Privacy Policy

Last updated: 18 October 2026

1. Who We Are

RacketIndex ("we", "us", "our") is a free online platform for tennis players to explore professional racket and string setups and share their own equipment configurations with the community.

This Privacy Policy explains what personal data we collect, why we collect it, and your rights in relation to it. It applies to all users of racketindex.com.

If you have any questions, contact us at: [email protected]

2. Information We Collect

We collect the following categories of personal data:

Account information

  • Username — chosen by you at registration; publicly visible on your profile and submitted setups.
  • Email address — used to identify your account. Not displayed publicly.
  • Password — stored as a one-way bcrypt hash. We never store or have access to your plain-text password.

Optional profile information

You may choose to add the following to your profile. None of these fields are required:

  • Country and city
  • Playing level, playing style, and handedness
  • Favourite racket brand

Profile information is publicly visible on your profile page.

Racket setup data

Equipment details you submit (racket model, strings, tension, weight, etc.) are stored and displayed publicly as part of the community dataset.

Usage data

We may collect standard server log information including your IP address, browser type, pages visited, and approximate geographic location. This data is used to operate and improve the service and is not linked to your account for profiling purposes.

3. How We Use Your Information

  • Service delivery — to create and maintain your account, display your profile and submitted setups, and enable community features.
  • Site improvement — to understand how the platform is used and identify areas to improve.
  • Security — to detect and prevent abuse, spam, or unauthorised access.
  • Support — to respond to queries or reports you send us.

We do not use your data for automated decision-making or profiling.

4. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

  • Performance of a contract — processing your account information and submitted setups is necessary to provide the service you have registered for.
  • Legitimate interests — we have a legitimate interest in operating a secure, functional, and improving platform. This covers server log analysis and abuse prevention, where your rights and interests do not override ours.

5. Cookies & Analytics

RacketIndex uses session cookies only. These are strictly necessary cookies that keep you logged in while you use the site. They are deleted when you close your browser or log out.

We use Plausible Analytics to understand how many people visit the site and which pages and referrers bring them here. Plausible is cookieless: it sets no cookies, stores nothing on your device, collects no personal data, and does not track you across websites or between visits. Measurement is aggregated and anonymous — we can see that a page was viewed, not who viewed it. Data is processed within the EU.

We use no advertising cookies and no cross-site tracking of any kind. Because our analytics sets no cookies and collects no personal data, no consent banner is required. If we ever adopt a tool that does set tracking cookies, this policy will be updated and consent requested before any such cookies are set.

6. How We Share Your Information

We do not sell, rent, or trade your personal data.

We share data only with:

  • Hosting provider (Railway) — who store and serve the platform's data on our behalf. They process data only as instructed by us and under a data processing agreement.
  • Analytics provider (Plausible Analytics, EU-hosted) — who process anonymous, aggregated usage statistics on our behalf. No cookies are set and no personal data is shared with them.

Please note that your username, profile information, and submitted racket setups are publicly visible on the platform. Do not submit any information you wish to keep private.

7. Data Retention

We retain your account data for as long as your account is active. If you request deletion of your account, we will remove your personal data within a reasonable timeframe, except where we are required to retain it by law.

Submitted racket setups may be retained in an anonymised or aggregated form for community statistics after account deletion.

8. Your Rights

Under UK data protection law (UK GDPR / Data Protection Act 2018), you have the following rights:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate or incomplete data. You can update most profile information directly in your account settings.
  • Erasure — request deletion of your personal data ("right to be forgotten").
  • Restriction — ask us to limit how we use your data in certain circumstances.
  • Portability — request your data in a structured, commonly used, machine-readable format.
  • Objection — object to processing based on legitimate interests.

To exercise any of these rights, contact us at [email protected]. We will respond within one month.

You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner's Office (ICO), at ico.org.uk.

9. Security

We take reasonable technical and organisational measures to protect your data, including:

  • Passwords stored as bcrypt hashes — never in plain text
  • HTTPS enforced across the site
  • Session cookies configured with HttpOnly and SameSite=Strict flags
  • CSRF tokens on all forms

No system is completely secure. If you believe your account has been compromised, contact us immediately.

10. Children's Privacy

RacketIndex is not intended for users under the age of 13. We do not knowingly collect personal data from children. If you believe a child has registered without parental consent, please contact us and we will remove the account.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be indicated by an updated "Last updated" date at the top of this page. Continued use of the platform after changes are posted constitutes acceptance of the revised policy.

12. Contact

For any privacy-related queries or to exercise your rights, contact us at:

[email protected]