Privacy Policy

1. Information we collect

A. Account information

When you create or use a Bowls Hub account, we may hold:

• email address
• an account identifier issued by our authentication provider
• optional display name, username and home club
• account preferences such as measurement units, date format and practice defaults
• password credentials managed by our authentication provider (we do not store your password in plain text in Bowls Rating application tables)

B. Bowls Hub information

If you use Bowls Hub, we store training and related content you create under your account, which may include:

• practice sessions, drills and bowl measurements
• match records and end/bowl detail you enter
• planner items and related notes
• drill favourites and settings
• optional free-text notes and similar user-entered content supported by the product

C. Public pennant information

Bowls Rating independently processes publicly available Victorian metro pennant and related sporting records. That information may include player names, clubs, match participation and results. We use it to publish public results, player and club profiles, ratings, ladders and related analytics. Publicly sourced sporting records can still be personal information when they identify an individual.

D. Feedback and data correction requests

Our Feedback / Report a data issue form collects a required message and category. Optional fields are name, email, and page or context. We may also record a submission time and, for abuse prevention, limited technical request information such as IP address used for rate limiting.

E. Technical and analytics information

We use Vercel Web Analytics for aggregate traffic measurement on the production site. It may record page or route, referrer, approximate geography, device type, browser and operating system. We do not use Google Analytics, advertising pixels, session replay or marketing trackers on Bowls Rating. Our application excludes or redacts sensitive authentication URLs and private Bowls Hub record identifiers before analytics events are sent. We do not intentionally send email addresses, user IDs, display names or passwords to analytics.

F. Club Admin information (authorised users only)

Where a club grants Club Admin or related staff access, the service may store club operational information such as club memberships and roles, member roster contact details held for that club, membership renewal campaign records, club settings and related audit activity. Creating a normal public Bowls Hub account does not grant Club Admin access.

2. How information is collected

• directly from you when you sign up, sign in, update settings or use Bowls Hub
• automatically as needed to operate and secure the service (for example session cookies for authentication, and rate-limiting metadata for feedback)
• from publicly available pennant and result sources we independently process
• from feedback and data-issue submissions
• through Vercel Web Analytics page-view measurement on production
• from authorised club administrators or staff when they enter or manage club-related records

3. Why we use information

We use personal information to:

• create, authenticate and secure accounts
• provide private Bowls Hub practice, planner, match and analytics features
• save preferences and training content you choose to store
• provide public pennant analytics, profiles, results, ratings and ladders
• respond to feedback and data correction requests
• send transactional authentication emails (such as confirmation or password reset)
• deliver club membership notices and related club-admin email where that feature is used
• measure site usage and improve reliability and performance
• detect abuse, spam and security problems where applicable

We do not use your information for advertising networks or cross-site marketing pixels.

4. Public information versus private Bowls Hub information

Public: ratings, reconstructed ladders, club and player profiles, and results derived from publicly available pennant records are published on the website.

Private: your Bowls Hub practice sessions, planner items, matches you record, favourites, preferences and account details are treated as private to your account under current functionality. Sharing of personal Bowls Hub training data with other users is not currently enabled.

Club Admin records are visible to authorised club staff according to club roles and permissions, not to the general public.

5. Analytics

Vercel Web Analytics provides aggregate statistics such as visitors, page views, popular routes, referrers, approximate location and device or browser information. According to Vercel’s product documentation, Web Analytics is designed around aggregated measurement and does not use third-party advertising cookies for cross-site tracking. Visitor sessions are identified using a hash derived from the request and are not retained permanently as a long-term profile (Vercel documents a short session lifespan).

Bowls Rating’s application also filters analytics payloads so authentication exchange routes are not tracked, sensitive query parameters and URL fragments are stripped, membership notice tokens are redacted, and private Hub detail URLs are collapsed to route shapes (for example /practice/sessions/[id]).

6. Service providers

We use service providers that are necessary to operate Bowls Rating. They are not affiliated with Bowls Victoria or BowlsLink. Current categories include:

• Vercel — website hosting and Web Analytics
• Supabase — authentication and storage of account and service data, including Bowls Hub and Club Admin data where those features are used
• Resend — used to deliver transactional emails such as account confirmations, password resets, invitations, feedback messages and certain Club Admin notices

Providers only receive the information needed to perform their role.

7. Overseas processing

Personal information may be processed by infrastructure and service providers that operate outside Australia. The exact countries used for hosting, databases and email delivery depend on provider configuration and may change. We do not list specific countries here unless they can be confirmed for the live service. If you need more detail about processing locations, contact us using the Feedback form and we will provide the information we can confirm.

8. Data security

We take reasonable steps to protect personal information, including authenticated access to Bowls Hub, database access controls that limit users to their own training data, password management through our authentication provider, and permission checks that separate ordinary accounts from Club Admin functions. Analytics payloads are filtered to avoid sending secrets and private record identifiers. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. Data retention

We retain information while it is needed to provide the service, respond to requests, and meet legitimate operational or security needs. We do not currently publish a fixed deletion schedule for every data category. If you ask us to delete an account or specific personal information, we will consider the request and action it where we can do so without breaking legal or security obligations, or where public pennant records must remain available as part of the public analytics service.

10. Access, correction and deletion

• You can update many profile and preference fields yourself in Bowls Hub Settings when signed in.
• You can change your password in Bowls Hub Security settings when signed in, or use the password reset flow when you are not signed in.
• There is currently no self-service account deletion button. To request access, correction or deletion of account information, use the Feedback form (for example under hub-access or with a clear privacy request in your message).
• To report incorrect public pennant, player, club or result information, use Feedback / Report a data issue.

11. Privacy questions and complaints

If you have a privacy question or wish to make a privacy complaint, contact us through the Feedback / Report a data issue form and clearly mark your message as a privacy request or privacy complaint. Include an email address if you want a reply.

We will review privacy concerns and respond as reasonably practicable using the contact details you provide. We do not publish a fixed response timeframe on this page.

12. Changes to this policy

We may update this Privacy Policy as Bowls Rating changes. The latest version and last updated date (9 August 2026) are shown on this page.

13. Contact

Contact Bowls Rating about privacy via Feedback / Report a data issue. Related terms of use are available on the Terms of Use page.