What RallyTO collects
We collect account information provided through Supabase authentication, including your email address and authentication provider. Your public playing profile may include your display name, optional profile picture, city, play areas, level, rating, availability, interests, and playing notes.
When you host an activity, we collect its schedule, venue, cost, capacity, and description. Exact addresses and private access instructions are treated as restricted activity information.
We also collect invitations, join requests, replies, feedback, tournament submissions, blocks, and safety reports that you choose to submit.
How information is used
We use information to operate player discovery, activity hosting, matching, notifications, account recovery, moderation, and support. We may use aggregated information to understand and improve RallyTO.
What other users can see
Public visitors can see published player profiles, including an uploaded profile picture, general play areas, activity venue names, cities, schedules, levels, fees, and public activity descriptions. Email addresses are not displayed publicly.
Exact private addresses and access instructions are limited to the host and accepted activity guests. Invitation and request messages are limited to the participating users.
Service providers and links
RallyTO uses Supabase for authentication and database services and may use a hosting provider to deliver the website. External club, recreation, tournament, and social venue links are governed by their own privacy practices.
Retention and deletion
Profile and activity information is retained while your account is active or as needed to operate the service. You can pause your player listing or delete your account from your profile. Account deletion removes your account and associated personal activity data. Venue, tournament, or feedback submissions may remain in anonymized form when needed to preserve public information or support records.
Safety and security
We use access controls intended to restrict private activity details. No online service can guarantee absolute security. Do not place private addresses, passwords, financial information, or sensitive personal information in public profile fields.
Your choices
You can edit your profile, pause discovery, block players, submit reports, or delete your account. For privacy questions or correction requests, use the contact form.