Privacy Policy

RickRunGood LLC, trading as RunGood Tennis, decides how and why your personal data is used. In data-protection language, we are the “controller”. Our contact details are at the bottom of this page.

What you give us when you sign up. Your email address, a username, your first and last name, and a password. Passwords are stored only as a cryptographic hash — we cannot read yours, and nobody here can tell you what it is.

Payment information. Handled entirely by Stripe.

What you do on the site. The players and matches you star, and any custom model settings you save. Some of this is also kept in your own browser’s storage so it loads quickly.

Technical and usage data. Which pages are visited and in what order, along with the usual information a browser sends — IP address, browser type, device type, approximate location derived from the IP address, and referring page.

• To run your account and let you sign in.
• To take payment, manage your membership, and send receipts — this is Stripe acting on our behalf.
• To send account emails such as password resets, billing problems and important service notices.
• To show you your starred players and saved settings.
• To understand which parts of the site get used, so we know what to improve and what to drop.
• To keep the service secure and investigate abuse or fraud.
• To meet our legal and tax obligations.

We do not sell your personal data, and we do not share it with advertisers.

• Performance of a contract — running your account and providing the membership you paid for.
• Legitimate interests — keeping the service secure, understanding how it's used, and improving it. We've considered your interests and don't think this analytics use overrides them, since it isn't used to target you individually.
• Legal obligation — keeping payment and tax records for the periods the law requires.
• Consent — where we ask for it specifically, such as any future marketing email. You can withdraw consent at any time.

We use a small number of established companies to run the service. They only get what they need for their part, and are not permitted to use it for their own purposes.

We may also disclose data if the law requires it, or to establish or defend legal claims. If the business is ever sold or merged, account data would transfer with it, and we’d tell you beforehand.

Essential cookies. Used to keep you signed in. Without them the site cannot tell who you are, so they can’t be switched off while you’re logged in.

Analytics. We use PostHog and Vercel Analytics to count page views and see which features are used. PostHog builds a profile only for signed-in members, not anonymous visitors.

Local storage. Your starred players and match favorites are also saved in your own browser so they appear instantly. Clearing your browser data removes them from the device.

We don’t use advertising or cross-site tracking cookies. You can block or delete cookies in your browser settings, though signing in won’t work without the essential ones.

• Account details — for as long as your account exists, and up to 90 days afterwards in backups.
• Payment and invoice records — up to seven years, because tax law requires it. This is the one category we can't delete on request.
• Analytics — up to 24 months.
• Support emails — up to two years after the conversation ends.

Our systems and all of the companies listed above operate in the United States, so your data is stored and processed there. If you’re in the UK or the European Economic Area, that’s a transfer outside your region; it’s covered by the Standard Contractual Clauses or an equivalent safeguard in our agreements with those providers.

Traffic to the site is encrypted in transit. Passwords are hashed. Card details are held by Stripe, which is certified to the payment industry’s PCI DSS standard, rather than by us. Access to member data is limited to those who need it to operate the service.

No system is perfectly secure, and we can’t guarantee absolute safety. If a breach ever affects your data, we’ll notify you and the relevant regulator as the law requires.

You can ask us to:

• Give you a copy of the personal data we hold about you.
• Correct anything that's wrong.
• Delete your account and personal data, subject to the payment records we're legally required to keep.
• Export your data in a portable format.
• Stop or limit how we use it, including objecting to analytics.

Email rick@rickrungood.com and we’ll respond within 30 days. We won’t charge you, and we won’t treat you differently for asking.

California: we do not sell or share personal information as those terms are defined by the CCPA, and we have not done so in the past twelve months. You have the rights listed above, and may use an authorised agent.

UK and EU: you also have the right to complain to your data protection authority — the ICO in the UK — though we’d be glad of the chance to put things right first.

RunGood Tennis isn’t intended for children, and we don’t knowingly collect data from anyone under 16. If you believe a child has created an account, contact us and we’ll remove it.

If we change how we use your data, we’ll update this page and the date at the top. Where the change is significant, we’ll email you rather than rely on you noticing.

For anything about your data, including requests to see or delete it, write to us here.