Privacy

Deuce is operated by Pietro Di Paola, Milan, Italy. Reach us at hello@deucematch.uk.

Your Bocconi email address. This is the only way Deuce knows you belong here, and it is the only contact detail we hold. It is never shown to another player.

Your first name, your surname initial, your level, the sports you play, and optionally your languages, programme, year and a short bio. All of this is visible to other members, because it is what somebody needs in order to decide about one game.

Your activity: the games you host and join, the messages you write in game threads, the ratings you give, and the attendance marks hosts record about you.

Reports, if you send one or if one is sent about you: what was reported, anything the reporter wrote, and the decision a moderator reached with the reason they gave for it.

If an account is closed by a moderator, the date and the written reason, kept on that account.

Nothing else. No photograph, no surname, no phone number, no student number, no timetable, no course codes, no location tracking, no advertising identifiers, and no analytics or tracking cookies from anybody else.

Members see your display name, level, sports, languages, programme, year, bio, and your record: games played, average rating, the share of games you turned up to, how many games you missed, and the number of reports against you that a moderator has upheld.

Members do not see your email address, your individual ratings, or who rated you. You cannot see who rated you either, only your average. That is what makes the average worth anything.

People who are not signed in see nothing at all. This is enforced by row level security in the database, not by leaving pages unlinked: a request from somebody with no account returns no rows.

A game thread is readable only by the players in that game.

Student moderators are the one exception, and only for reports. A moderator reads reports sent to them, which means the name of the person reported, the name of the person reporting, the game it happened in, and anything either wrote about it. They do not read game threads, and they have no access to anything else you could not already show a fellow member.

Who moderates is not published, and a decision is never signed. A report tells you it was reviewed by a moderator, never by which one.

If a moderator upholds a report about you, you are told which rule and why. If a moderator dismisses it, you are told nothing at all, and you are never told who reported you.

To provide the service you asked for, which is the contractual basis under GDPR art. 6(1)(b): without a name and a level there is no matchmaking.

Consent, which you give explicitly when you create your account, for the optional parts of your profile. You can remove them at any time from your profile page.

Our legitimate interest in keeping members safe, for the reports and moderation records, under art. 6(1)(f).

Your profile and activity for as long as you have an account.

When you delete your account, it goes immediately and completely: your profile, your seats in games, the messages you wrote, the ratings you gave, and your notifications. This is a real delete, not a flag that hides you.

Reports and the decisions made on them are kept while the accounts involved exist, because a moderator judging a new report needs to know whether there were earlier ones.

A closed account keeps its profile row rather than being erased, so that the record of games other people played with it survives and so that the decision can be reviewed. Deleting your own account from Settings still removes everything, as described above.

You can see and correct everything on your profile page, and delete your account from Settings, without asking anybody.

You also have the right to a copy of your data, to object to processing, and to complain to the Garante per la protezione dei dati personali in Italy.

For anything you cannot do from the app, write to hello@deucematch.uk.

Deuce runs on Vercel and stores data in Supabase (PostgreSQL), hosted in the EU. Upstash is used to limit how often anyone can ask for a log in link, and holds only a counter against a hashed identifier.

Resend, because sign in codes are sent through it. Resend therefore handles your email address and the code itself in transit, and keeps a delivery log of the address and whether the message arrived.

Cloudflare, which provides the domain's DNS and forwards mail sent to our published addresses on to a mailbox we read, which is provided by Google. It handles anything you choose to write to us, and the notice we send ourselves when a report is filed, which deliberately contains no names and no report text.

These are processors acting on our instructions. Nobody else receives your data, and none of it is sold, ever.

Cookies: one session cookie so you stay signed in, and nothing else. There is no analytics or advertising cookie. The cookie page lists it in full.