Your data in MAGMA.

Privacy notice for the MAGMA PADEL test. Updated 22 October 2026.

Who runs this test

This is a test community project for padel players in Phuket. The project administrator and contact for account or data requests is alexeos550@gmail.com.

What we store

Google sign-in provides your account identifier, name, email and profile photo. Google handles your Google password; MAGMA does not receive it. Authorised staff may also use a separate MAGMA email and password, verified by Supabase Auth. This does not change the Google password. You can add a photo, area, languages, age, a self-assessed playing level and a short profile. An authorised administrator can confirm or revoke a playing level, with a recorded reason and time. We also store games you create or join, chat membership, messages, read markers, blocked accounts and friend requests or accepted friendships. Contact suggestions use the dates and number of messages in your own direct conversations.

Who can see it

Signed-in members can see the profile details you publish and shared games. Conversation history is available to its members. A friend request or friendship is visible only to its two participants; we do not publish your friend list to other members. Project administrators can manage the service and investigate support requests. Messages are protected by server access rules; this test does not provide end-to-end encryption.

Administrator workspace

The protected staff workspace shows account email, account dates and last sign-in, activity counts, playing-level history and notification subscription summaries. It does not show message bodies, push endpoints or encryption keys. Administrative level decisions and service-notice jobs record the staff account, reason, affected accounts, changes and time in an audit log. Notification status records attempts and provider responses; it does not prove that a notice appeared on a phone.

Tournaments and coaching requests

We store tournament rosters, organiser admission decisions, fixed pairs, match scores and standings. Signed-in members can see live and completed tournaments, participant names and playing levels. Drafts and cancelled tournaments are available only in the staff workspace. Tournament history may retain participant name snapshots separately from the current profile; contact the administrator about correction or removal.

A coaching request stores your goal, preferred date and time window, area, language, format, note and processing status. It is visible to you and authorised staff. Internal staff reasons are not shown to other players. The request goes to the MAGMA team for coordination; it does not book an example coach, reserve a court or take a payment. Tournament and request changes are recorded in the protected administrative audit.

Confirmed tournament results calculate a player rating from 1 to 7. We store the result confirmation, rating calculation history and current rating. Signed-in members can see player ratings and match contributions. A corrected or cancelled result causes a recalculation. Playing-level review and community rewards are separate; administrators can review calculation events in the audit log.

Why we use it

To sign you in, help players arrange games, deliver messages between devices and maintain the test. We do not request access to Gmail, Google Drive, contacts or your precise location.

Service providers

Cloudflare serves the application. Supabase handles authentication, the database, chat delivery and uploaded photos. The primary Supabase database is in Singapore; provider infrastructure and logs may involve other countries. Google handles sign-in. Providers also process technical information needed to operate and protect their services.

Optional notifications

If you enable notifications, we store your device push endpoint, its notification encryption keys, your chosen language and the account linked to that subscription. Apple, Google or Mozilla delivers notifications depending on your browser. The encrypted notification contains a generic new-message notice, account and conversation identifiers and an unread-conversation count; it does not include message text or the sender's name. Chat delivery metadata older than seven days is cleared when the chat notification service next processes messages. Administrative audit and service-notice delivery records remain until administrator cleanup or the end of the pilot. Your browser also stores the current account identifier to keep notifications separate when accounts change. You can disable notifications on this device from the bell menu or your device settings. Signing out revokes this browser's subscription; expired subscriptions are removed when detected.

Service notices from the MAGMA team require a separate account setting, off by default. Enabling chat notifications does not enable these notices, and an administrator cannot opt in for you. You can withdraw this consent in the notification settings. A service notice uses fixed generic text, account and notice identifiers and a link to an allowed app section. It contains no chat text or internal administrator reason and does not increase the unread-chat badge.

Confirmed tournament results create a private in-app notification for each participating player. It stores the confirmed score, rating before and after confirmation, match contribution and read status. Corrections or cancellations mark earlier notices as superseded. Match-result push is on by default as an operational account preference, but delivery still requires your device notification permission and an existing subscription. You can turn it off separately in notification settings. These encrypted pushes may show your team score and rating change on the lock screen, with identifiers to open the match. They contain no chat content, player names or internal staff reasons and do not change the unread-chat badge. Delivery retries expire after 24 hours; stored notice history and delivery records remain until administrator cleanup or the end of the pilot.

Your choices

You can edit your profile, disable new direct-chat invitations, block a player and sign out. Your browser stores a sign-in session, language preference and a local reminder setting if you dismiss the notification suggestion. The staff workspace also stores hashed command fingerprints and random retry identifiers in tab storage to prevent duplicate actions; it does not save passwords or reasons there. You can accept or decline friend requests, cancel a request or remove a friend. Blocking also removes that relationship. For a data copy or account deletion, contact the administrator from the email used to sign in.

During the test

Data stays in the test service until account deletion, administrator cleanup or the end of the pilot. Avoid sending sensitive documents or payment details. Court reservations and payments are not provided by this test.

Return to MAGMA PADEL