Privacy Policy

Effective date: May 25, 2026  ·  Last updated: May 25, 2026

1. Who we are

Drillers ("we," "us," or "our") is a web application available at getdrillers.com that helps groups organize and track doubles pickleball and tennis sessions. Drillers is operated as a private, non-commercial project.

For privacy inquiries, contact us at privacy@getdrillers.com.

2. What information we collect

2.1 Information you provide directly

• Google account information — When you sign in with Google, we receive your display name, email address, and profile photo URL from Google. We store your display name and photo URL so other players in your sessions can identify you.
• DUPR rating — Your self-reported DUPR (Doubles Universal Pickleball Rating) rating, if you choose to enter it. This is optional and only used to project score changes during sessions.
• DUPR ID and profile URL — Optional links to your DUPR profile. Not required to use the app.
• Gender — Optional. Used only for gender-aware team balancing during scheduling, if you choose to enable it. Stored as "male," "female," or unset.
• Display name — You may edit your display name within the app. This replaces your Google display name for Drillers purposes.
• Preferences — App settings such as theme, default sport, and audio preferences, stored to keep your experience consistent across devices.

2.2 Information generated by your use of the service

• Session data — Match scores, player rosters, round schedules, and session settings you create or participate in. Session rooms auto-expire 72 hours after the scheduled session date.
• Match history — When a session is saved to history, a snapshot of the session (roster names, scores, round results) is stored persistently. History entries are linked to your account if you are signed in when saving.
• Chat messages — Messages you send in a session's chat board, including any edits, reactions, and deletions. Chat messages are stored in the session room and are accessible to anyone with the room key. Deleted messages are removed from storage.
• Activity log — An audit trail of actions taken within a session room (scores entered, roster changes, setting changes). This is visible to session hosts and admins.
• Join requests and invitations — If you request to join a session or accept an invitation, this is recorded temporarily to manage the flow. These records are removed when the session closes.
• Ratings (DLR/DTR) — Your Driller Ladder Rating (DLR) and Driller Tennis Rating (DTR) are computed on-the-fly from your verified match history. They are not stored separately; they are recalculated from existing history records each time they are displayed.

2.3 Information collected automatically

• Analytics data — We use Google Analytics (GA4) to collect anonymous usage data, such as page views, session counts, and general device/browser information. This data is aggregated and cannot be used to identify you individually. See Section 10 for details.
• Log data — Firebase infrastructure automatically logs basic request metadata (e.g., IP address, request timestamps) for security and operational purposes. We do not access these logs in normal operation.

2.4 Information we do NOT collect

• We do not collect or store your email address beyond what Google provides at sign-in, and we do not use it for marketing or communications.
• We do not collect payment information. The service is free.
• We do not collect precise location data.
• We do not use tracking pixels, advertising cookies, or any third-party advertising technology.

3. How we use your information

We use the information we collect solely to provide, maintain, and improve the Drillers service:

• Displaying your name and photo to other players in sessions you join
• Computing and displaying ratings (DLR, DTR) and leaderboards
• Enabling session scheduling, scoring, and real-time sync
• Allowing you to save match history and access career statistics
• Sending session invitations and managing join requests within the app
• Personalizing your app experience (theme, preferences)
• Understanding aggregate usage patterns to improve the app (via GA4)

We do not use your information for advertising, profiling for third-party purposes, or automated decision-making that has legal or significant effects on you.

4. How we share your information

4.1 With other users of the app

By design, certain information is visible to other users:

• Your display name and profile photo are visible to other players in sessions you join and in the Community and Rankings sections.
• Match history you save to the public history feed is visible to other signed-in users (unless saved as private).
• Chat messages you post are visible to anyone with the session room key.
• Your DLR/DTR rating appears on the global rankings board.

4.2 With service providers

We use Google Firebase to power the app. This means your data is stored on Google's infrastructure. Google acts as a data processor on our behalf and is subject to its own privacy and security obligations. Relevant services:

• Firebase Firestore — Database storage for all session and profile data
• Firebase Authentication — Manages Google sign-in
• Firebase Hosting — Serves the web application
• Google Analytics (GA4) — Anonymous usage analytics

Google's privacy policy is available at policies.google.com/privacy.

4.3 Legal obligations

We may disclose information if required to do so by law, legal process, or to protect the rights, property, or safety of users or others.

4.4 What we never do

• We do not sell your personal information.
• We do not share your information with advertisers or marketing partners.
• We do not share your data with any third party beyond the service providers listed above.

5. Data retention

• Session rooms — Auto-deleted 72 hours after the session date. Chat messages, activity logs, join requests, and invite records within the room are deleted along with it.
• Match history — Stored indefinitely unless you request deletion (see Section 7). Entries saved as private are only visible to you and session participants.
• Profile data — Stored as long as your account exists. Deleted upon account deletion request.
• Analytics data — Retained by Google Analytics per Google's standard retention settings (up to 14 months by default). We do not control this data after it is transmitted to Google.

