Legal

Privacy Policy

Last updated: April 5, 2026

Spur Tennis Club (“STC,” “we,” “our,” or “us”) operates the website at spurtennis.club. This privacy policy explains what personal data we collect, why we collect it, how we use it, and what rights you have with respect to your data.

We are a small, for-profit business based in Gatesville, Texas. We serve tennis players in Gatesville and the broader Central Texas area, including adults and junior players.

1. What Personal Data We Collect

Account and Profile Data

  • Email address (required to create an account)
  • Display name and full name
  • City and playing level
  • UTR rating (optional, if you choose to provide it)
  • Preferred contact method

Waiver Data

  • Full name, email address, phone number (optional), and date of birth
  • Guardian name and email for participants under 18
  • Typed electronic signature
  • Submission timestamp and confirmation ID

Hit Board Data

  • Player name, city, and playing level
  • UTR rating (optional)
  • Availability text and optional notes
  • Contact methods you provide (email, phone, Instagram handle, etc.)

Flex League Data

  • Full name, city, playing level, and UTR (optional)
  • Preferred contact method and contact value
  • Optional notes for other players
  • Match results and standings

UTR Connection Data

  • UTR OAuth access tokens (stored only while your account is connected)
  • UTR player ID and rating data retrieved from UTR

Technical and Usage Data

  • Authentication session data managed by Supabase
  • Shopping cart ID stored in your browser’s local storage (Shopify)

2. Why We Collect This Data and the Basis for Collection

We collect and use your personal data for the following purposes:

  • Account management: To create and manage your STC account, authenticate your sessions, and provide access to member features.
  • Event participation: To process waivers required for tournament and event participation, and to maintain records of signed waivers.
  • Community tools: To display your Hit Board posts to other players looking for hitting partners, and to manage Flex League rosters and standings.
  • UTR integration: To retrieve and display your UTR rating when you voluntarily connect your UTR account to STC.
  • Pro shop: To process shopping cart sessions through our Shopify-powered pro shop.

3. What Is Public vs. Member-Only vs. Admin-Only

Publicly visible (no login required)

  • Hit Board post details: player name, city, level, UTR, availability, and notes

Visible only to logged-in STC members

  • Hit Board contact information (email, phone, social handles)
  • Flex League roster: player names, cities, levels, UTR, and contact methods

Visible only to STC administrators

  • Waiver submissions (full name, email, phone, birthdate, guardian info)
  • Full account and profile details
  • UTR connection status and raw rating data

4. Who Receives Your Data (Third-Party Processors)

We use the following third-party services that may process your personal data:

  • Supabase— Database and authentication provider. Stores your account, profile, waiver, Hit Board, and league data. Supabase processes data on our behalf as a data processor. Supabase Privacy Policy
  • Shopify— Powers our pro shop. Shopify processes shopping cart sessions and any purchase-related data. Shopify Privacy Policy
  • UTR Sports— If you choose to connect your UTR account, UTR provides your player ID and rating to STC through their OAuth API. We only receive data you authorize through the UTR connection flow. UTR Privacy Policy
  • Vercel— Hosts and serves the STC website. Vercel may process request metadata such as IP addresses as part of normal web hosting. Vercel Privacy Policy

5. Cookies and Browser Storage

STC uses the following cookies and browser storage. We do not use advertising cookies or behavioral tracking cookies.

Essential cookies (required for the site to function)

  • Supabase auth/session cookie: Maintains your login session. Set when you sign in and cleared when you sign out. This is required for any logged-in functionality.
  • UTR OAuth state cookie: A short-lived cookie used during the UTR account connection flow to prevent cross-site request forgery. Cleared after the connection completes or fails.

Functional browser storage

  • Shopify cart ID (localStorage):Stores your pro shop cart session ID in your browser’s local storage. This keeps your cart persistent across page loads. It contains only a Shopify-issued cart identifier, not personal information.

We do not use Google Analytics, Meta Pixel, or any other third-party analytics or advertising scripts.

6. Data Retention

  • Account and profile data: Retained while your account is active. If you request account deletion, your data will be removed from our systems, except where retention is required for legal or operational reasons (such as waiver records).
  • Hit Board posts: Posts automatically expire after 30 days of activity. Expired posts are removed from the public board. We may retain a brief post-expiry record for moderation purposes before hard-deletion.
  • Flex League data: Registration and match records are retained for the duration of the season and may be retained for historical standings purposes.
  • Waiver submissions: Retained for as long as operationally and legally necessary to document participant consent and for event record-keeping.
  • UTR tokens: Access tokens are deleted when you disconnect your UTR account. Raw UTR rating data is retained only as long as your UTR connection is active.

7. Minors and Children Under 13

STC serves junior players, including players under 18. However, we do not knowingly allow children under 13 to create online accounts or independently submit community forms such as the Hit Board or Flex League signup.

For players under 13, all online participation, account creation, and form submissions must be completed by a parent or legal guardian on the child’s behalf.

For players under 18, the waiver form requires a parent or guardian to complete and sign the waiver on behalf of the minor.

If you believe we have inadvertently collected personal information from a child under 13 without guardian authorization, please contact us immediately at privacy@spurtennis.club and we will delete that information.

8. Your Privacy Rights

Regardless of your location, you may contact us to:

  • Access the personal data we hold about you
  • Correct inaccurate personal data
  • Delete your personal data (subject to retention requirements)
  • Export a copy of your personal data

You may also manage some of your data directly from your account profile page, including editing your profile information and disconnecting your UTR account.

To submit a privacy request, email privacy@spurtennis.club with the subject line “Privacy Request.” Please include your name and the email address associated with your STC account so we can verify your identity before taking any action. We will respond within 30 days.

You may also request account deletion or a data export from your account page.

9. Law and Geography

STC is a small business based in Texas, primarily serving players in Central Texas. We are not subject to the California Consumer Privacy Act (CCPA/CPRA) or the Texas Data Privacy and Security Act (TDPSA) at our current size, but we review our applicability annually as the business grows.

If GDPR or UK GDPR applies to you because you are in the European Union or United Kingdom, you have additional rights under those laws, including the right to lodge a complaint with your local data protection authority. We will honor those rights to the extent required.

10. Changes to This Policy

We may update this privacy policy from time to time. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be communicated to registered users by email or a notice on the site.

11. Contact

For privacy-related questions or requests, contact us at: