Privacy Policy

Effective date: October 8, 2026 (updated for the PickleSlot iPhone app; previous version October 1, 2026)

PickleSlot helps people view pickleball events and find players with compatible availability. It is available at pickleslot.com and as an iPhone app (the “app”); this policy covers both. The service is operated by Jerrod Jordan. For privacy questions or requests, email support@pickleslot.com or support@pickleslot.com.

Information we use

When you sign in with Google, we receive identity information such as your account identifier, name, email address, and profile photo. When you sign in with GroupMe, we use your GroupMe account identifier, name, photo, and profile sharing link when available to verify your identity and set up your profile. When you sign in with email, we store your email address as your sign-in identity and send it a 6-digit code (and a one-tap link) through Resend. We keep only a protected hash of each code, which expires after 10 minutes, together with a hashed network address used to limit abuse. If your address already belongs to a verified Google sign-in or a confirmed notification email on PickleSlot, signing in with it opens that same account.

We also store information you choose to provide: your display name, profile link, skill level, optional gender, partner preference, a short bio, an optional uploaded photo, your contact methods, your privacy and notification settings, and weekly or date-specific playing availability. We keep account and session records needed to operate sign-in and protect the service.

In the iPhone app you can also sign in with Sign in with Apple. We receive Apple's stable identifier for you, and the name and email address Apple shares with us, which may be Apple's private relay address if you choose to hide your email. Apple sends your name only the first time you authorize, and it fills in a placeholder name once; it never replaces a name you chose. We do not link an Apple sign-in to another sign-in by matching email addresses or names. To let us revoke the connection when you delete your account, we also exchange Apple's one-time authorization code with Apple and keep the resulting Apple token, encrypted, until it is revoked. If you stop using Sign in with Apple for PickleSlot in your Apple ID settings, Apple tells us and we end the sessions that sign-in created.

PickleSlot has no passwords and does not ask for your Google, GroupMe or Apple password. Its current GroupMe integration verifies your identity and profile; it does not read your chats or send messages for you. Provider credentials are used during sign-in and are not included in your public profile.

The iPhone app

The app uses the same account, profile and data as the website. In addition:

Sign-in. Google, GroupMe and email sign-in open in a secure system browser sheet and return to the app at pickleslot://auth. The app keeps its sign-in credential in the iOS Keychain on your device. Signing out, or deleting your account, ends that session on our server.

Push notifications. They are optional and the app asks permission first. If you allow them, the app gets a push token from Expo (which receives your device's Apple push token to create it) and registers your device with us: the Expo push token, a random installation ID generated by the app, the app environment and platform (iOS). Notifications are delivered through Expo's push service and Apple's Push Notification service (APNs). By default a notification shows only a generic title, such as “New message” or “You have a game update”; if you turn message previews on, up to 80 characters of the message and the sender's name are included. The app badge shows your unread count. Signing out removes the device registration; so does deleting your account. You can turn push off in your profile notification settings or in iOS Settings.

Photos and camera. You choose a profile photo with the iOS photo picker, which gives the app only the photo you select and needs no photo-library permission prompt, or you can take one with the camera, which asks permission only when you tap “Take photo”. The photo is resized and re-encoded on your device and checked again on our server, which strips location and other metadata. The app does not ask for your location, contacts, microphone or tracking permission.

Stored on your device. The app keeps on your device: your sign-in credential (Keychain); unsaved profile and availability edits and unsent messages waiting to be delivered (so they survive a restart or lost connection); the installation ID above; and a copy of the public event calendar. This data stays on the device, is tied to your account, and is removed when you sign out or delete the app (a sign-in credential iOS keeps in the Keychain after you delete the app is erased, not reused, if you reinstall).

No tracking. The app has no advertising, no third-party analytics or crash-reporting SDK, and does not track you across other companies' apps or websites. Our hosting providers process ordinary technical request information, as described under service providers; we do not log message text, sign-in codes or tokens.

Deleting your account in the app. Open Profile and tap “Delete account” (also under Account & privacy, “Delete my account”), then type DELETE to confirm. Deletion works as described under “Your choices and requests”. If you used Sign in with Apple, we also ask Apple to revoke the connection with PickleSlot. If Apple cannot be reached, we retry in the background for up to 14 days, and the app tells you when cleanup may finish shortly after deletion.

What other people can see

New player profiles start private. When you publish your profile, anyone with its link can see your name, photo, skill level, bio, availability, and profile details, including people who are not signed in. Public information may be copied or indexed by others.

Your contact details (GroupMe link, WhatsApp, phone number, or email) are shown only to signed-in players. Visitors who are not signed in see which methods you offer, but not the details. Your Google or email sign-in address is never published as a contact. Only add contact information you want other players to have.

