Privacy policy

Last updated: 15 October 2026

This policy explains how Ping Pong Times handles personal information when you browse our table tennis schedules, rankings, player pages and news. It covers this website; external websites have their own policies.

Who is responsible and how to contact us

Ping Pong Times is operated by Hello Datapoint in Sweden. The operator is responsible for the personal information described here. For privacy questions or requests, contact Ping Pong Times Support at [email protected].

What we collect and why

• Browsing and technical information. Our hosting provider processes requests, including IP addresses, request URLs, timestamps, browser information, response status and diagnostic information. We use these records to deliver the website, investigate errors and protect it from abuse.
• Display preferences. Your browser stores language, timezone, clock format, result visibility, selected events, countries, player filters and hidden-player choices. These settings personalize your view. They are not a list of players followed through an account. Filters included in a page URL are also sent to the server and may appear in technical logs and analytics.
• Analytics, if you accept. The main website loads Google Analytics only after you accept analytics cookies, to understand visits, page use and technical performance. Google may process page addresses, referrers, approximate location, device and browser information, interactions and browser identifiers. The site does not intentionally send account emails or login credentials as analytics fields. Advertising storage, advertising personalization and Google signals are disabled in our website tag.
• Messages you send us. If you contact us, we receive the contact details and information you choose to include. We use them to answer your request and keep a record of the correspondence where needed.

We use necessary technical information for our legitimate interests in operating and securing the site. When you request a response, we use your information to handle that request; the legal basis depends on whether it relates to providing a requested service or our legitimate interest in answering enquiries. We rely on your consent for optional analytics. You can refuse or withdraw analytics consent without losing access to the site's features.

Accounts, Google sign-in and match reminders

We do not attach names, email addresses or account identities to analytical data. Analytics cookies use a random browser identifier that can link activity across visits, including when you are not logged in. This is pseudonymous data, not fully anonymous information.

The version of the website covered by this policy does not currently provide public accounts, Google sign-in, account-based player follows or requested match reminders. We therefore do not currently collect account email addresses, Google identity information, Google profile names or profile photos through a public login, or store account-linked follow lists and notification preferences.

If these features are introduced, this policy will be updated before they start collecting information. That update will explain the account identifiers and email used for authentication, whether Google names and photo URLs are retained in authentication records, any player follows and notification choices stored for personalization, and the data used to deliver requested reminders. We will not treat the ability to sign in with Google as permission to access your Gmail messages, contacts or Drive files.

Service providers and external services

• Google Cloud: hosts the application, serves stored website images and processes infrastructure and security logs.
• Supabase: stores the site's event, match, ranking and editorial data. Public visitor accounts are not implemented in this version.
• Google Analytics: processes website usage and technical analytics from the main site.
• Google Fonts: the main site requests fonts from Google's servers. These requests disclose technical connection information, including your IP address and browser information.
• Resend: is configured as an SMTP provider for Supabase authentication email. This version does not offer a public login that sends those emails. If enabled later, email delivery will involve the recipient address, message content and delivery records.

Following links to YouTube, official sports sources, Buy Me a Coffee or the Hello Datapoint contact form takes you to a separate service. The destination receives connection information and handles any information you provide under its own policy. We do not sell visitors' personal information.

Cookies and browser storage

Optional analytical functions are currently disabled site-wide. The consent dialog and Cookie settings controls are therefore not shown. Previously saved choices do not enable analytics while it is disabled.

The site uses local storage for display preferences. Its main saved preference record is ignored after 24 hours without an update; the stored record is not automatically erased. Separate timezone and result-visibility values remain until overwritten or cleared. You can remove these values through your browser's site-data controls.

The private administrator area uses an HTTP-only session cookie, scoped to that area, with an eight-hour lifetime. Ordinary browsing does not create a public account session cookie in this version.

You can clear previously saved analytics choices and cookies using your browser's site-data controls. Clearing browser data does not delete information already received by an analytics provider.

How long information is kept

Routine application request logs in our Google Cloud logging bucket are retained for 30 days. Infrastructure audit records may be retained separately by Google under its service rules. Display preferences remain in your browser as described above. Analytics data is subject to the configured Google Analytics retention and aggregation rules; the website does not currently specify a custom analytics retention period.

We keep correspondence for as long as necessary to answer it, resolve related issues and meet applicable legal obligations. If you ask us about a particular record, we can explain the applicable retention criteria. We may retain specific information for a longer period where needed to investigate abuse, comply with law or establish or defend a legal claim.

International processing

Our providers operate internationally. Hosting a service in Europe does not necessarily mean that all support, analytics, email delivery or other processing remains within the EU/EEA. Processing outside the EU/EEA must have an applicable transfer basis, such as an adequacy decision or appropriate contractual safeguards. Contact us for information about the locations and safeguards relevant to your data. We do not promise that all processing takes place in Sweden or the EU.

Your choices and rights

Where applicable, you may request access, correction, erasure, restriction or portability of your personal information, object to processing based on legitimate interests, and withdraw consent for processing that relies on it. Withdrawal does not affect earlier lawful processing. These rights can be subject to legal exceptions.

Send requests to the contact address above. We may ask for information reasonably needed to verify your identity and normally respond within one month, subject to lawful extensions. There is no public account to delete in this version; you can still request deletion of contact correspondence and other personal information we hold. Clearing browser data removes your locally saved preferences.

You can complain to your local data protection authority. In Sweden, this is the Swedish Authority for Privacy Protection (IMY). We do not use visitor information to make automated decisions with legal or similarly significant effects.

Changes to this policy

We will update this page when our processing changes and revise the date above. Material new account, notification or analytics practices will be explained before they take effect.