Privacy Policy

1. Introduction

Welcome to Tableport. We respect your privacy and are committed to protecting your personal data. This privacy policy explains what we collect when you use Tableport on the web or in our mobile app, how we use it, how long we keep it, and what rights you have over it.

2. Who We Are

The controller responsible for your personal data is Tableport platform Oy, Husbackankuja 8 A 6, 01610 Vantaa, Finland ( "Tableport", "we", "us" or "our"). If you have any questions about this policy or how we handle your data, you can contact us at hello@tableport.gg.

3. Information We Collect

We collect and process the following categories of personal data:

• Account data: your email address, and—depending on how you sign in—a password or a one-time login code sent to that email. If you sign in with Google, we receive your name, email address and profile picture from Google. If you sign in with Discord, we receive your display name, email address, Discord username and profile picture from Discord.
• Profile data: username, display name, first and last name, avatar, preferred language, and accessibility settings such as high-contrast mode and whether dynamic colours are disabled.
• Location data: precise geographic coordinates. On the mobile app, we read your device's GPS when you choose "use my location" or pick a point on the map. We store exact coordinates (latitude and longitude) when you create or join a meetup table, when you save a matchmaking search with a radius, and for the physical location of a table itself. We also store any location label you type or select. When you search for an address or place name, that search text and any coordinates you pick are sent to our mapping provider, Mapbox, to return suggestions or a readable label.
• Communication data: the content of chat messages you send in direct messages, group chats, table chats and tournament chats; which conversations you belong to; and, if you use the mobile app, an Expo push notification token plus your device platform and device name so we can deliver notifications.
• Safety and blocking data: users you have blocked, and any content or safety reports you submit (including the category, what you reported, and any details you write).
• Gameplay data: tournaments and matches you create or join, your scores, ranks, standings and team names; team invitations you send or receive (including email addresses you enter for invitees); and names or email addresses of people you add to a team who do not yet have a Tableport account.
• Uploaded content: images you upload, such as avatars, group chat pictures or tournament logos.
• Technical data: the IP address and browser or app user agent recorded when a session is created, and the platform and device name associated with a push notification registration.

We do not collect payment card or other financial data, and Tableport does not currently process payments.

4. How We Use Your Information

We use your personal data to provide and improve the Tableport service, including to:

• Create and manage your account and authenticate you when you sign in
• Run tournaments and matches, record results and standings, and show them to other participants
• Let you create and join meetup tables, search for nearby players and games using your location and chosen radius, and notify you when a match is found
• Deliver chat between you and other players, including direct messages, group chats, and chats tied to a table or tournament
• Send push notifications and service emails, including login codes, team invitations and account notices
• Enforce blocks, review reports you file, and keep moderation records where required by law or platform policy
• Resolve and display map locations and readable place names through our mapping provider
• Operate, secure and improve our service (including troubleshooting, testing, support, and protecting against fraud and abuse)
• Comply with our legal obligations and notify you of changes to our terms or this policy

5. Legal Bases for Processing

Where the EU General Data Protection Regulation (GDPR) or equivalent law applies, we rely on the following legal bases:

• Performance of a contract: to provide the service you sign up for, such as managing your account, tournaments, matches, meetup tables, chat and push notifications.
• Legitimate interests: to secure, maintain and improve our service, to match players with nearby games, to deliver notifications you would reasonably expect, and to prevent abuse, where these interests are not overridden by your rights.
• Consent: where we ask for it, for example when the mobile app requests access to your device location or notification permission. You may withdraw your consent at any time through your device or app settings.
• Legal obligation: to retain certain moderation records and respond to lawful requests, including child-safety reporting requirements.

6. How We Share Your Information

We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used or accessed in an unauthorized way, altered or disclosed. In addition, we limit access to your personal data to those employees, agents, contractors and other third parties who have a business need to know.

They will only process your personal data on our instructions and they are subject to a duty of confidentiality. We have put in place procedures to deal with any suspected personal data breach and will notify you and any applicable regulator of a breach where we are legally required to do so.

We do not sell your personal data. We share it only with the sub-processors below, and only so they can provide their part of the service:

• Scaleway Transactional Email: delivers service emails we send you, such as login codes and team invitations. Receives your email address and the content of each message.
• Scaleway Object Storage: stores images you upload. Receives the image files themselves.
• Mapbox: provides address search, reverse geocoding and map tiles on the web and in the mobile app. Receives search text and coordinates when you look up or pick a location.
• Expo push notification service: delivers notifications to your mobile devices. Receives your Expo push token, the notification text we send, and related delivery metadata.
• Google: if you choose "Sign in with Google", Google processes your sign-in and shares your name, email address and profile picture with us.
• Discord: if you choose "Sign in with Discord", Discord processes your sign-in and shares your display name, email address, username and profile picture with us.
• Umami: our self-hosted analytics, which records anonymous page-view statistics on our website. It receives the page you visited, the page that referred you, and your browser, operating system and device type, plus an approximate country derived from your IP address. The IP address itself is not stored.

