Privacy policy
Every club owns its data. SetRally keeps it for that club, never uses it for another, and hands it back whenever the club wants.
Our three promises
- A club’s data belongs to the club. What the club enters, and what its players give it when they sign up, is the club’s.
- It serves that club only. SetRally doesn’t sell it, doesn’t use it for advertising, and never combines it with another club’s.
- The club takes it with it whenever it wants, on every plan, the free one included: see Export your data.
Who is responsible
The SetRally service — the setrally.com site and the app.setrally.com app — is operated by Badminton À Montréal Inc. (Québec enterprise number 1181602849) under the name SetRally Software. SetRally was born at BAM!, a Montréal badminton league that uses it like any other club: no club, BAM! included, has access to another club’s data.
Two roles share the data. The club — the organizer who creates its events — decides what information it collects about its players and what it uses it for; SetRally processes it on the club’s behalf, to run its events. For organizers’ own accounts, SetRally is directly responsible. The terms of use set out these roles.
Person in charge of the protection of personal information: [email protected].
What SetRally keeps
For organizers
Name, email, language, and each person’s role in their organization. Passwords are never stored as such — only a fingerprint from which they can’t be recovered — or, if you sign in with Google, the identifier Google sends us. The console also records who did what — who entered or corrected a score, for instance — so the club can check it.
For players
What the club enters, or the player fills in when signing up: name, email (optional), team or partner, gender when a division requires it or the club asks, and the official level or ranking when the club follows one. Then what the season produces: availability replies, attendance, matches and scores.
Registrations and payments
The option chosen, the amount, where the payment stands, the note left for the club and, if there are any, acceptance of the club’s own terms. Online payments go through Stripe, on the club’s account: SetRally never sees or stores a card number.
The photo a player adds to their player card stays on their device: it is never uploaded.
What is public
An event’s public page, the Arena and the players’ link show, without signing in, players’ names, their teams, the divisions and the results — like a results sheet pinned up in the gym. The sign-up form says so when you sign up.
Never shown publicly: email addresses, gender, players’ official levels, payments and notes.
What it is used for
Running the club’s events: sign-ups, placement, schedule, scoring, standings. Sending the emails the club triggers — invitations, reminders, receipts — and the sign-in link you ask for. Taking online payments, keeping bots off the sign-up form, and answering you when you write to us.
Nothing else: no advertising, no sale, no promotional email sent to players.
Who it is shared with
Only with the providers the service needs in order to work, and only for that need:
- Cloudflare — hosts the site, the app and the database, and checks on the sign-up form that a person is filling it in (Turnstile).
- Stripe — online payments, on the club’s Stripe account.
- Resend — sending emails.
- Google — Sign in with Google, only if you choose it; and the site’s and app’s fonts, which your browser downloads from Google, so Google sees your IP address.
These providers may process data outside Québec, notably in the United States. Before entrusting them with this information, SetRally assessed the privacy-related factors of that transfer, as the law requires. SetRally discloses information to an authority only when the law requires it.
Test copies
To diagnose a problem, the SetRally team may copy a club’s data into its test environment. Email addresses there are always replaced with fictitious ones, so no message can go out from it; names and results stay.
Between clubs
A person who plays for two clubs has two separate records, and nothing one club enters serves another. If SetRally ever offered something that crosses clubs — a rating that follows a player from one club to another, for instance — it would come with a new version of this policy, and only with the consent of the players concerned.
Export your data
In the console, Settings → Your data downloads an event’s data as files a spreadsheet opens: players, registrations and payments, results and, for a league, standings. On every plan, at any time, without asking us. The details are in the guide.
Retention and deletion
- Data stays for as long as the club uses SetRally.
- An organizer can delete an event at any time: its divisions, registrations and results are erased.
- To delete a whole organization or an account, write to us: for now it is done by hand.
- The database keeps a 30-day history so an error can be repaired; erased data leaves it within 30 days.
Your rights
You can ask to see the information about you, to have it corrected or erased, to receive a copy in a common format, and to withdraw your consent. Ask the club that signed you up, or write to us at [email protected]: we answer within 30 days. If the answer doesn’t satisfy you, you can turn to Québec’s Commission d’accès à l’information.
A player under 14 is signed up with the consent of their parent or guardian.
Cookies
The app only uses the cookies it needs: keeping you signed in, remembering your language, remembering which player you are on a players’ link, and completing a Google sign-in. Your browser also keeps a few display preferences. No advertising cookie, no audience measurement.
Security
Everything goes over HTTPS. Passwords are stored as a salted fingerprint, never in plain text. Each organization sees only its own data, and in the console only the club’s administrators and managers can change an event’s settings and export its data. Payments go through Stripe.
Changes
Any change to this policy is published here with its date. A significant change is announced to organizers before it takes effect.