What Robin knows about you.

Robin is run by Oky Nugroho Kusumo, a private individual based in Sweden, who is the data controller for everything described on this page. Questions, corrections, and removal requests all go to [email protected].

Robin has no accounts, so it never asks for an email address, password, or profile. When someone creates a party, Robin stores exactly what’s needed to run it: the party name, the optional details the organizer types in (start time, venue name and address, court numbers, notes, join code), player names as entered, an optional skill level the organizer can set per player (1 to 5, used only to balance matches), the format settings, and the match scores.

The legal basis is Robin’s legitimate interest in running the party the organizer asked it to run. Nothing is stored for any other purpose.

Party pages live behind unguessable link tokens and are excluded from search engines. Anyone with the link can see the party (that’s the product), so use first names or nicknames if that matters to your group. If you organize a party, you are usually the one typing other people’s names in: let your group know the link shows their name and scores to anyone who has it.

Two things, both functional: your theme preference (light/dark/auto) and, if you tap “this is me” on a party, a note of which player you claimed, so the page can highlight your matches. Both stay in your browser’s local storage, never leave your device, and disappear if you clear site data. When a party starts with more sign-ups than court spots, the organizer’s browser also briefly notes who got benched (session storage, cleared the moment the notice shows) so it can tell them. Same deal: never leaves the device. Robin sets no advertising or tracking cookies.

Robin currently runs no analytics at all. A privacy-friendly, cookieless analytics tool (aggregate page counts only, no individual profiles, no cross-site tracking) is planned. This page will be updated when it ships.

Robin doesn’t sell, rent, or share any data. There are no advertisers and no data partners. Three companies do handle data on Robin’s behalf, because a website cannot run without a server and a tip cannot be paid without a card processor:

Hetzner (Germany) hosts the server and the database. Everything Robin stores stays on that server, inside the EU.

Cloudflare sits in front of the domain and terminates the secure connection, so it sees each request and the IP address it came from, the way any web host does. Cloudflare is a US company certified under the EU-US Data Privacy Framework, and it stores no party data.

Stripe handles tips. When you tip, you leave Robin for a Stripe checkout page; the name, email address, and card you enter there go to Stripe directly and never reach Robin. Stripe is its own data controller for that payment and its own privacy policy applies. Robin only sees that a tip was made and the receipt email you chose to give, so it can reverse the tip if you ask.

To keep bots from flooding the service, Robin rate-limits requests by IP address. The limits live in memory and are forgotten within minutes. When a limit is hit, the IP address is written to the server’s technical log, which is capped in size and overwrites itself automatically. These logs exist only to keep Robin up (legitimate interest), are never used to profile anyone, and are never joined to party data.

A party deletes itself after three days of inactivity, so nothing sticks around by default. Want a party, or your name in one, gone sooner? Email [email protected] with the party link and it will be deleted.

One honest caveat: the database is backed up nightly and each backup is kept for 14 days, so a deleted party can linger in a backup for up to two weeks before it expires. Backups are only ever restored to recover from a server failure, never to bring a deleted party back.

Under the GDPR you can ask what Robin holds about you, have it corrected or deleted, restrict or object to how it is used, or get a copy. Email [email protected] with the party link and you will get an answer within a month, usually much sooner.

If you think Robin is mishandling your data, you can complain to the Swedish Authority for Privacy Protection (IMY) at imy.se, or to the data protection authority where you live.