Privacy
This notice says what Match Maker does with personal information. It is written for the Privacy Act 2020 and the information privacy principles. It is not legal advice.
Who we are
Match Maker is operated by Alexander Berkley, a sole trader in New Zealand. It is not an incorporated company. Contact us on WhatsApp: +64 21 128 1431. That chat is the inbox we read. We do not publish a separate postal address.
What we collect
If you message Match Maker on WhatsApp, we store:
- Your WhatsApp number. That number is the account key.
- The name you ask us to use.
- How you play: level, side, dominant hand, region, clubs, and the times you are free.
- When a club asks, whether you say you are a member of that club. Today only Remuera Rackets Club asks, on the web sign-up form. The tick is optional. Leaving it unticked is stored as not a member of that club. Other clubs do not ask.
- Quiet hours, if you set them, and whether you finished the shorter or fuller questions.
- Matches you are on: club, date, time, who is in, who confirmed or declined, and a booking link if someone adds one.
- A session for the chat: the step you are on, those answers, and a flag that you tapped Accept on the terms and this notice. A half-finished step can also hold a pending match or a booking link.
- The time of your last message to us, and the template name and match id of the last match alert we sent, so a later reply still lines up.
- WhatsApp messages we send and receive, kept for 180 days so we can support an account: the text, a tapped button or list title, a template name and its text parameters, delivery status, and the time. Photos, audio, and other media are not downloaded.
- If you open a one-hour sign-in link from WhatsApp on this website: a record of the link and of the website session it starts, with your WhatsApp number and when each was created, used, ended, or expires. We store a hash of the link and of the session cookie, not the link or the cookie value.
Each inbound message is read so we can update your profile and your matches. We also keep a copy of the WhatsApp messages we send and receive for 180 days, then delete that copy. We do not download photos, audio, or other media. Meta still keeps the WhatsApp chat, and messages already on a phone stay there.
We do not run an email list, we do not ask players for a password, and we do not take payment.
Where it comes from
It comes from you, in the WhatsApp chat or the web form, and from the match suggestions built from those answers. Club names are the ones you pick. Weather lines are a forecast for the club, fetched by our server. They are not something you type.
Why
We use this to suggest padel matches, to message you about them, to remember how you play, and to record that you accepted the terms and this notice. Match alerts after a quiet spell can go out as a WhatsApp template. Those are still match messages.
You do not have to use Match Maker. If you never message us, we do not create a profile. To suggest matches we need a name, acceptance of the terms and this notice, and the play details the chat asks for.
Who receives it
- Us. Alexander Berkley, operating Match Maker. When supporting an account, the operator can read the WhatsApp messages stored for that account. That screen shows a masked number, not the full phone number.
- DigitalOcean. The website runs in Sydney (region syd) and the database is in Sydney (region syd1), Australia. That is outside New Zealand. DigitalOcean hosts the database for us.
- Meta (WhatsApp). Your number and the messages are processed by Meta so the chat works. We send replies through the WhatsApp Cloud API.
- Other players on a match. The WhatsApp card shows your display name and level. When that match's club asks about membership, the card also shows member or guest. It does not include your phone number. See the consent page.
- Anyone who opens the public calendar. The screen shows the club, the time, how full the game is, and levels. It does not show player names. A signed-in player in that match sees the names. When that game's club asks about membership, those players also see member or guest. A signed-in player's own match list shows the names of the people in their games. The data behind that page includes an id for each player and each match so the page can tell them apart. That id is not the WhatsApp number. A booking record uses the same kind of id for the person asked to add the court link. The WhatsApp number is not in that data.
- Open-Meteo. Our server requests a forecast for the club's location. That request does not include your name or number. Forecast text is used under the Open-Meteo CC BY 4.0 licence.
- QR Server (api.qrserver.com). Opening a joinable match on the calendar loads a QR image from that host. The request includes the join link and your IP address. We do not control that site.
- Playtomic or a club. Only if you open their site or paste their booking link. Their checkout is not ours.
We do not sell personal information.
How long we keep it
On the live site the profile, the session, and the matches are stored in the Postgres database in Sydney, and a deploy keeps that database. Those stay until the account is deleted. There is no automatic day limit for the profile, the session, or the matches. WhatsApp messages we store for support are kept for 180 days and then deleted.
If a server is started without that database, the same records are written to a file on that server's disk. Replacing the server deletes that file. The live website is not run that way.
In WhatsApp, choose Delete account and then Yes, delete. That removes your saved profile, the matches that include you, the onboarding session, and the WhatsApp messages we have stored for this account. Messages already delivered stay in WhatsApp, including on other people's phones. We cannot delete those.
Access and correction
Message Match Maker on WhatsApp. Update details in the chat changes your name, level, side, hand, clubs, and availability. After you open a sign-in link from WhatsApp, the web form can change the same fields, and whether you are marked as a member of a club that asks. Delete account removes the profile and the stored WhatsApp messages, as above. Ask in the same chat if you want a copy of what we hold.
Cookies and the browser
Browser storage is listed on the cookies page. The public site does not set an analytics cookie. It sets two sign-in cookies, each only after that sign-in: mm_session, when a player opens a one-hour sign-in link from WhatsApp, and the operator sign-in cookie mm_admin. Page views and clicks are stored on our server for 90 days and are not a new cookie.
Complaints
If you are unhappy with how we handle your information, message us on WhatsApp first. You can also complain to the Office of the Privacy Commissioner: privacy.org.nz.