Privacy policy
Last updated: 28/06/2026
Who we are
TennisTemple (the website, the mobile apps and their services) is published by TGNC SARL, 11 allée de la Bartavelle, 95800 Courdimanche, France. TGNC is the controller of the personal data described in this policy.
For any question about your data or to exercise your rights, write to contact@tennistemple.com or to the postal address above.
This policy explains what we collect, why, on what legal basis, who receives it, how long we keep it and what rights you have. It applies to visitors and to members.
What we collect
When you create an account
- an email address, a username and a password (we store only a one-way hash of the password);
- if you sign in with Google, Facebook or Apple: the identifier that service gives us, and the name and email address it shares;
- optionally: gender, date of birth, nationality, favourite country, a profile photo, a banner and a bio.
What you publish and do on TennisTemple
- posts, comments, articles, photos and videos you publish, and your likes, votes and reactions;
- private messages and group discussions (hubs) you take part in;
- your predictions, prediction leagues, scores and rankings, quizzes and polls;
- the players, members and competitions you follow, and your notification preferences;
- the bug reports and suggestions you send us, with their attachments.
Purchases
- in-app purchases made through Apple or Google, and PayPal payments: the product, the amount, the date and the transaction identifiers. We never receive your card details.
Collected automatically
- technical data: IP address, device identifier, device model and operating system, app version, browser, language;
- a push-notification token if you allow notifications;
- sign-in history and security events on your account;
- error and performance reports, so we can fix crashes and slow pages;
- audience-measurement and advertising data, subject to your cookie choices (see below).
Why we use it, and on what legal basis
- Running your account and the services you use — publishing, messaging, predictions, purchases, notifications you asked for. Legal basis: the contract between you and us (our terms of use).
- Security and abuse prevention — protecting accounts, detecting fraud, multiple accounts and ban evasion, keeping sign-in and security logs. Legal basis: our legitimate interest in keeping TennisTemple safe.
- Fixing and improving the service — crash, error and performance reports, to find and fix bugs and slow pages. Legal basis: our legitimate interest in a service that works.
- Translating content — translating articles and news into the languages of the site, and translating reported content and member profiles so that our moderation team can review them. Legal basis: our legitimate interest in running an international site.
- TennisTemple AI assistant — when a member asks the assistant a question in a discussion, it answers using the recent comments of that discussion (with their authors' usernames), the bio of the member who asked and the time zone of their device. Legal basis: our legitimate interest in offering the feature.
- Moderation — reviewing published content against our rules, including with automated tools (see "Automated moderation"). Our moderators read a private message only when someone in the conversation reports it, and then only the reported message. Legal basis: our legitimate interest, and our obligations as a host of user content.
- Audience measurement and advertising — only with your consent where the law requires it (see "Cookies"). Advertising funds the free service.
- Newsletters and emails — service emails about your account are part of the contract; newsletters are sent only if you subscribed (legal basis: your consent), and you can unsubscribe at any time. We measure the overall open and click rates of each newsletter; we do not keep a record of whether you personally opened an email or clicked a link. So that one person opening the same email twice counts once, a coded marker that does not contain your address is kept for 30 days and then deleted automatically.
- Accounting and legal obligations — keeping purchase records as the law requires. Legal basis: our legal obligations.
Automated moderation
Comments and posts may be analysed by an automated system that flags or hides content that appears to break our rules (spam, insults, illegal content). Only the text of the content is sent for this analysis — not your username or account identifier. No decision with legal effects on you, or that affects you in a similarly significant way, is taken by automated means alone. A member of our team can review any automated decision: if you think your content was removed by mistake, contact us.
