Last updated: 10 April 2026

Privacy Policy

This Privacy Policy explains how TourneyMap, operated by Jokaero (“we”, “us”), collects, uses, and protects your personal data. We are based in Zurich, Switzerland, and comply with the Swiss Federal Act on Data Protection (nFADP) and, where applicable, the EU General Data Protection Regulation (GDPR).

1. Data We Collect

Account data

• Email address (required for account creation)
• Password (stored as a secure hash — we never see your plain-text password)
• NAF number and NAF name (optional, if you link your NAF membership)
• Display name (if you choose not to link a NAF account)

Profile data

• Home location (latitude/longitude — optional, used to calculate travel times to tournaments)
• Language preference

Usage data

• Tournament attendance status (Interested / Registered) per tournament
• Trip checklist items, types, and notes you create

Technical data

• Standard server logs (IP address, browser type, pages visited) — retained for up to 30 days

We do not collect payment data (the Service is currently free). We do not use tracking cookies or advertising technologies.

2. How We Use Your Data

• Providing the Service: displaying your trips, checklist, and attendance status
• Travel information: your home location is sent to Google Maps and Mapbox APIs solely to calculate travel times — it is not stored by those providers beyond the duration of the request
• Communication: sending transactional emails (account confirmation, password reset) via Supabase Auth
• Service improvement: aggregated, anonymised usage statistics

We do not sell your data. We do not use your data for advertising.

3. Legal Basis for Processing (GDPR)

• Contract performance (Art. 6(1)(b)): account data and usage data necessary to provide the Service
• Legitimate interest (Art. 6(1)(f)): security logging and fraud prevention
• Consent (Art. 6(1)(a)): home location (you can remove this at any time in your profile)

4. Third-Party Services

We use the following sub-processors to operate the Service:

Transfers to the USA are covered by Standard Contractual Clauses (SCCs) as permitted under GDPR Art. 46.

5. Data Retention

• Account and profile data: retained for as long as your account is active
• Checklist and attendance data: retained as long as your account is active
• Server logs: 30 days
• After account deletion: all personal data is permanently deleted within 30 days

6. Your Rights

Under the nFADP and GDPR, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data (via your profile settings)
• Delete your account and all associated data
• Export your data in a portable format
• Withdraw consent for home location processing at any time
• Object to processing based on legitimate interest

To exercise any of these rights, contact us at tourneymap@jokaero.com. We will respond within 30 days.

7. Security

Passwords are hashed using bcrypt. All data is transmitted over HTTPS. Database access is protected by row-level security policies (each user can only access their own data). We conduct periodic security reviews.

8. Children

The Service is not directed at children under 16. We do not knowingly collect data from anyone under 16. If you believe a child has registered, please contact us and we will delete the account promptly.

9. Changes to This Policy

We may update this Privacy Policy as the Service evolves. Material changes (e.g. new data categories, new third parties) will be communicated by email at least 14 days before taking effect.

10. Contact & Complaints

Data controller: Jokaero / TourneyMap, Zurich, Switzerland
Email: tourneymap@jokaero.com

If you believe your data protection rights have been violated, you have the right to lodge a complaint with the Swiss Federal Data Protection and Information Commissioner (FDPIC) at www.edoeb.admin.ch, or with your local EU supervisory authority if you are an EU resident.