Padelly Privacy Policy — Local-First Padel App

Controller

The controller under the General Data Protection Regulation (GDPR) is Caine Eschberger, sole proprietor operating as Padelly, Theklaer Straße 51A, 04347 Leipzig, Germany. Email: .

The short version

Core scoring works locally and does not depend on a Padelly server. Padelly does not sell personal data and does not use advertising, analytics, or tracking. Limited personal data is processed when the website is delivered through Cloudflare or when you contact support.

Match data and player names

Player names, completed match history, scores, settings, and player statistics are stored locally on your iPhone. An active Apple Watch match keeps its live state locally on the Watch so scoring can continue if the phone is unreachable. The developer cannot see or access this information.

Optional iCloud backup

If private iCloud backup is available and you enable it, completed matches, player records, backup-safe settings, and your selected app icon may be stored through your own Apple iCloud account. Active matches, Watch live sessions, and raw Health data are excluded. Padelly has no custom backup server, and the current backup is designed for one iPhone; using multiple iPhones may cause duplicates or conflicts.

Apple Health and Fitness

Fitness tracking is optional. With your permission, Padelly can start and save a workout through Apple Health and show available metrics such as heart rate and active energy. Padelly does not store raw Health samples or full heart-rate streams. A small workout summary, such as duration, calories, average heart rate, status, and a workout reference, may be saved locally with the match. No Health information is uploaded to a Padelly server.

Website hosting

This website is delivered through Cloudflare Pages. When you visit, Cloudflare may process technical connection data such as your IP address, requested URL, date and time, referrer, browser and device information, HTTP status, and security or routing data. Processing is necessary to deliver and protect the website and is based on Article 6(1)(f) GDPR. Our legitimate interests are secure, reliable, and efficient website delivery. Cloudflare retains data according to its applicable retention rules. Processing outside the European Economic Area may occur under Cloudflare’s data processing addendum, Standard Contractual Clauses, and other applicable safeguards. See Cloudflare’s Privacy Policy and Data Processing Addendum.

Website preferences

This website stores only your selected appearance and color preset in your browser’s local storage. These values remain on your device and are not sent to Padelly. Storage occurs only after you request the preference and is necessary to keep that setting available, so no consent banner is required under section 25(2)(2) TDDDG. Padelly uses no analytics, advertising, or tracking cookies.

No third-party tracking

Padelly does not include advertising networks, analytics services, tracking pixels, location access, contacts access, or similar tools. We do not build a profile about you or monitor how you use the app or website.

Spam protection with Turnstile

The support form uses Cloudflare Turnstile to distinguish legitimate requests from automated abuse. Cloudflare processes technical connection and security data, including your IP address, browser information, the page, and interaction signals. The legal basis is Article 6(1)(f) GDPR. Our legitimate interest is protecting the form and email service from spam and misuse. Turnstile does not use advertising cookies. Cloudflare may process data outside the EEA using the safeguards described above.

Contacting support

When you use the support form, we process your optional name, reply email address, selected topic, message, technical delivery metadata, and the Turnstile verification result. A Cloudflare Pages Function validates the request, and Cloudflare Email Service sends it to our verified personal Gmail destination provided by Google Ireland Limited. The form accepts no attachments, sends no automatic confirmation, and stores no submission in a Padelly database. The legal basis is Article 6(1)(b) GDPR when your request concerns a contract or pre-contractual steps, and otherwise Article 6(1)(f) GDPR for our legitimate interest in providing support and communicating with users. Messages are deleted when the request is resolved unless legal retention duties or the establishment, exercise, or defence of legal claims require longer storage. Cloudflare and Google may process data outside the EEA using applicable transfer safeguards. See Google’s Privacy Policy. Direct emails sent to the legal address shown on this page are routed through Cloudflare Email Routing to the same Gmail destination and are processed on the same legal bases.

Recipients

Personal data is shared only where necessary with Cloudflare for website delivery, form security, form processing, Email Service, and email routing, Google for email delivery and storage, Apple when you choose Apple services under your Apple account, professional advisers where required, and public authorities where disclosure is legally required.

Your rights

Subject to the legal requirements, you may request access, correction, deletion, restriction, or portability of your personal data. You may object at any time to processing based on Article 6(1)(f) GDPR for reasons arising from your particular situation. Padelly does not use automated decision-making or profiling. You may also complain to a data protection authority, including the Saxon Data Protection and Transparency Commissioner.

Children’s privacy

Padelly is not designed to collect personal data from children. App data remains local as described above. Website connection data and support messages are handled in the same limited way for all visitors.

Changes to this policy

If Padelly’s privacy practices change, this page will be updated before the change takes effect. The date above shows the latest substantive revision.

Questions

For privacy questions, contact or visit Padelly Support.