Who receives your data
We do not sell your personal data. Your username, profile photo, banner and bio, the date you joined, your number of followers, what you publish, and your prediction scores and rankings are visible to other visitors, as the service intends. Your email address, date of birth, gender and private messages are never shown to other members. Otherwise, your data is shared only with service providers who process it on our behalf and on our instructions:
- Hosting and delivery: OVHcloud (servers and databases, France), Cloudflare (network security and content delivery), Bunny.net (storage and delivery of some of the photos, videos and other files, EU);
- Google: Firebase (push notifications, crash reports, app analytics), Google Analytics, Google sign-in, and Google advertising services (AdSense, Ad Manager, AdMob) with its consent tool, together with the advertising technology partners listed in the consent window;
- Sign-in and purchases: Apple (Sign in with Apple, in-app purchases, notifications), Google Play (in-app purchases), Meta (Facebook sign-in), PayPal (payments);
- Advertising partners in the apps: Meta Audience Network, Pangle (ByteDance) and Unity Ads, through Google's ad mediation. They receive your device's advertising identifier and technical data only within the choices you make in the consent window, which lists every partner;
- AI services: AI model providers, reached mainly through OpenRouter, which passes each request to one of the providers it works with. They translate content, help moderation and power the TennisTemple AI assistant. They may not use what we send them to train their models; some may keep it for a limited time under their own policies. We send them only what each task needs, and never your email address;
- Email delivery: our own mail server, hosted by OVHcloud in France.
We may also disclose data when the law requires it, for example at the request of a court or a competent authority.
Transfers outside the European Union
Some of these providers are based in, or process data in, countries outside the European Union, in particular the United States; China, for some of the AI model providers; and Singapore and China, for one of our advertising partners in the apps (Pangle, owned by ByteDance). For most of them, those transfers rely on the EU-US Data Privacy Framework where the provider is certified, or on the European Commission's standard contractual clauses. The AI model providers we reach through OpenRouter are not yet covered by such a contract; we are working on putting one in place, or on moving the processing of members' content to a provider based in the European Union. In the meantime, we send them only what each task needs, never your email address, and they may not use it to train their models. You can ask us for a copy of the safeguards that apply.
How long we keep your data
- Your account and what you published: as long as your account exists. When you delete your account, it is erased after a 5-day period during which you can cancel. At that point your profile, photos and videos, comments, forum posts, likes, messages in group discussions and private conversations (including the other person's side of them) are deleted. Articles and news you published, your predictions and the prediction leagues you created stay online, without your name.
- Inactive accounts: an account not used for 3 years (not used while signed in, on the website or in the app) is deleted. The 3 years are counted from 5 October 2026 at the earliest, so no account is deleted for inactivity before 5 October 2029. We email you 30 days and 7 days before; using TennisTemple once while signed in keeps your account. Your private data is then deleted as for a deletion you request, but your comments and forum posts stay, shown without your name, so that the discussions they belong to still make sense. Accounts with an active subscription or unspent credit are not deleted for inactivity. If there is no email address on the account, it is deleted without notice.
- IP addresses and connection data (including which devices you signed in from): 12 months.
- Security logs (sign-ins, sensitive actions on your account): 24 months.
- Sessions: 30 days for visitors; up to 2 years for signed-in sessions.
- Device records: deleted after at most 2 years of inactivity, much sooner for one-off visits.
- Data sent to AI services: the content of each request is deleted from our logs after 7 days.
- Bug reports and suggestions: 2 years after the last activity on them (a message, a reply or a status change); their attachments 180 days after the report is closed.
- Audience measurement (Google Analytics, Firebase Analytics), if you agreed to it: 14 months after your last visit to the site or the apps. Each new visit restarts the 14 months.
- Error and performance reports: at most 30 days on our servers; app crash reports 90 days at Firebase.
- A copy of your data you requested: available for 7 days, then deleted.
- Records of the emails we sent you (address, delivery status): 12 months.
- Moderation records (removed content, bans, decisions on reports): 5 years, the limitation period for legal claims in France; for a ban, 5 years after it ends.
- Proof that you confirmed your age and accepted the terms when you signed up: kept while your account exists, then 5 years after it is deleted.
- Purchase records: until the end of the tenth full year after the purchase, as French accounting law requires (Code de commerce, art. L123-22), even after you delete your account; they are then deleted. Your unspent credit balance and any lifetime subscription are kept while your account exists; once it is deleted, they follow the same 10-year rule.
