Privacy Policy

Last updated: August 17, 2026

Driftwood Pickleball ("we", "our", "us") provides tournament registration and event management services. This page explains what data we collect, how we use it, and your choices.

Information We Collect

• Account data from your sign-in provider (such as email and user ID).
• Profile data you provide (display name and linked DUPR information, if connected).
• Tournament data (registrations, teams, scores, and event participation history).
• Basic technical logs needed for security and service operation.

How We Use Information

• Operate and improve tournament registration and scoring features.
• Display tournament participation and results to users.
• Prevent misuse and maintain platform security.
• Respond to support and account requests.

Google Calendar Data (Optional)

If you sign in with Google and enable Google Calendar sync, we request Google Calendar write access (https://www.googleapis.com/auth/calendar.events) so we can create and manage event entries for tournaments you register for.

• When enabled, we create or update a Google Calendar event for your registered tournament.
• If you unregister (or are removed), we attempt to delete the corresponding Google Calendar event.
• We store only the minimum mapping needed to manage sync (your user ID, tournament ID, and Google event ID).
• We do not sell Google data, and we do not use Google Calendar data for advertising.

Google API Services User Data Disclosure

Driftwood Pickleball's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use Google Calendar data only to provide user-requested calendar sync features in the Driftwood app. The configured master admin may use Gmail Send access for HTML event notifications; team drafts use a plaintext draft URL and remain unsent until reviewed. The same authorized account sends transactional waitlist-promotion messages to players who are automatically registered for an event.

• We do not use Google Calendar data for advertising or marketing profiling.
• We do not sell Google Calendar data.
• We do not use Google Calendar data to train generalized AI/ML models.
• Google authentication and consent are handled by Google OAuth via Clerk; Driftwood never receives your Google password.

Data Protection Mechanisms for Google User Data

We use the following safeguards to protect information received through Google APIs:

• Encrypted transport: requests between Driftwood, Google APIs, and visitors use HTTPS/TLS.
• Access controls: Google API access is available only after the applicable Google consent flow, and Gmail Send access is restricted to the configured master-admin account.
• Least privilege: the app requests https://www.googleapis.com/auth/gmail.send for bulk email delivery and https://www.googleapis.com/auth/calendar.events for optional calendar synchronization. It does not request Gmail read, search, or draft-management permissions.
• Data minimization: the app does not store Gmail message bodies, Gmail message identifiers, Google access tokens, or Google refresh tokens. For Calendar sync, it stores only the Driftwood user ID, tournament ID, Google event ID, and sync timestamps needed to maintain the requested event mapping.
• Limited disclosure: Gmail Send is used only to deliver event notifications and transactional waitlist-promotion messages. Team draft URLs are generated from the selected event recipients without requesting Gmail draft-management access. Google data is not sold, used for advertising, or used to train generalized AI/ML models.
• Revocation and deletion: users can revoke Driftwood's Google access from their Google account permissions, disable Calendar sync where available, and request deletion of Driftwood account data using our data-deletion instructions.

Gmail Notification Delivery

The master-admin notification tool can request Gmail Send access (https://www.googleapis.com/auth/gmail.send) to send an HTML event notification directly from the authorized Gmail account. For team notifications, it opens a plaintext draft URL with the selected recipients in Bcc and leaves the message unsent for review. Driftwood also uses the same authorized Gmail account to send a transactional message when a team is automatically moved from an event waitlist into registration. Those messages are sent to valid email addresses on the relevant team and do not depend on the team's optional bulk email-notification setting.

• This access is available only to the configured master admin.
• We do not read, search, or modify existing Gmail messages.
• We do not store Gmail message content, access tokens, or refresh tokens in Driftwood.
• You can revoke Google access at any time from your Google account permissions; future Gmail notifications require authorization again.

Google Calendar Controls and Deletion

• You can turn Google Calendar sync on or off at any time from your profile.
• You can revoke Driftwood access in your Google account permissions at any time.
• You can request deletion of account data (including stored calendar sync mappings) by contacting us.

Storage and Retention for Google Calendar Data

• We keep only the event mapping data needed to maintain sync (user ID, tournament ID, Google event ID, and sync timestamps).
• Calendar mapping data is removed when practical if you unregister, disable sync, revoke Google access, or request account deletion.
• Operational logs may temporarily contain technical error details needed to support reliability and security.

DUPR Partner Requests

If you mark your team as needing a partner, your email address may be shown as a contact link on the tournament registration list and is publicly accessible to site visitors.

Sharing

We do not sell personal information. We share data only with service providers needed to run the platform (for example authentication, hosting, and database infrastructure).

Data Retention

We retain account and tournament data as needed to operate the service and maintain event history, unless a deletion request is submitted.

Your Rights

You may request access, correction, or deletion of your personal data by contacting us at [email protected]. You may also use our deletion guidance at /data-deletion.

License and Intellectual Property

Unless otherwise noted, Driftwood Pickleball source code, site design, and content are proprietary and licensed under /LICENSE. Third-party names, logos, and marks remain the property of their respective owners.

Contact

Questions about this policy: [email protected]

Policy Updates

We may update this Privacy Policy when our practices change. We will update the "Last updated" date on this page and apply the updated policy going forward.

Support

For account help or match disputes, visit /support.