1. What are cookies?

Cookies are small text files that your browser stores on your device. They allow us to recognize you between page visits (for example, to keep you logged in) or to collect anonymous usage statistics.

We also use a small number of similar technologies alongside cookies, for example local/session storage in your browser to hold short-lived app state (like your last map position). Where this policy says "cookies," it covers these similar technologies too, unless stated otherwise.

Cookies are separate from the location permission your browser asks for. Pattle uses your device location to identify your city and show courts near you. Your browser shares your location with us only after you grant permission, not through a cookie. See Section 3.

2. Which cookies we set

Strictly necessary (no consent required)

• Auth session cookie: keeps you logged in after signing in, issued by Pattle's own backend. Lifetime: until logout or a maximum of 7 days.
• CSRF token: protects forms against Cross-Site Request Forgery. Lifetime: session.
• Locale cookie: remembers your language/region preference on Pattle. Lifetime: 1 year.
• Cookie consent cookie: remembers your cookie banner choice so we don't ask again on every visit. Lifetime: 1 year.

Optional (consent required)

We currently do not use any analytics or advertising cookies. If we introduce them, we will ask for your consent beforehand via a cookie banner, and you can withdraw your consent at any time.

3. Location data (not a cookie, but related)

If you allow it, Pattle uses your device's location to work out which city you are in and to show you the padel courts near you. We collect this through your browser's or device's location permission, a separate mechanism from cookies that you grant or deny directly, not a setting stored in a cookie.

• You can turn location access on or off at any time in your browser or device settings.
• If location access is off, you can still use Pattle. The app will use the home city in your profile, and you can browse courts by city on the map.
• We do not use your location to record your movements or build a location history.
• Full details on what location data we collect and why are in our Privacy Policy, Section 1.7.

The Pattleground map itself is drawn using base map tiles from OpenStreetMap and CARTO. These are map-rendering sources, not location-sharing services: they supply the background map image and do not receive your device location. Loading map tiles does mean your browser sends a direct request to OpenStreetMap's and CARTO's servers, which exposes your IP address to them as part of normal tile delivery. Standard tile loading does not involve cookies.

The courts shown on the map are compiled from OpenStreetMap and Foursquare Open Source Places. That data is downloaded and processed by Pattle's servers, not by your browser. Your browser never contacts Foursquare, Hugging Face, or OpenStreetMap's Nominatim geocoding service, and none of them sets cookies on your device or receives your location or IP address.

4. Third-party cookies

Pattle does not currently allow any third party to set cookies on the Service.

• OpenStreetMap / CARTO receive your IP address as part of the request your browser makes to load map tiles. No cookies are set as part of standard tile loading. This is what renders the base map that the Pattleground pins are drawn on.

If we add a third-party service that sets cookies, it will be named here before it goes live.

5. Blocking cookies

You can block or delete cookies in your browser. Please note: if you block strictly necessary cookies, you will not be able to use Pattle (login will not be possible). Blocking or deleting cookies is separate from your location permission. See Section 3 for how to control that.

6. Changes

If we change our cookie setup (for example, introduce analytics or a new third-party provider), we will update this page and communicate the change via a cookie banner.

7. Contact us

Pattle
Email: hello@playpattle.com

For questions about how we handle personal data more broadly, including location data, see our Privacy Policy or contact us at the address above.