Privacy notice
Updated 15 October 2026
Kendo Taikai is a free hobby service for organising kendo tournaments. This notice covers platform accounts and profiles. The organiser’s notice on each event card explains that event’s use of player information.
Who is responsible?
Platform contact and operator: Felix Bourgeau, hello@kendo-taikai.com. Contact this address for questions, requests or the operator’s correspondence details. Each event identifies its organiser and public privacy contact. Event organisers decide why they collect event information and must explain their purposes, lawful basis and retention. The exact responsibilities depend on the activity; an organiser label does not itself settle legal controller or processor roles.
Information and purposes
- Accounts: email, sign-in identifiers and adult/terms acknowledgement, to register, authenticate and operate your account. Passwords are handled by the authentication provider and are not returned by this app.
- Player profiles: required nickname, dojo and avatar; optional first name, last name, age, gender, kendo grade, description, phone and contact email. You can leave optional information blank.
- Events: enrolments, participant display names, dojo, avatars, match schedules, scores and standings, to run tournaments and keep results.
- Imported entries: an organiser may supply details from their registration list or spreadsheet. Ask the organiser about the source and purpose. They must give you their notice when collecting information and meet the applicable notification requirements when obtaining it elsewhere.
- Technical information: necessary session data, requests, IP addresses and provider security logs may be processed to deliver and protect the service. Do not put medical details, identity documents or other sensitive information in profiles or event descriptions.
Legal grounds
We use information necessary to provide the account service you request under the terms (performance of a contract). Service security, abuse prevention and handling requests rely on legitimate interests, subject to your rights and interests. Optional profile disclosure is your choice: visibility starts private and you can change it or clear the field. Where consent is required for a particular optional disclosure, you may withdraw it by changing that choice or contacting us. Accepting the terms is not blanket consent to all processing. Event organisers must identify their own applicable lawful bases, particularly for junior entries and any public results.
Who can see what?
Published event descriptions and organiser privacy contacts are public. Your tournament display name, dojo, avatar and results are visible to the host and approved participants and can appear on event scoreboards or in result exports. Choosing full-name display makes your first and last names visible there. Profile visibility controls allow private, organiser-only or participant-visible details. “Public” profile details are available to approved participants within the event; the event display and exports can be seen more widely.
Your saved profile phone and contact email are not shared with event participants or hosts through the player profile view. Imported phone and email are visible only to the importing event host. Junior imports use nickname display and a built-in avatar; optional details are excluded from other players’ profile views. Organisers must use guardian contact details when needed and arrange guardian involvement outside the app. We cannot verify parental responsibility from a checkbox.
Court operators
Organisers can create private links for a scorekeeper, timekeeper or combined operator. A link permits access to match names, dojo, scores and clock controls for its assigned court only. Links expire after 24 hours and can be revoked by the organiser. Treat them as private credentials. Scoring records include the operator role and timestamp. No participant contact details or account identifiers are supplied to these operator views.
Service providers and countries
Supabase provides email authentication; the project is configured in Ireland. Cloudflare hosts the app, database and uploaded files. The database has EU jurisdiction; uploaded file storage uses a Western Europe placement without an EU-only jurisdiction restriction. Resend delivers account confirmation and password-reset emails. Messages to hello@kendo-taikai.com are forwarded through Cloudflare Email Routing to the operator’s Gmail mailbox. Google processes those support messages. Providers may also process support, security or operational data in other countries. An Ireland authentication region does not mean all processing stays in the EU. Contact us for the applicable provider and international-transfer information; provider agreements, subprocessors and transfer safeguards require operator review before wider rollout.
How long information stays
Saved profiles remain while the account is used, until changed or removed following a request. There is currently no automatic inactive-account deletion. Event entries and results remain until the organiser deletes the event or a privacy request is resolved. Organisers must state an appropriate event retention period and review it after completion. A “Clear private roster details” control removes imported optional details while retaining the nickname, dojo, avatar and results. It is a manual control, not scheduled expiry.
Temporary guest access expires after 48 hours. Expired guest records are removed on subsequent guest registrations; tournament entries and results remain with the event. Uploaded pictures and generated report files do not currently have automatic storage expiry. Deleting an event blocks access to its reports; storage cleanup and any provider backups/logs must be addressed with the operator. Previously downloaded files or photographs of scoreboards cannot be recalled automatically.
Your choices and rights
Edit your profile and visibility in the app. Under “My data”, download a JSON copy of your own app profile, account information, entries and results. It does not include provider security logs or other players’ information. For a full access request, correction, erasure, restriction, portability where applicable, consent withdrawal or objection to legitimate-interest processing, write to hello@kendo-taikai.com. Include the event name if relevant; do not send a password. We may need proportionate identity checks and will explain any legal reasons for retaining information. Rights requests are normally answered within one month; any lawful extension will be explained.
Account deletion is a manual request, including removal of the authentication account. Emailing a request does not instantly delete records. For imported or junior entries, contact the event organiser or ask us to help route your request. You can complain to your local data protection authority, including the Dutch Autoriteit Persoonsgegevens or the Finnish Data Protection Ombudsman.
We do not use app data for advertising or automated eligibility decisions. Tournament pairings and standings follow the event settings; the organiser reviews approvals and results.
Tournament backup files
Organisers can download a tournament backup containing roster display information, matches, scores, photos, imported private player details and profile details already visible to the organiser. Backups exclude personal sign-in credentials and account links. Organisers must keep downloaded files private and apply their event retention policy to them. Restoring creates a separate, unpublished event with paused clocks and no existing court access links. Previously downloaded reports are not included; they can be generated again. Player accounts are not automatically enrolled in restored copies.
Optional Google sign-in and event links
Where enabled, Google sign-in uses Supabase Auth to verify your identity. We use your verified email and account identifier for access; we do not request access to Gmail, Drive or your contacts. Existing profile and tournament access is tied to the verified account identifier. Published event links and QR codes show event information and the organiser’s public privacy notice; they do not expose the player roster or grant court operator access.