Privacy Policy

This policy explains what information CourtPeep (“we,” “us”) collects when you use courtpeep.com, why we collect it, and who we share it with. It applies to players booking courts and to venue owners listing and managing venues.

CourtPeep is built on Supabase for authentication, database, and file storage. When we describe something CourtPeep does with your data, that processing generally happens through Supabase’s infrastructure on our behalf.

Account information. When you sign up, we collect your email address, full name, and a password (stored securely by Supabase Auth — we never see it in plain text). You also choose an account type: player or venue owner. Venue owner accounts can only be granted at signup or by claiming an unclaimed venue listing; the platform-admin role is never self-service and is granted manually.

Profile information. Optionally, your phone number and a profile photo you upload.

Venue information (venue owners). Venue name, contact email and phone, address, description, opening hours, currency, social links, and any photos you upload. Venue addresses are converted into map coordinates using OpenStreetMap’s Nominatim geocoding service — see “Third-party services” below.

Booking information. The court, date, time, number of players, and any notes you add when you reserve a slot.

Reviews. A star rating and optional written comment, which you can only leave for a venue after a completed booking there.

Messages. The content of messages you send to a venue owner (or, for admin-mode conversations, to CourtPeep staff) through the in-app messaging feature.

Local device storage. A small amount of non-tracking data saved in your browser: your sign-in session, whether you’ve dismissed the beta banner, and — if you click “claim this venue” — which venue you’re in the process of claiming while you finish signing up. None of this is used for advertising or cross-site tracking.

• To create and secure your account, and to sign you in
• To process and display your court bookings, and let venue owners manage the bookings made at their venues
• To show venue listings, pricing, and location to other players browsing CourtPeep
• To let players and venue owners message each other about a booking or a venue
• To display reviews on venue pages
• To send transactional emails — account confirmation, password reset — through Supabase Auth
• To respond to support requests and investigate abuse or policy violations

We don’t sell your information, and we don’t share it with advertisers. Within CourtPeep, information is visible as follows:

• Venue owners can see the name, email, and phone number of any player who books a court at their venue or messages them, so they can manage the reservation.
• Platform admins can see account and booking information across the platform, for support, moderation, and fraud/abuse investigation.
• Other players only ever see what you choose to make public — your review rating and comment text, and your display name where you post it. Your email, phone, and booking history are never shown to other players.

CourtPeep relies on a small number of external services to operate:

• Supabase — authentication, database, and file storage (venue photos, avatars). Supabase processes this data on our behalf under its own security and privacy commitments.
• OpenStreetMap Nominatim — when a venue address is entered, the address text is sent to Nominatim to look up map coordinates. No account information is included in that request.
• Map tiles (OpenStreetMap and CARTO) — loading a map in your browser fetches map tile images from these providers, the same way any map on the web works.
• Netlify — hosts the CourtPeep website itself.

CourtPeep doesn’t process payments. Bookings are settled directly with the venue, so we never collect or store card numbers or other payment details.

CourtPeep currently uses only strictly functional local storage — keeping you signed in and remembering a couple of UI preferences described above. We don’t run analytics, advertising, or cross-site tracking scripts today.

If that changes in the future — for example, if we add product analytics to understand how CourtPeep is used — we’ll update this policy first and, where the law requires it, ask for your consent before anything non-essential runs in your browser.

We keep your account and booking information for as long as your account is active, so your booking history and reviews remain available to you. If you’d like your account deleted, contact us using the details below and we’ll remove your personal information, except where we need to keep limited records (for example, completed bookings tied to a venue’s history) to meet legal or accounting obligations.

If you’re in the Philippines, you have rights under the Data Privacy Act of 2012 (RA 10173) to know what data we hold about you, request a copy of it, ask us to correct it, and ask us to delete it, subject to the retention exceptions above. If you’re located elsewhere with similar privacy laws (such as the EU/UK GDPR), we extend the same rights to you.

Most of this you can already do yourself from your account settings — updating your name, phone, or photo takes effect immediately. For anything else, reach out using the contact details below.

CourtPeep isn’t directed at children, and account holders must be capable of entering a booking agreement. We don’t knowingly collect information from children under 13. If you believe a child has created an account, contact us and we’ll remove it.

Your data is protected by Supabase’s infrastructure, including encrypted connections (HTTPS) and row-level database security policies that restrict who can read or write which records — for example, a player can only ever see their own bookings, and a venue owner can only see bookings made at their own venue.

If we make a material change to how we handle your information, we’ll update the date below and, for significant changes, let you know in the app.

Questions about this policy or your data? Email us at [email protected].