Privacy Policy

• Account: your email address and password — or, if you sign in with Google, your Google name, email and profile photo. Passwords are stored encrypted by our sign-in provider; we never see them.
• Profile (you choose what to fill in): name, username (@id), photo, date of birth, gender, nationality, height, bio, sports with levels and positions, cities and area, phone number, social media handles, favourite teams and how you found us.
• Location: if you allow it at sign-up, your approximate home location, used to suggest games near you. The “near me” filter on the games page uses your location in your browser only and does not send it to us.
• Activity: games you create or join, friends, messages, communities, reports and blocks, notifications and whether you are online.
• Payments: handled by Stripe. We keep what you paid for, the amount and its status. We never receive or store your card number.
• Device storage: we store your sign-in session and display settings (such as dark mode) in your browser. To count visits we keep a random visitor number in your browser and note the pages seen — no IP address, no advertising trackers, nothing shared with anyone.

Other players only see your @id, photo, sports, levels, city and number of games played. Your name, email, phone, date of birth, gender and location are never shown to other players. Game organisers are shown by their @id. Our admins can see full profiles to run the service, approve games and keep it safe.

• To run your account, games, bookings, wallet, payments and refunds.
• To send you notifications about your games, friends and messages (you can change these in your settings).
• To keep the community safe: reviewing games before they go live, handling reports and preventing fraud.
• To fix problems and improve the service.

We do not sell or rent your personal data, and we do not use it for third-party advertising.

• Supabase — database, sign-in and file storage (servers in Singapore).
• Vercel — website hosting (servers in Singapore).
• Stripe — card and PromptPay payments and refunds.
• Google — sign-in with Google (if you choose it), venue details (ratings, opening hours) and Google Analytics (anonymous visit statistics: pages viewed, device, country — no name or email).
• OpenFreeMap / OpenStreetMap — map tiles.

• Every page and every connection to our servers is encrypted (HTTPS).
• Card and PromptPay payments are handled by Stripe. We never see or store your card number.
• Passwords are handled by our sign-in provider (Supabase Auth). We never store them in plain text.
• Database access rules are checked for every request: a player can only read and change their own private data.
• Other players only see your @id, photo, sports, level and city — never your name, email, phone or date of birth.
• Full profiles can only be opened by ThaiSportsHub admins, to run the service and keep it safe.

We keep your account data for as long as your account exists. When you delete your account, your profile and activity are deleted. Payment records are kept for as long as the law requires.

Under Thailand's Personal Data Protection Act you can ask to see, correct, export or delete your data, object to how we use it, or withdraw your consent. You can edit your profile at any time, and delete your account in the app (Edit profile). For anything else, email admin@thaisportshub.com — we reply within 30 days.

Venue names, addresses, ratings and opening hours come from public listings, including Google. If you own a venue and want details changed or the listing removed, email admin@thaisportshub.com and we will action it.

If we make important changes we will update this page and the date at the top, and tell you in the app when it matters.