ✕ Passwords (we use Google Sign-In only)
- ✕ Payment information
- ✕ Location data
- ✕ Browser history or tracking cookies
- ✕ Any data from your device beyond this app
How & where it is stored
All data is stored in Cloudflare KV, a globally distributed key-value store operated by Cloudflare, Inc. Data may be cached at Cloudflare edge nodes worldwide to reduce latency, but the primary namespace is configured in the Asia-Pacific region. Cloudflare is compliant with GDPR and SOC 2 Type II.
We do not sell, share, or transfer your data to any third party other than Cloudflare (our infrastructure provider) and Google (for sign-in verification only).
How long we keep it
Your account data is retained as long as you use the app. Session tokens are deleted automatically after 7 days. If you request deletion (see below), all data associated with your account will be permanently removed within 72 hours.
Your rights
- ✓ Access — request a copy of all data we hold about you
- ✓ Correction — update your name, nickname, or gender at any time from your profile
- ✓ Deletion — request complete removal of your account and all associated data
- ✓ Portability — request your data in a machine-readable format
Contact
To exercise any of the above rights, or if you have questions about this policy, contact the app administrator directly within your friend group. This is a private, non-commercial app and does not have a formal data protection officer.
Changes to this policy
We may update this policy as the app evolves. The version date at the top of this page reflects when it was last revised. Continued use of the app after a policy update constitutes acceptance of the revised policy.