Privacy Policy

Last updated: 30 July 2026

This policy explains what personal data Courti collects, why, and what your choices are. “Courti”, “we” and “us” mean the operator of the Courti service, reachable through the contact form on this site.

Who is responsible for what

Courti and your organiser — the person who arranges a game — are each responsible for a different part of what happens here, and for one part they are responsible together.

• Courti is responsible for who you are to us and how we reach you: your mobile number as your identity, your agreement to be messaged and any withdrawal of it, the content and delivery status of messages, and how long all of that is kept.
• Your organiser is responsible for what they record about you on their own roster — the name they give you, your playing level, priority and any notes — and for deciding to run a game and invite particular people.
• Both are responsible together for adding you to a roster and messaging you about a game.

In the language of data-protection law that makes Courti and the organiser joint controllers for the shared part, and each a controller for their own part. Courti is not the organiser’s processor: consent given through one organiser’s link works across every organiser on Courti, and that is a decision we make on our own account rather than on anyone’s instructions. Courti handles consent, withdrawal, deletion requests and any question a player or a regulator raises about them, so there is one place to ask.

What we collect

• Enquiries. The name, email address and message you submit through the contact form on this site.
• Organiser accounts. Email address, display name, mobile number, playing level and time zone.
• Player roster entries. The name, mobile number, playing level and any notes an organiser records about a player. Each organiser’s roster is separate and private to them.
• Consent records. That you agreed to be messaged, when, through which organiser’s link, the name you gave for yourself, and whether you later withdrew.
• Signup submissions. What you enter on an organiser’s join link while it waits for them to approve it — your name, mobile number and, if you gave one, your playing level.
• Messages. The content and delivery status of messages exchanged between Courti and a participant, so that invitations, replies and confirmations can be matched to the right game.
• Game records. Times, venues, spot allocations and waitlists.
• Server logs. Standard web-server records including IP address, timestamp and requested URL, kept for security and diagnostics.

A mobile number is how Courti recognises a participant, so it is required to take part. We do not run advertising, we do not sell personal data, and this website sets no cookies and runs no analytics or tracking scripts.

Why we use it

• To send invitations, understand replies and allocate spots in a game.
• To tell an organiser who is confirmed, waitlisted or has dropped out.
• To operate, secure and debug the service.
• To reply to an enquiry you send us.

Where the GDPR applies, we rely on your consent for messaging you about games, on performance of a contract for running the service for organisers, and on legitimate interests for security, diagnostics and answering enquiries. Withdrawing your consent stops the messages and does not affect anything we did before you withdrew.

Consent and your choices

You give consent once, and it covers Courti as a whole rather than a single organiser. Any organiser you play with can then invite you, without you having to agree again for each of them.

You can opt out at any time by replying STOP to any message from Courti, or simply by telling us in your own words that you don’t want to hear from us. That takes effect immediately and across every organiser — no one can override it — and we tell the organisers whose rosters you are on so they stop expecting you.

Opting out is meant to stay that way, so coming back takes two steps and neither one is enough on its own: an organiser has to add you back, and then you have to agree again through their link. Nobody can put you back on their own, including us.

Courti does not send a message to anyone whose consent we have not recorded. There is one exception, and it is temporary: players who were already on an organiser’s roster before consent links existed were carried over on that organiser’s confirmation that they had agreed. We are asking those players directly as they play, and the exception ends when the last of them has answered for themselves.

Who we share it with

We use a small number of service providers, and no one else:

• WhatsApp / Meta Platforms — delivers messages between Courti and participants.
• FormSubmit — forwards contact form submissions from this site to our mailbox.
• Our hosting provider — runs the servers and stores the database.

Within the service, an organiser can see their own roster and their own games. Confirmed participants’ names and numbers are shared with the organiser of that game so the game can go ahead. We may also disclose data where the law requires it.

Your name and mobile number are visible to any organiser whose roster you are on. Whether you have agreed to be messaged is shared across organisers, because that agreement is given to Courti as a whole. Which other organisers you play with is never shared.

International transfers

Our providers may process data outside your country, including in the United States. Where required, transfers rely on the European Commission’s standard contractual clauses or an equivalent safeguard.

Courti currently accepts players with mobile numbers from a limited set of countries and is not offered in the EU or the UK.

How long we keep it

• Contact form enquiries: up to 24 months after our last exchange.
• Account, roster, game and message records: for as long as the account is active, and deleted or anonymised on request.
• Server logs: up to 90 days.

If an organiser adds you but you never agree to be messaged and never play, we delete your record after 30 days.

Removing a player or an organiser is a status change, not an erasure — past games keep their history so records stay accurate. A deletion request overrides this: we erase your name, mobile number and the content of your messages, and keep only the bare structural record that a game happened and how many people were in it, so past games still add up without holding anything that identifies you.

Security

Traffic to this site and to the Courti portal is encrypted with HTTPS. Accounts are password-protected, access to the production database is restricted to the operator, and each organiser’s data is separated from every other organiser’s. No service can promise perfect security, and Courti is beta software.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export or restrict the use of your personal data, and to object to processing. To exercise any of these, or to stop receiving messages altogether, use the contact form. Courti handles these requests itself — you do not need to go through the organiser who added you, and no organiser can override your decision. You also have the right to complain to your local data protection authority.

When you ask us to delete your data we anonymise it as described under how long we keep it: your name, number and message content are erased, and your number is freed so it can never be matched to an incoming message again.

You can stop Courti messaging you at any time by replying STOP in the chat, or by saying so in your own words. That works across every organiser at once and needs no one else’s cooperation.

Children

Courti is not intended for people under 16. If you believe a child’s data has reached us, contact us and we will delete it.

Changes

We will update this page when the service changes and revise the date above. Material changes will be announced to organisers by email.

Contact

Privacy questions and requests go through the contact form on our home page.