6. Your rights

6.1 For everyone

• Access — You can view your profile data in the app at any time by opening your profile.
• Correction — You can update your display name, DUPR rating, and gender in the app's Profile settings.
• Deletion — You can request deletion of your account and associated data. See Section 7.
• Opt-out of analytics — You can disable Google Analytics using browser privacy settings or extensions (e.g., the Google Analytics Opt-out Browser Add-on).

6.2 GDPR rights (European Economic Area, UK, and Switzerland)

If you are located in the EEA, UK, or Switzerland, you have the following additional rights under the General Data Protection Regulation (GDPR):

• Right to access (Article 15) — Request a copy of the personal data we hold about you.
• Right to rectification (Article 16) — Request correction of inaccurate personal data.
• Right to erasure (Article 17) — Request deletion of your personal data ("right to be forgotten").
• Right to restriction (Article 18) — Request that we restrict processing of your data in certain circumstances.
• Right to data portability (Article 20) — Request your data in a machine-readable format.
• Right to object (Article 21) — Object to our processing of your data based on legitimate interests.
• Right to withdraw consent — Where processing is based on consent, you may withdraw it at any time.

Our legal basis for processing your personal data is the performance of a contract (providing the service you requested) and our legitimate interests in maintaining and improving the app. We process analytics data based on our legitimate interests in understanding usage patterns.

To exercise any of these rights, contact us at privacy@getdrillers.com. We will respond within 30 days.

6.3 CCPA rights (California residents)

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA):

• Right to know — You may request information about the categories of personal information we collect, the purposes for which we collect it, and the categories of third parties with whom we share it.
• Right to delete — You may request deletion of your personal information, subject to certain exceptions.
• Right to correct — You may request correction of inaccurate personal information.
• Right to opt-out of sale or sharing — We do not sell or share personal information for cross-context behavioral advertising. No opt-out is needed.
• Right to non-discrimination — We will not discriminate against you for exercising your CCPA rights.

To submit a CCPA request, email privacy@getdrillers.com with the subject line "California Privacy Request."

7. Account and data deletion

You have the right to request deletion of your account and personal data at any time. To do so:

1. Email privacy@getdrillers.com from the email address associated with your Google account, with the subject line "Account Deletion Request."
2. We will verify your identity and confirm receipt within 5 business days.
3. We will complete the deletion within 30 days of verification.

Deletion will remove:

• Your profile document (/users/{uid}) including name, photo URL, DUPR rating, gender, and preferences
• Your Firebase Authentication account
• Any active session rooms you created that have not yet auto-expired

The following data may be retained after deletion:

• Saved match history entries where your name appears as a participant — these are historical records of group sessions shared with other players. Your name will remain in these entries as a roster participant. If you wish to have your name removed from specific history entries, please indicate this in your deletion request and we will evaluate it case by case.
• Chat messages already sent in sessions that have not yet expired — these will be deleted when the session room expires (within 72 hours of the session date).
• Anonymized analytics data already transmitted to Google Analytics, which cannot be retroactively deleted as it contains no personal identifiers.

8. Children's privacy

Drillers is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at privacy@getdrillers.com and we will promptly delete the information.

Users between the ages of 13 and 18 should have a parent or guardian review this Privacy Policy before using the service.

9. International data transfers

Drillers is operated from the United States and uses Google Firebase infrastructure, which may store data in data centers located in the United States or other countries. If you access the service from the European Economic Area, United Kingdom, Switzerland, or other regions with data protection laws, your information may be transferred to and processed in countries that may not have the same data protection standards as your home country.

Google Firebase's data processing is governed by Google's Data Processing Addendum, which includes Standard Contractual Clauses approved by the European Commission for transfers from the EEA to third countries.

10. Analytics

We use Google Analytics 4 (GA4) to understand how the app is used. GA4 collects information such as pages visited, time spent on the app, and general device information. This data is aggregated and anonymized — we cannot use it to identify individual users.

GA4 uses cookies and similar tracking technologies. You can opt out of Google Analytics tracking by:

• Installing the Google Analytics Opt-out Browser Add-on
• Using your browser's privacy mode or ad blocking tools
• Adjusting your Google account's ad personalization settings at myaccount.google.com

11. Security

We implement reasonable technical and organizational measures to protect your information. Session data is stored in Google Firebase Firestore with security rules that restrict read and write access. Authentication is handled by Google Firebase Authentication.

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security. If you believe there has been a security breach affecting your data, please contact us immediately at privacy@getdrillers.com.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date at the top of this page. Continued use of the service after changes are posted constitutes your acceptance of the updated policy. We encourage you to review this page periodically.

13. Contact us

For privacy-related questions, requests, or concerns:

• Email: privacy@getdrillers.com
• Response time: We aim to respond within 5 business days; GDPR requests will be fulfilled within 30 days.

For other matters, visit getdrillers.com.