Privacy Policy

Last updated: September 25, 2026

Driftwood Pickleball ("we", "our", "us") provides tournament registration and event management services. This page explains what data we collect, how we use it, and your choices.

Information We Collect

• Account data from your sign-in provider (such as email and user ID).
• Profile data you provide (display name and linked DUPR information, if connected).
• Tournament data (registrations, teams, scores, and event participation history).
• Basic technical logs needed for security and service operation.

How We Use Information

• Operate and improve tournament registration and scoring features.
• Display tournament participation and results to users.
• Prevent misuse and maintain platform security.
• Respond to support and account requests.

Google Calendar Data (Optional)

If you sign in with Google and enable Google Calendar sync, we request Google Calendar write access (https://www.googleapis.com/auth/calendar.events) so we can create and manage event entries for tournaments you register for.

• When enabled, we create or update a Google Calendar event for your registered tournament.
• If you unregister (or are removed), we attempt to delete the corresponding Google Calendar event.
• We store only the minimum mapping needed to manage sync (your user ID, tournament ID, and Google event ID).
• We do not sell Google data, and we do not use Google Calendar data for advertising.

Google API Services User Data Disclosure

Driftwood Pickleball's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to provide user-requested calendar sync features in the Driftwood app. The configured master admin may use Gmail Send access for HTML event notifications, and event owners may use their connected Gmail account for participant notifications on their own upcoming events. When an owner has no usable Gmail sender, Driftwood uses the configured info@driftwoodpickleball.com alias. The same authorized master-admin account sends transactional waitlist-promotion messages to players who are automatically registered for an event.

• We do not use Google Calendar data for advertising or marketing profiling.
• We do not sell Google Calendar data.
• We do not use Google Calendar data to train generalized AI/ML models.
• Google authentication and consent are handled by Google OAuth via Clerk; Driftwood never receives your Google password.

Data Protection Mechanisms for Google User Data

We use the following safeguards to protect information received through Google APIs:

• Encrypted transport: requests between Driftwood, Google APIs, and visitors use HTTPS/TLS.
• Access controls: Google API access is available only after the applicable Google consent flow. Gmail Send access is limited to the configured master admin for bulk and transactional messages, or to an event owner sending a participant notification for that owner's upcoming event.
• Least privilege: the app requests https://www.googleapis.com/auth/gmail.send for bulk email delivery and https://www.googleapis.com/auth/calendar.events for optional calendar synchronization. It does not request Gmail read, search, or draft-management permissions.
• Data minimization: the app does not store Gmail message bodies, Gmail message identifiers, Google access tokens, or Google refresh tokens. For Calendar sync, it stores only the Driftwood user ID, tournament ID, Google event ID, and sync timestamps needed to maintain the requested event mapping.
• Limited disclosure: Gmail Send is used only to deliver event notifications and transactional waitlist-promotion messages. Team draft URLs are generated from the selected event recipients without requesting Gmail draft-management access. Google data is not sold, used for advertising, or used to train generalized AI/ML models.
• Revocation and deletion: users can revoke Driftwood's Google access from their Google account permissions, disable Calendar sync where available, delete their account in Profile settings, or use our public account and data-deletion resource.

Gmail Notification Delivery

The notification tool can request Gmail Send access (https://www.googleapis.com/auth/gmail.send) to send an HTML event notification directly from the authorized Gmail account. Event owners can send participant notifications for their own upcoming events from their connected Gmail address; if that sender is unavailable, Driftwood uses the configured info@driftwoodpickleball.com alias. Master-admin team drafts use a plaintext draft URL with the selected recipients in Bcc and leave the message unsent for review. Driftwood also uses the configured master-admin Gmail account to send a transactional message when a team is automatically moved from an event waitlist into registration. Those messages are sent to valid email addresses on the relevant team and do not depend on the team's optional bulk email-notification setting.

• Bulk notification access is available to the configured master admin; participant notification access is scoped to the event owner and that owner's upcoming event.
• We do not read, search, or modify existing Gmail messages.
• We do not store Gmail message content, access tokens, or refresh tokens in Driftwood.
• You can revoke Google access at any time from your Google account permissions; future Gmail notifications require authorization again.

Google Calendar Controls and Deletion

• You can turn Google Calendar sync on or off at any time from your profile.
• You can revoke Driftwood access in your Google account permissions at any time.
• You can delete your account in Profile settings or request deletion of account data (including stored calendar sync mappings) through our public deletion resource.

Storage and Retention for Google Calendar Data

• We keep only the event mapping data needed to maintain sync (user ID, tournament ID, Google event ID, and sync timestamps).
• Calendar mapping data is removed when practical if you unregister, disable sync, revoke Google access, or request account deletion.
• Operational logs may temporarily contain technical error details needed to support reliability and security.

DUPR Partner Requests

If you mark your team as needing a partner, your email address may be shown as a contact link on the tournament registration list and is publicly accessible to site visitors.

Sharing

We do not sell personal information. We share data only with service providers needed to run the platform (for example authentication, hosting, and database infrastructure).

Data Retention

When an account is deleted, we remove the identity, profile, credentials, delegated access, preferences, and local account-linked data. We retain the minimum tournament, prize, audit, and DUPR submission records needed to preserve other players’ records, financial/accounting integrity, security investigations, and external integration integrity. Event results retain a shortened player label using the first name and last initial. The retained local user key is not used to authenticate a deleted account.

Your Rights

You may request access, correction, or deletion of your personal data by contacting us at info@driftwoodpickleball.com. You may also use our deletion guidance at /data-deletion.

License and Intellectual Property

Unless otherwise noted, Driftwood Pickleball source code, site design, and content are proprietary and licensed under /LICENSE. Third-party names, logos, and marks remain the property of their respective owners.

Contact

Questions about this policy: info@driftwoodpickleball.com

Policy Updates

We may update this Privacy Policy when our practices change. We will update the "Last updated" date on this page and apply the updated policy going forward.

Support

For account help or match disputes, visit /support.