← Back to Incredoball

Privacy Policy

Last updated: September 12, 2026

This page explains what Incredoball Sports ("Incredoball," "we") collects through incredoball.com when you book a court or activity, and what we do with it. We keep this short and specific to what the site actually does — no boilerplate about things we don't do.

What we collect

• Account details: your name, email address, and (if you provide one) phone number.
• Sign-in method: either a password (stored as an irreversible hash — we never see or store your actual password), or, if you use "Continue with Google," a verified identity from your Google account. We never see your Google password.
• Booking details: the date, time, and court or activity you book, and which payment method you chose.
• Payment screenshot: the GCash/Bank Transfer proof-of-payment image you upload when submitting a booking request, so staff can verify your payment.

We don't collect payment card numbers, bank account credentials, or any government ID.

How we use it

• To create and manage your account, and to confirm, reject, or otherwise handle your booking requests.
• To email you: a verification code when you sign up, a password reset code if you request one, and a receipt/confirmation for each booking.
• To automatically check whether your uploaded payment screenshot looks consistent with the booking amount, as a heads-up for staff reviewing your request. This never blocks your submission — a human always makes the final call.
• To prevent automated abuse of the booking form (see "Cloudflare Turnstile" below).

Who we share it with

We don't sell your data, and we don't use it for advertising. The following services process data on our behalf, strictly to run the site:

• Supabase — hosts our database and stores your uploaded payment screenshots.
• Resend — delivers our transactional emails (verification codes, reset codes, booking receipts). We send no marketing email.
• Google — if you use "Continue with Google," Google verifies your identity for us. Separately, Google's Gemini AI reads uploaded payment screenshots for the automated check described above.
• Cloudflare Turnstile — a privacy-friendly bot check on the booking form. It doesn't track you across other sites and shows no ads or puzzles.

Cookies

We set one cookie — a session token that keeps you signed in after you log in. It's removed when you log out or expires on its own. We don't use tracking or advertising cookies.

How long we keep it

We keep your account and booking history for as long as your account is active, so you (and we) have a record of past bookings. If you'd like your account and its data deleted, contact us and we'll take care of it.

Contact us

Questions about this policy, or a request to access or delete your data: [email protected].