We also derive an approximate country from your IP address while serving a page, so that we can show the site in your language before you have chosen one. This happens in memory for that request only: the IP address and the country are not stored, and you can change the language at any time with the language switcher.

Other players can see information you choose to make visible in the product, such as your username, avatar, messages you send in a shared chat, and your results in tournaments and matches they also took part in.

7. Retention and Deletion

We keep your personal data for as long as your account is active and as needed to provide the service. When you delete your account, most of your personal data is erased promptly. Because other players' records depend on yours, a few things are kept in de-identified form instead of being deleted outright.

Erased when you delete your account: your profile details, email address, sign-in credentials and linked OAuth accounts, active sessions, push notification registrations, saved matchmaking searches and the GPS coordinates tied to your searches and table memberships, your block list, images you uploaded, your accessibility settings, organizer and publisher memberships, team invitations in either direction, and your membership of direct and group chats.

Retained in de-identified form: tournament and match participation, scores, ranks and standings. Your account is scrubbed and shown to others as "Anonymous" so other participants' results stay correct.

Chat messages: messages you sent stay in the thread so the conversation other people took part in remains readable, but the text is removed and shown as "[deleted]".

Safety and moderation reports: reports you filed are deliberately kept after your account is deleted, as required for Google Play child-safety standards and our moderation audit trail. They are no longer linked to an identifiable account.

A meetup table's own location coordinates may remain with the table after you leave, because the table record is shared infrastructure rather than personal profile data. If you are the last member and the table is removed, that data goes with it.

8. Your Data Rights in Practice

You do not need to email us to download your data or delete your account. Both are available in the app:

• Web: Settings → Danger Zone → Export Data or Delete Account
• Mobile: More → Settings → Danger Zone → Export Data or Delete Account

Export: downloads a JSON file of everything we hold about you. It includes your profile and accessibility settings; session dates, IP addresses and user agents; which sign-in providers you linked (but not their secret tokens or your password hash); push device platform and device names (but not the push token itself); users you blocked; your chat threads with participant usernames, your own messages, and join/read timestamps (never other people's message text); meetup table memberships and saved location searches with coordinates; images you uploaded; safety reports you filed; organizer, publisher and team memberships and invitations; and tournaments and matches you hosted or played in, including scores and standings.

Delete account: permanently erases your account as described in section 7. You will be signed out immediately. This action cannot be undone.

You can still contact us at hello@tableport.gg if you need help exercising your rights.

9. Your Legal Rights

Depending on your location, you may have the following rights in relation to your personal data:

• Request access to your personal data
• Request correction of your personal data
• Request erasure of your personal data
• Object to processing of your personal data
• Request restriction of processing your personal data
• Request transfer of your personal data (data portability)
• Withdraw consent where processing is based on consent

To exercise any of these rights, use the in-app tools in section 8 or contact us at hello@tableport.gg. You also have the right to lodge a complaint with your local data protection supervisory authority if you believe we have not handled your personal data in accordance with the law.

10. Cookies

Our website uses cookies to keep you signed in. These are strictly necessary for the service and are not used for advertising.

We do not use advertising cookies or cross-site tracking. The mobile app does not use cookies.

Our production website loads Umami, a self-hosted, privacy-focused analytics script. It sets no cookies, does not use device storage to identify you, and does not track you across other websites.

11. Third-Party Links

This website may include links to third-party websites, plug-ins and applications. Clicking on those links or enabling those connections may allow third parties to collect or share data about you. We do not control these third-party websites and are not responsible for their privacy statements.

12. Children's Privacy

Our service is not intended for children under the age of 13, and we do not knowingly collect personal data from children under 13. If you are a parent or guardian and believe your child has provided us with personal data, please contact us so that we can take appropriate action.

13. Where Your Data Is Stored

All of our servers and databases are located within the European Union, and your personal data is stored and processed there.

A limited number of third-party providers we rely on (such as those described in section 6) may process certain data outside the EU, including in the United States. Whenever data is transferred outside the EU, we ensure an appropriate level of protection through recognized safeguards, such as the European Commission's Standard Contractual Clauses or an adequacy decision.

14. Contact Us

If you have any questions about this Privacy Policy, please contact us at:

Email: hello@tableport.gg