If you upload a photo, it is re-encoded on your device and checked again on our server so that location and other metadata are removed. It is stored privately and served to anyone who can see your profile. Players can report a photo, and the operator can remove it.

Messages, games and notifications

If you use in-app messaging, we store your conversations so you and the other player can read them. Messages are delivered through our backend and briefly through Supabase Realtime, which keeps delivery records for a few days. You can block or report a player (in the app, from the menu on their profile page); a report shares that player's recent messages in the conversation with the operator for review. Read receipts can be turned off in your profile.

On the website, push notifications are opt-in and use your browser's push service (the iPhone app uses the push service described above). If a message waits unread (about 3 minutes for a new conversation, 15 minutes otherwise), we may email you once per conversation until you read it, but only at an address you have verified: a notification email you confirmed by link, your Google sign-in email, the email you sign in with, or a verified email Apple shared with us (never Apple's private relay address). We never email your public contact address. Emails are sent through Resend as our processor, include a one-click unsubscribe link, and contain message previews only if you turn previews on.

Games. If you create a game, we store its date, time, format, skill range and whether to find more players, and we keep track of who is invited and who is in, declined or left. Players in or invited to a game can see its details and the names of the other players. If your game has open spots, PickleSlot may invite players whose published profile, skill level and availability fit (never players you blocked or who blocked you); if your profile is published, you may receive such invitations yourself, by email at a verified address, by push notification or in the app. You can turn off open-spot invitations in your notification settings. Game emails are sent through Resend; open-spot emails include a link that turns them off.

How we use information

We use information to create and maintain accounts, display the availability you publish, filter and compare playing times and skill levels, organize games and send game invitations, provide contact links, respond to requests, and maintain the service. The operator can view account information through the restricted administration page to support and manage the service.

Service providers and external links

We use Supabase for authentication, database and photo storage, live message delivery, and backend functions, Resend to send notification and confirmation emails, and Vercel for hosting and Web Analytics on the website, Expo to relay push notifications to the iPhone app, and Apple for Sign in with Apple and the Apple Push Notification service. Google and GroupMe handle their respective sign-in services. These providers process information under their own privacy terms. Hosting providers may process technical information such as IP addresses, browser information, and service logs.

Vercel Web Analytics provides usage statistics such as page views, referrals, device information, and approximate location. Vercel describes Web Analytics as using anonymized data without analytics cookies. PickleSlot uses separate necessary cookies for sign-in.

Contact buttons open external services, such as GroupMe, WhatsApp, your email app, or your phone app. Court bookings and event registrations happen through the venue or its booking provider. Information you send or submit there is handled by that service.

We do not sell your personal information or use it for targeted advertising. We may disclose information where reasonably necessary to meet legal obligations, protect the service, or address abuse.

Cookies and browser storage

On the website we use necessary cookies to maintain your sign-in session and verify login requests. Browser storage remembers your display preferences and may temporarily retain unsaved profile edits so they can be recovered. Signing out clears your app session; clearing browser storage can remove local preferences and drafts.

Your choices and requests

You can edit your profile and availability, change your preferred contact details, pause discovery, or make your profile private. These changes affect what PickleSlot displays; they cannot remove copies another person already saved.

You can delete your account yourself from your profile on the website or in the app. Deletion is immediate and removes your profile, availability, contact methods, sign-in identities, sessions, push subscriptions and device registrations, notification email, uploaded photos, reactions, the messages you sent, the games you host, and your responses to other players' games. Players you talked with keep their own messages, shown as from a deleted player. Reports about your account keep their evidence until it expires below. To request a copy or correction of your information, email support@pickleslot.com; we may ask you to verify account ownership first.

How long we keep information

Account and availability information is kept until you delete your account. Messages are kept for 12 months, then deleted. An unsent message leaves a placeholder for 30 days. Empty conversations are removed after 30 days. Games, their player lists and their invitation records are deleted 30 days after the game ends. Resolved reports and their evidence, including copies of reported photos, are kept for 180 days. Finished push-notification delivery records are kept for 14 days, our log of notification emails is kept for 30 days, sign-in codes for 1 day, rate-limit counters for 2 days, and photo uploads that were never completed for 24 hours. Expired sign-in sessions are removed 7 days after they expire. Some information may remain in backups or necessary security/legal records for longer, subject to our providers' retention practices.

Security, location, and age

We use access controls and protected sessions to help safeguard information. No online service can guarantee absolute security. Our providers may process information in the United States or other locations where they operate.

PickleSlot is intended for adults aged 18 or older. If you believe a child has provided personal information, contact us so we can address it.

Changes and contact

We may update this policy as the service changes. The latest version and effective date will appear on this page. Contact support@pickleslot.com with privacy questions; for app help or to report a player see pickleslot.com/support.