Privacy policy

When you enter an event

• Your public name, as it should appear on the draw.
• Your birth year and a self-declared rating from 1.0 to 6.0, so staff can check age and rating limits. Ratings also help seed the draw.
• Your division and, for doubles, your partner: either a player already entered in the event, or a new partner's name and, if you add it, their email address so we can invite them. You can also give your pair a team name.
• A payment reference, if you add one, so staff can match your payment to your entry. Entry fees are paid to the organizer outside TourMan, so we never collect card or bank details.

Organizers can also enter players themselves, for example at the registration desk, using a name and email address.

If someone enters you as their partner

They give us your name and, usually, your email address. You get a link to accept, which shows their name, the event and the division: we email it to you when email is set up, and the player who entered can also send it to you themselves. If you sign in with that address, the invitation also appears in My matches.

Your account

• Your email address. It's how you sign in (with Google, or with a one-time link we email you when email is set up) and where any messages about your entries go.
• Sign-in records: when your account was created and last signed in, and your active sign-in sessions.
• Your reminder setting: whether you want an email when your match is called.
• Court calls on your phone, if you turn them on: for each device, the push address its browser's push service (Google, Mozilla, Apple or Microsoft) gives it, two encryption keys, a shortened description of the browser, and when notifications to it last arrived or failed. Each device is linked to your account and to your sign-in on it.

On tournament day

• Check-in: when you arrived, and which staff member checked you in, or that you checked yourself in at the venue TV.
• Your check-in pass: an eight-character code, shown as a QR code, that we create the first time you open My matches. It tells the desk who you are; on its own it signs no one in and changes nothing. The pass scanner uses a staff device's camera only to read the code on that device, and sends no images to TourMan.
• Matches: schedules, court calls, live scores, timeouts, results and standings.
• Your answer to a result: if you confirm one of your results or report a problem with it, your answer, any message you write (up to 300 characters) and when you sent it. If an organizer reviews your report, we keep their note and who reviewed it.

Staff accounts

For staff invited by a club: name, email address, role, a password stored only as a salted hash, any passkeys (we keep only each passkey's public key), and sign-in times. Staff actions are recorded in an audit log.

Emails we send

When email is set up, we send: sign-in links you ask for; a confirmation when you enter a tournament; partner invitations, and a note when your partner accepts; updates when organizers confirm, waitlist, decline or withdraw your entry; staff invitations; and, if you turn them on, court-call reminders. We keep a copy of each email (the recipient, subject and content) for 30 days so we can retry delivery and confirm it was sent, and we remove single-use links from that copy as soon as the email is sent. We don't send marketing email.

Without email, we send none of these. Instead, the player who entered a doubles entry can share an invite link with their partner, for example in a chat app.

Technical information

• Like any website, TourMan's hosting provider receives your IP address and basic details of each request, such as the page asked for and your browser type, to deliver and protect the service. We keep operational logs to find and fix problems.
• To slow down abuse, we count recent sign-in attempts against a one-way hash of the email address (and, for staff, of the network address). Wrong check-in codes at the venue are counted the same way, against a one-way hash of your account, or of the network address before you sign in, and these counts are deleted within a day.

We don't ask for your device's location, contacts or photos.

What we access

From the information Google sends back, TourMan reads only:

• your Google account ID, a unique identifier for your Google account;
• your email address, and whether Google has verified it;
• whether the address belongs to a Google Workspace organization, which tells us whether Google can vouch for who holds the address today. We don't store this.

We also check the technical details that prove the sign-in is genuine, such as which app it was issued for and when it expires. We don't read or keep your name, profile photo or anything else from your Google profile. We never see your Google password, and TourMan doesn't access Gmail, Calendar, Drive, Contacts or any other Google service on your behalf.

How we use it

Only to:

• sign you in to TourMan;
• link your Google account to your TourMan player account, creating one if your email address is new to TourMan. If the address already has an account and Google can't vouch for it (it isn't a Gmail or Google Workspace address), we don't link them, so no one can take over an account through a reassigned address; when email is set up, you can sign in with an emailed link instead;
• contact you at that address about your account and registrations, such as sign-in links, partner invitations and the court-call reminders you turn on.

How we store it

TourMan's database, hosted by Cloudflare, keeps your Google account ID, the email address Google last reported, and when you first and last signed in with Google. We never store Google's sign-in tokens; they're discarded as soon as the sign-in is confirmed.

How we share it

• We don't sell Google user data, and we don't use it for advertising.
• We don't use it to develop, improve or train generalized AI or machine-learning models.
• We share it only as running TourMan requires: with our service provider Cloudflare (it stores it and delivers our emails to your address), with the staff of clubs whose events you enter (they see your email address with your entry), or when the law requires it.

TourMan's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Removing access

You can remove TourMan's access at any time in your Google Account: open Security, then Your connections to third-party apps & services, or go straight to myaccount.google.com/connections. Continue with Google will then ask for your permission again next time, and when email is set up you can sign in with an emailed link instead.

Removing access doesn't delete what TourMan already holds. To delete your TourMan account and its link to your Google account, email jerrosyap05@gmail.com.

Everyone

Event pages, draws, schedules, standings and results, the court board and venue TV screens, and the public live data behind them, show anyone:

• your public name, your partner's name and your team name;
• your division, match times and courts;
• live scores, timeouts, results and standings;
• the organizer's announcements.

Public pages can be shared, saved for offline use and found by search engines, and they stay up as the event's history after it ends. Choose a public name you're comfortable seeing on a screen at the venue.

Other players

When you enter an event, you can pick a partner from the players already entered, so signed-in players entering the same event can see those players' names, never their email addresses. Your partner sees your name on your shared entry.

Event staff

Each club invites its own staff: organizers, registration desk, court marshals and scorekeepers. Signed-in staff of the club hosting an event can see its registration details, such as your email address, entry and payment status, check-in time and matches, and may use them only to run the club's events. Registration staff and organizers can also download entrant, schedule and results lists. Staff access is by invitation, limited to the club's own events, and each role limits what a person can change.

Your birth year, rating and payment reference stay with your registration for staff checks and seeding. They never appear on public pages.

If you report a problem with a result, the club's owners and organizers see your name, the result and your message, so they can check it. Reports and messages never appear on public pages, the court board or the venue TV, and other players don't see them.

TourMan's operators

The people who operate TourMan can access all of its data when they need to run, support or secure the service.

No one else, unless the law requires it

We don't sell personal data or share it with advertisers. We disclose information to others only if the law requires it, or where needed to protect people's safety or the security of TourMan.