只收集办好赛事所需的信息。

Registration collects team and division data, player names, emails, gender, captain phone, optional WeChat, DUPR ID/profile, entered and effective ratings, attestations, and timestamps. Teammate Finder may collect a display name, private legal name, optional phone/WeChat, preferences, introduction, and contact method. The assistant may retain questions, responses, and limited technical logs.

We do not collect dates of birth, identification, separate guardian consent, team logos, card numbers, payment tokens, or future-event marketing consent.

Data is used to validate eligibility, process registration and payment, send event notices, manage rosters and waitlists, facilitate matching, prevent fraud, audit DUPR information, provide support, and meet refund and legal obligations. Participants are not automatically added to marketing lists, and personal data is not sold.

After validated payment, team name, division, four player names, and displayed ratings become public. An unrated player shows “3.000 Event Eligibility Value.” DUPR IDs, email, phone, WeChat, payment data, and admin notes are never public. Waitlisted team names remain private. Finder cards show only approved tournament details; approved contact is revealed only after mutual acceptance.

Limited data may be processed by Supabase, Stripe, PayPal, Google, Gmail, OpenAI, and Vercel to provide requested functions. The application database is the transactional source of truth; Google Sheets is a one-way administrative mirror.

Operational team/player contact data in the application is retained through November 30, 2026, then anonymized. Private Finder contact data and assistant logs are deleted that day. Necessary non-contact event, division, aggregate, and payment-reference records may be retained for accounting, disputes, and audit. The Google Sheet remains complete until manually edited or deleted by the Super Admin and is not automatically anonymized.

Controls include passwordless sign-in, server authorization, row-level security, encrypted transport, rate limiting, bot protection, signed webhooks, audit logs, and least-privilege OAuth. No system can guarantee absolute security. Participants may request access, correction, or deletion where consistent with event, accounting, and legal obligations. Captains may edit rosters before the deadline.

For privacy questions, contact cuaaasc.pickleball@gmail.com. Material changes will update the effective date and, when appropriate, be emailed to captains.