Privacy Policy
Last updated: 20 April 2026 · Plain English · UK GDPR-ready
The 30-second version
We collect first names and RSVPs only. No phone numbers, no email addresses, no payment details, no behavioural tracking. We never sell or share your data. Match links are public to anyone with the URL — that's the whole point.
Who we are
FullCourt is operated by The Verified Group Ltd, a company registered in England and Wales. We act as the data controller for the personal data described below.
Contact us any time: hello@getfullcourt.com
What we collect
- Match details you create: title, optional date, optional location, optional organiser first name.
- RSVPs: the first name typed in by each participant, plus "In", "Out" or "Maybe".
- Parental proxy: if a parent RSVPs for a child, the child's first name and the parent's first name only.
- Squad lists (optional): first names you save to reuse for future matches.
- Reports: the message you type when using "Report a concern" on a match page.
We do NOT collect:
- Phone numbers (we actively strip any phone-like input from name fields)
- Email addresses
- Postal addresses
- Payment information
- Date of birth (we ask only "under 13?" once, stored locally on your device)
- IP address logs for tracking purposes (standard server logs may retain IPs briefly for security only)
- Cookies for advertising or analytics
Lawful basis (UK GDPR Art. 6)
- Legitimate interests — running a free coordination tool. Personal data is minimal (first names) and the impact on your privacy is low.
- Consent — you actively choose to type a name and tap In/Out/Maybe. No name is required to view a match.
Children (under 13)
FullCourt is for users aged 13 and over. Children under 13 must have a parent or coach respond on their behalf — there's a built-in "I'm responding for my child" toggle. The child's first name appears alongside the parent's first name ("Jamie (via Mum)"). No phone numbers, photos, or other identifiers about a child are ever collected.
See our Safeguarding statement for clubs.
How long we keep it
- Match data + RSVPs: kept while the match is useful, deleted on request.
- Reports: retained for safety review, then deleted.
- Local device storage (your name on a match, your "owner" flag): stays in your browser until you clear it.
Where data is stored
Data is hosted on Lovable Cloud (powered by Supabase) inside the EU. Encrypted in transit (TLS) and at rest.
Your rights (UK GDPR)
You can ask us to:
- Access the data we hold about you
- Correct it
- Delete it (right to erasure)
- Restrict or object to processing
- Receive a copy in a portable format
Email hello@getfullcourt.com with "data request" in the subject line. We aim to respond within 30 days as required by UK GDPR.
You also have the right to complain to the UK's Information Commissioner's Office: ico.org.uk/make-a-complaint · 0303 123 1113.
Cookies & tracking
We do not use advertising cookies, analytics cookies, or third-party trackers. We use essential local browser storage only — to remember the name you typed on a match and whether you created it. You can clear this any time from your browser settings.
Changes to this policy
If we change this policy, we'll update the date at the top. Material changes will be highlighted on the home page.