Privacy Policy

Racketworks is stringing-shop software: a console the shop's staff use to run the business, and an Equipment Journal their players can see. This page describes, in plain language, what data we hold and what we do with it.

Who is responsible for what. A shop decides what to record about its own customers — it is the one with the relationship, and it is responsible for what it enters and how it uses it. Racketworks processes that data on the shop's behalf, and holds it under this policy. If you are a player and want something changed or removed, your shop is the fastest route; you can also write to us and we will help.

What we collect

From the shop, about a player: name, phone and email where the shop has them, the shop's own notes about that customer, rackets and string setups, restring history, photos of a racket, how the player was referred, and payment amounts.

From a player who claims their Journal: anything they choose to add to their profile — playing level (USTA, UTR), play style and how often they play, handedness, backhand and grip, birth year, height, home courts, string preferences, arm sensitivity, budget, and contact preferences — plus how each setup felt to play, and any setup experiments they run.

From a shop owner or staff member: the name and email on their sign-in, the shop's name, branding and location (city, region, postal code), and which plan the shop is on.

From anyone who applies to the partner program: name, email, phone, shop or club, location, and what they write in the two free-text questions.

On the public pages of this website — the home page, pricing, changelog, contact and the sign-up page — we count visits using Vercel Web Analytics. It records the page visited, the referring site, and coarse details like country and device type. It sets no cookies, it does not follow you across other websites, and it does not build a profile of you.

It is switched off everywhere that holds anyone's data. No measurement runs inside the shop console, the Equipment Journal, The Bench, or the sign-up and claim links — the addresses of those pages contain customer and racket identifiers, and none of them are ever sent anywhere. That boundary is enforced in code and covered by tests, not left to memory.

We run no advertising, no ad pixels, and no third-party trackers of any kind, anywhere in the product.

Who can see what

Data is isolated per shop — one shop never sees another shop's players or business data, and that separation is enforced by the database itself rather than by application code alone. A player sees only their own Journal.

Some fields are staff-only and are never shown to a player: the shop's notes about a customer, what stock cost the shop, and its internal payment notes.

One field is deliberately the other way round. The note a stringer writes on a string job is shown to that player in their Journal as a “Stringer note”, and it becomes visible as soon as they claim their Journal — including notes written before they claimed it. Shops should treat that field as a message to the customer, not as an internal remark.

How the data is used

To run the shop's stringing operation — drop-offs, inventory, payments, reminders when a player is due — and to power that player's Journal. The Journal matches a player's tension against public professional-player reference data to suggest “pros who string like you”. That matching happens against the player's own record and is never shared with anyone.

Shops that switch on the weekly digest receive an email summarising their own week, which includes their own customers' names — for example who has an unpaid pickup.

Who else touches it

We never sell player data, and never share it with another shop. We do rely on a small set of vendors to run the service:

• Supabase — the database, sign-in, and private photo storage.
• Vercel — hosting and scheduled jobs.
• Purelymail — delivering email, including sign-in codes and any notice a shop sends a player through Racketworks.
• Cloudflare Turnstile — checking that a sign-in is a person rather than a bot. It inspects the browser making the request.
• Backblaze B2 — encrypted off-site backups.
• Google — only if you choose “Continue with Google” to sign in.
• BetterStack — checks whether the site is up. It holds no customer data.

They process data on our instructions and for no other purpose. Beyond that, we disclose data only if the law requires it.

Our own access. We can reach shop data in order to operate and support the service. Administrative actions are recorded in an audit log that includes who did it and the IP address they did it from. We do not sign in as you: Racketworks staff hold no membership in customer shops and there is no impersonation feature in the product.

Signing in, cookies, and bot protection

Signing in works by emailed six-digit code, or with Google if you choose it. Sessions are kept in cookies that exist to keep you signed in — we set no advertising or tracking cookies, which is why this site has no cookie banner. The visit counting described above sets no cookies either, which is what keeps that true. Every sign-in request is checked by Cloudflare Turnstile, which examines the browser for signs of automation; we added it after a burst of automated sign-ups in July 2026.

Backups and how long we keep things

The database and the photo storage are backed up off-site every night. Backups are encrypted before they leave our systems, and we run an automated restore test each month so we know they work. We keep 30 nightly copies and one copy per month for a year. Backups exist only to restore the service.

Otherwise we keep a shop's data for as long as the shop has an account, since the whole point of the product is that a player's history is not thrown away.

Seeing, exporting, or deleting your data

A player should ask their shop first — the shop holds the record and can change it directly. You can also write to hello@racketworks.tennis and we will handle it.

Being straight about this: export and deletion are a manual process we carry out by hand, not a button in the product, and we aim to complete requests within 30 days. Because backups are kept on the schedule above, a deleted record can still exist in an encrypted backup until those copies age out.

The demo shop

The demo at /demo is a single shared account that anyone can open, and everything in it is made up. It is wiped and rebuilt every night. Do not enter real people's details into it — anything typed there is visible to other visitors until the nightly reset.

Children

Racketworks is sold to businesses, and accounts are for adults. A shop may well string for junior players and record their details, including a birth year — that record belongs to the shop, and the shop is responsible for having the right to hold it. We do not knowingly collect data directly from children. If you are a parent or guardian and want a junior's record removed, contact the shop, or write to hello@racketworks.tennis and we will help.

Changes to this policy

When something material changes we will update the date at the top of this page, and we will tell shops directly if the change affects them. This page is written to describe the product as it actually is, so it changes when the product does.

Questions

Racketworks is an early-stage product and this is a plain-language policy rather than a lawyer's document. If anything here is unclear, or you want more detail about how your data is handled, email hello@racketworks.tennis.