- Store purchase checks (the receipt your app sends us to confirm a purchase): 90 days.
- Ban-evasion fingerprints: until the ban ends, at most 5 years (see below).
Preventing ban evasion
When an account is banned, we keep a fingerprint of its identifiers to stop the creation of a new account meant to get around the ban: a one-way keyed hash (HMAC) of the email address and of the Google, Facebook, Apple or passkey sign-in identifiers, plus the device identifier and the subnet (not the full address) of the IP addresses used.
It is deleted when the ban ends, and in any case 5 years after it was taken, including for a permanent ban. It is kept for that time even if the account is deleted, because it is necessary to prevent fraud and abuse. Legal basis: our legitimate interest, and that of our members, in enforcing our terms of use and keeping the community safe from people who were banned.
Your rights
You have the right to:
- access your data and receive a copy of it in a reusable format (portability): in Settings › Download my data, signed in. The file is ready within a few hours and can be downloaded for 7 days;
- correct it: most of it can be changed in your settings, or ask us;
- delete it: in Settings › Delete my account. Deletion takes effect after 5 days, during which you can cancel. You can also ask us by email;
- object to processing based on our legitimate interest (see below), and restrict processing in the cases the law provides;
- withdraw your consent at any time (cookies, notifications, newsletters), without affecting what was done before;
- give instructions on what should happen to your data after your death (French law, Article 85 of the Loi Informatique et Libertés).
Right to object. You can object at any time, on grounds relating to your particular situation, to the processing we base on our legitimate interest (security, moderation, fixing the service, translation). We then stop, unless we have compelling legitimate grounds that override your interests, or need the data to establish, exercise or defend legal claims. You can stop newsletters and personalised advertising at any time, without giving a reason.
To exercise a right that has no setting, write to contact@tennistemple.com. We answer within one month; we may ask you to prove your identity first.
If you believe we have not respected your rights, you can lodge a complaint with the CNIL (Commission Nationale de l'Informatique et des Libertés), 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07, France — www.cnil.fr.
Children
You must be at least 15 years old to create a TennisTemple account, and you confirm it when you sign up. If we learn that an account belongs to a child under 15, we delete it. If you are a parent and think your child has created an account, contact us at contact@tennistemple.com.
Cookies and similar technologies
Cookies and similar technologies (local storage, device identifiers in the apps) are used for:
- Strictly necessary purposes: keeping you signed in, remembering your language and display settings, security. These do not require consent.
- Audience measurement: understanding how the site and apps are used (Google Analytics, Firebase Analytics).
- Advertising: showing ads, measuring them, limiting repetition and, if you agree, personalising them.
- Social networks: posts from X (Twitter) embedded in some articles, which X can use to set its own cookies. Embedded YouTube and Dailymotion videos are loaded only when you press play, and where the law requires consent and you have not given it, we first tell you that the player may set cookies. Our share buttons are plain links that send nothing to the network until you use them.
Where the law requires consent (the European Economic Area, the United Kingdom, Switzerland, and some US states and Brazil), all but the strictly necessary ones are used only after you agree through the consent window shown on your first visit. Elsewhere, they are active by default. You can accept, refuse or choose by purpose, and change your mind at any time with the "Manage my choices" button at the bottom of this page (in the apps: from the settings). Refusing does not block access to the site. Consent choices are kept for at most 13 months, after which we ask again.
You can also block or delete cookies in your browser settings; the site may then not work properly.
Contests
When we run a contest, we ask participants for the information needed to contact the winners and send their prizes (such as name and postal address). Taking part is optional. This information is used only for the contest and kept only as long as needed to run it and deliver the prizes.
Security
We protect your data with appropriate technical and organisational measures: encrypted connections, hashed passwords, access limited to the people who need it, and passkey or password confirmation for sensitive actions on your account.
Changes to this policy
We may update this policy. The date at the top shows the latest version. If a change significantly affects how we use your data, we will inform you by email or by a notice on the site before it takes effect.