BadmintonicBadmintonic

Privacy Policy

1. General Provisions

Badmintonic (badmintonic.com) is a free platform for badminton enthusiasts: a database of rackets with technical specifications and measurements, professional player equipment tracking, comparison and selection tools, as well as a space for discussions and knowledge sharing. This Privacy Policy describes what data we collect, how we use, store, and protect it.

By using our service, you agree to the terms of this Policy. If you disagree with any provisions, please stop using the website.

2. What Data We Collect

We strive to collect only the minimum amount of data necessary for the service to function.

2.1. Account Data

When you register or sign in (via Google, Apple, email, or other supported methods), we may receive the following information:

  • First and last name
  • Email address
  • Profile photo
  • Unique account identifier

When signing in through third-party services (Google, Apple, etc.), we do not gain access to your password, contacts, files, or any other account data beyond what is listed above. Account data is used for identification, personalization, and enabling platform features.

2.2. User Content

When you use interactive features of the service, we store:

  • Comments: comment text, author name, avatar, publication date
  • Racket measurements (submissions): measurement data, as well as submitter's name and email (provided optionally)

2.3. Technical Data

  • Browser fingerprint — used solely to prevent duplicate likes by anonymous users. We do not use fingerprints to track your activity on other websites
  • Browser local storage data (localStorage): racket comparison list, like indicators, authorization token

2.4. Analytics Data

We use Google Analytics to analyze website traffic. Google Analytics may automatically collect:

  • IP address (anonymized)
  • Browser type and version
  • Operating system and device type
  • Pages viewed and visit duration
  • Referral source (where you came from)
  • Geographic region (country/city level, without exact address)

Learn more about Google Analytics data collection: https://policies.google.com/privacy

3. How We Use Data

We use collected data exclusively for the following purposes:

  • Service operation: authorization, comment publishing, like tracking
  • User content moderation and data quality maintenance
  • Abuse prevention: protection against spam, duplicate likes, and other violations
  • Traffic analysis and service improvement
  • Communication with measurement submitters (if email is provided)

We do NOT use your data for:

  • Selling or sharing with third parties for marketing purposes
  • Sending advertising or promotional materials
  • Creating advertising profiles or targeting
  • Making automated decisions that affect your rights

4. Data Retention

  • Authorization data is stored in an encrypted JWT token in your browser's local storage and is valid for 30 days. We do not maintain a separate user account database
  • Comments are stored in the database until they are deleted by the author (upon request) or by a moderator
  • Racket measurement data (submissions), once approved by a moderator, is stored indefinitely as part of the public database
  • Google Analytics data is retained in accordance with Google's retention policy (14 months by default)

5. Third-Party Data Sharing

We use the following third-party services to operate the platform:

  • Google OAuth — user authorization (shared: Google profile data)
  • Google Analytics — traffic analytics (shared: anonymized visit data)
  • Google Translate API — comment translation upon user request (shared: comment text)

We do not sell, rent, or share your personal data with third parties for commercial or marketing purposes.

We may disclose your data only in cases required by law: upon request from courts, law enforcement, or other authorized government agencies.

6. Cookies and Local Storage

6.1. Cookies

We do not set our own cookies. However, Google Analytics uses the following cookies for analytics purposes:

  • _ga — unique visitor identification (retention: 2 years)
  • _ga_* — session state persistence (retention: 2 years)

You can disable cookies in your browser settings or use extensions to block analytics (e.g., Google Analytics Opt-out Browser Add-on).

6.2. Local Storage (localStorage)

We use browser local storage (localStorage) for:

  • Storing the authorization token (JWT) — to maintain your session
  • Racket comparison list
  • Like indicators — for correct interface display

localStorage data is stored only in your browser and is not transmitted to our servers. You can clear localStorage in your browser settings at any time.

7. Data Security

We take reasonable organizational and technical measures to protect your data:

  • All connections to the website are secured with HTTPS (TLS encryption)
  • User content undergoes mandatory sanitization to protect against malicious code (XSS)
  • All database queries are parameterized to protect against SQL injection
  • Authorization tokens have limited validity periods and are signed with a cryptographic key
  • Administrative access is protected by a separate authorization system

That said, no method of data transmission over the internet is absolutely secure. We cannot guarantee complete data security but make every reasonable effort to protect it.

8. Your Rights

Regardless of your location, you have the following basic rights:

8.1. For All Users

  • Request information about the data we hold about you
  • Request deletion of your data (comments, measurements, and related information)
  • Withdraw consent to data processing by discontinuing use of the service and signing out

8.2. For EU/EEA Users (GDPR)

In addition to the basic rights, you may:

  • Obtain a copy of your data in a machine-readable format (right to portability)
  • Request correction of inaccurate data
  • Request restriction of processing of your data
  • Object to data processing for certain purposes
  • Exercise the "right to be forgotten" — complete deletion of all your data

8.3. For California Users (CCPA)

You have the right to:

  • Know what categories of personal data are collected and for what purpose
  • Request deletion of your personal data
  • Not be discriminated against for exercising your rights

We do not sell users' personal data or share it for advertising purposes.

8.4. How to Exercise Your Rights

To exercise any of the rights listed above, send a request to privacy@badmintonic.com. We will process your request within 30 days. To verify your identity, we may ask you to confirm the email address associated with your account.

9. Children

Our service is not intended for persons under 13 years of age. We do not knowingly collect personal data from children under 13. If you become aware that a child under 13 has provided us with their data, please contact us at privacy@badmintonic.com — we will promptly take steps to delete such data.

10. International Data Transfers

Our servers may be located in various countries. By using our service, you agree that your data may be processed outside your country of residence. We ensure an adequate level of data protection regardless of where data is processed.

11. Changes to This Policy

We may update this Privacy Policy as the service evolves. In case of significant changes, the updated version will be published on this page with the new last updated date.

We recommend checking this page periodically. By continuing to use the service after changes are made, you accept the updated version of the Policy.

12. Language Versions

This Policy may be translated into other languages for user convenience. In case of discrepancies between a translated version and the English original, the English version shall prevail.

13. Contact

For all questions related to data privacy and exercising your rights, please contact:

Email: privacy@badmintonic.com