Privacy Policy

1. Data Controller

Courtlux, operated from Luxembourg, is the data controller. Contact: hello@courtlux.com.

2. Data We Collect

• Account data: name, email, avatar, phone (optional), city
• Activity data: matches created/joined, chat messages, results
• Technical data: browser type, IP address (for security)

3. Legal Basis (GDPR Art. 6)

• Contract performance: providing the platform service
• Consent: optional features like WhatsApp notifications
• Legitimate interest: fraud prevention, service improvement

4. Data Storage

Your data is stored securely on Supabase infrastructure (AWS eu-central-1, Frankfurt). Authentication data is managed by Supabase Auth with industry-standard encryption.

5. Data Sharing

We do not sell your data. Your profile information (name, avatar) is visible to other authenticated users. We share data only with: Supabase (infrastructure provider), and as required by Luxembourg law.

With your cookie consent, we also share limited measurement data (pages visited, sign-ups, browser identifiers) with Meta Platforms Ireland Ltd. to measure and improve our advertising. See section 8.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access your personal data
• Rectify inaccurate data
• Request deletion ("right to be forgotten")
• Data portability
• Object to processing
• Lodge a complaint with the CNPD (Luxembourg data protection authority)

7. Data Retention

We retain your data while your account is active. Match chat messages are disabled 7 days after the match ends but remain stored. Upon account deletion, your personal data is removed within 30 days.

8. Cookies & Advertising

We use essential cookies for authentication (session tokens). With your consent, we also load the Meta Pixel (Meta Platforms Ireland Ltd., recipient: Meta's advertising systems) to measure visits and sign-ups from our ads and to improve them. This advertising measurement only runs if you accept in the cookie banner.

You can accept, reject or withdraw your choice at any time: