The short version
- SIDEGLASS is private. Nobody signs themselves up: a club's admin creates every account.
- The data belongs to your club. The club decides what is collected and why; we run the software that holds it, on the club's behalf.
- We do not sell data, show ads, or track you across other apps and websites. There are no advertising or analytics tools in the website or the app.
- Marketing email only reaches players who agreed to it, and every one carries a one-click unsubscribe.
- Files are kept for a set time and then deleted, not forever.
Who is responsible for your data
Your club is the data controller. It decides whose data goes into SIDEGLASS and what it is used for: running its rota and payroll hours, its academy, its bookings and its email to players. Questions about why the club holds something about you, or requests to see, correct or delete it, can go to the club directly, or to us and we will pass them on.
Fausto Genga (SIDEGLASS) is the data processor. We store and process the data only to provide the service to the club, on its instructions. We are the controller only for what we need to run SIDEGLASS itself: keeping accounts secure, sending sign-in invitations and keeping the service working.
What data SIDEGLASS holds
If you work at a club (admins, managers, coaches and staff)
- Account: your name, email address, role and the areas you work in (for example bar or academy). Your password is stored only as a one-way hash; nobody, including us, can read it.
- Work: the shifts you are rostered on, your check-ins and hours, swap requests, the tasks you raise, are sent or reply to, and the notifications you receive.
- Shift reports: notes and the photos you attach, such as the state of the bar when you open and close, and till tickets.
- Coaching (coaches): the courses and lessons you teach, attendance, and the notes you write about players.
If you are a player or member of a club
- Contact details: your name, email address and phone number, as the club holds them in Playtomic (its booking system) or imports them itself.
- Activity at the club: bookings, the courses and lesson packs you are enrolled in, attendance, and padel federation licence details where the club handles them for you.
- Coaching notes: what your coaches write about your game. These notes are internal to the club's coaches and are never sent to you or anyone outside the club.
- Email preferences: whether you agreed to marketing from the club, which campaigns you were sent, and whether you unsubscribed.
- Forms you fill in: feedback you send the club through a link, or a job application if you apply to work there.
In the mobile app
- Camera and photos: used only when you choose to take or attach a photo to a shift report. The app asks first, and you can refuse.
- Notifications: if you allow them, the app registers a push token for your phone so SIDEGLASS can tell you about tasks and shifts. You can turn them off at any time in your phone's settings.
- The app does not record audio, use your location, or read your contacts.
On the website
The website sets only the cookies that keep you signed in. They are strictly necessary, so there is no cookie banner. There are no analytics, advertising or tracking cookies.
How the data is used
- To run the club: rotas, hours, tasks, the academy, bookings and the inbox.
- To tell people what they need to know: task and shift notices in the app, on the website and by email.
- To send the club's email to players. Marketing goes only to players who agreed to it, have not unsubscribed and whose address has not bounced. Messages about a course you are enrolled in are sent as part of that course, and still respect your preferences link.
- To keep the service secure and working.
We never use club data for our own marketing, never sell it, and never send it to AI services or use it to train AI models.
Who else processes the data
We use a small number of providers, each only to deliver the service:
| Provider | What for | Data involved |
|---|---|---|
| Convex, Inc. | The database and file storage behind SIDEGLASS | All of the data above |
| Vercel, Inc. (United States) | Hosting the website | Requests to the website, passing through |
| Resend (United States), through the club's own account | The club's email to players | Recipient address and the message |
| Playtomic | The club's booking system, which SIDEGLASS reads from | Players, bookings and consent, as held in Playtomic |
| Expo, with Apple and Google | Delivering push notifications to phones | Push token, notification title and text |
| Brevo (France) | Sign-in invitations and staff notice emails | Recipient address and the message |
Where a provider handles data outside the European Union, the transfer is covered by that provider's data processing terms, which use the European Commission's Standard Contractual Clauses.
How long it is kept
- Photos of the premises in shift reports: six months.
- Till tickets and invoices: seven years, the Belgian bookkeeping period.
- Everything else is kept while the club uses SIDEGLASS and needs it. When someone leaves, their access ends at once; the club keeps the records it is required to keep, such as hours worked.
A club can shorten these periods. When a club stops using SIDEGLASS, its data is deleted.
How the data is protected
- Everything travels over encrypted connections (HTTPS).
- Each person sees only what their role allows: a coach sees the academy, bar staff see the bar, and coaching notes never reach players.
- Passwords are hashed, and the keys a club connects to other services (such as Playtomic or Resend) are stored encrypted.
Your rights
Under the GDPR you can ask to:
- see the data held about you, and get a copy;
- correct it if it is wrong;
- delete it (see Delete your data);
- restrict or object to how it is used, including stopping all marketing with one click from any email.
Ask your club, or write to faustogengaalfaro@gmail.com. We answer within one month. You can also complain to the Belgian Data Protection Authority at dataprotectionauthority.be.
The club's legal basis is usually the employment or service contract (for staff), the membership or course you signed up for (for players), its legitimate interest in running the club, and your consent for marketing.
Children
The app and the staff accounts are not meant for anyone under 16. A club's academy may include junior players; their details are held by the club, which is responsible for the consent of their parents or guardians.
Changes
If something material changes, such as a new provider or a new kind of data, we update this page and the date at the top.
Contact
- Publisher and processor: Fausto Genga, Belgium
- Email: faustogengaalfaro@gmail.com