Privacy Policy
Last updated: 30 August 2026
This Privacy Policy explains what personal data CueEvo collects, why we collect it, who we share it with, and the rights you have over it. It is written to comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, and with the EU GDPR for users located in the European Economic Area.
Please read it alongside our Terms of Use.
1. Who we are (the data controller)
CueEvo (“CueEvo”, “we”, “us”, “our”) is a cue-sports tracking service available at https://cueevo.com.
CueEvo is currently operated by an individual based in the United Kingdom, acting as the data controller responsible for your personal data. If you need our formal controller identity for a data-protection request, complaint, or legal notice, contact us at the address below and we will provide it.
Contact for all privacy matters: privacy@cueevo.com
We are registered with, or will register with, the UK Information Commissioner’s Office (ICO) as a data controller. You have the right to complain to the ICO at any time (see Section 11).
2. The personal data we collect
We only collect what we need to run the service. We do not collect any special category data (such as health, ethnicity, religion, biometric, or political data), and we ask you not to provide any.
2.1 Data you give us directly
| Data | Where it comes from | Notes |
|---|---|---|
| Email address | Sign-up / sign-in | Required to create and secure your account. |
| Password | Sign-up | Stored only in hashed form by our authentication provider — we never see your plain-text password. |
| Display name (optional) | Profile / account panel | Shown to opponents and other players. A first name is enough; you choose what to enter. |
| Country / nationality (optional) | Profile / tournament join | Self-reported. Used to show a flag next to your name. This is not treated as special-category data. |
| Opponent names | When you add a competitive opponent | Free text you enter. May relate to another person — see Section 8. |
| Match & rack data | Recording matches | Scores, formats, timestamps, handicaps, and a free-text event/location tag you choose to add. |
| Practice data | Practice mode | Drill templates, metric values, notes, and any images you upload for a drill. |
| Tournament data | Tournament mode | Series/event details, participant names and countries, brackets, standings, and ratings. If you are a tournament manager, you may enter data about other people — see Section 8. |
| Preferences | Settings | Leaderboard visibility choices and email-notification choices. |
2.2 Data we generate about your use
- Ratings and statistics derived from your matches and practice (e.g. ELO rating, tournament Power Rating, counts and trends).
- A share code used to link matches with other users.
2.3 Data collected automatically
- Technical and log data — such as IP address, browser/device type, and access timestamps — generated by our hosting and infrastructure providers when you use the service. This is standard for any website and is used for security, delivery, and diagnosing faults.
- Error and diagnostic data — if the app encounters an error, limited technical context is sent to our error-monitoring provider to help us fix it.
- Anti-abuse data — our sign-in page uses a CAPTCHA to tell humans from bots; this may process technical signals about your session.
2.4 Product analytics
We record basic, privacy-preserving usage events (for example, that a match was started or a tournament created) to understand how the app is used and improve it. These events are first-party, contain no personal identifiers or free-text content (only simple flags and counts), and are never sold or used for advertising.
3. Cookies and local storage
CueEvo does not use advertising or third-party tracking cookies.
We use your browser’s local storage and similar technologies for two purposes:
- Strictly necessary — keeping you signed in and remembering in-app settings (such as which mode and tab you last used). These are essential for the service to work and do not require consent under the Privacy and Electronic Communications Regulations (PECR).
- Analytics — the privacy-preserving usage events described in Section 2.4.
We do not use this data to build advertising profiles or to identify you across other websites.
4. Why we use your data, and our legal basis
Under UK/EU GDPR we must have a lawful basis for each use. Ours are:
| What we do | Purpose | Lawful basis |
|---|---|---|
| Create and secure your account; store your matches, practice, and tournaments | To provide the service you signed up for | Contract (Art. 6(1)(b)) |
| Show ratings, stats, leaderboards, and link matches between users | Core product features | Contract and legitimate interests (Art. 6(1)(f)) — running and improving the service |
| Protect the service from bots and abuse (CAPTCHA); monitor errors | Security and reliability | Legitimate interests (Art. 6(1)(f)) |
| Privacy-preserving product analytics | Understand and improve the app | Legitimate interests (Art. 6(1)(f)); where required, consent under PECR |
| Send account emails (sign-in, password reset, confirmations) | Essential account operation | Contract / legal obligation |
| Send optional match-reminder emails | Notify you of pending match requests | Legitimate interests, with an opt-out you can use at any time in Data & Privacy settings |
| Respond to your data-protection requests | Comply with the law | Legal obligation (Art. 6(1)(c)) |
Where we rely on legitimate interests, we have considered your rights and only proceed where our interest is not overridden by them. You can object at any time (Section 10).
5. Who we share your data with
We do not sell your personal data. We share it only with the service providers (“processors”) that operate CueEvo’s infrastructure on our behalf, under contracts (Data Processing Agreements) that require them to protect it:
| Provider | Role | What it processes |
|---|---|---|
| Supabase | Database, authentication, and file storage | Your account, app data, and uploaded drill images |
| Vercel | Website hosting and content delivery | Technical/log data when you load the app |
| Cloudflare | DNS and bot-protection (CAPTCHA) | Technical signals for security |
| Resend | Email delivery | Your email address and the content of account/notification emails |
| Sentry | Error monitoring | Limited technical error context |
We may also disclose data where required by law, to enforce our Terms of Use, or to protect the rights, safety, or security of our users or the public.
Other CueEvo users can see limited information about you through normal use of the app — for example, a linked opponent can see your ELO rating and drill-log count, and players in a tournament series can see your display name, country, and results. You can limit some of this in Data & Privacy settings.
6. International data transfers
Some of our providers are based outside the UK/EEA (for example, in the United States). Where your data is transferred internationally, we rely on the safeguards required by law — the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses, and equivalent EU clauses — so that your data continues to receive an essentially equivalent level of protection.
7. How long we keep your data
- Account and app data — kept for as long as your account is active, and deleted when you delete your account (see Section 9).
- Product analytics events — retained in aggregate/technical form; they contain no personal identifiers.
- Backups and logs — infrastructure providers keep short-term backups and security logs for a limited period, after which they are overwritten in the ordinary course.
We may retain limited information for longer where we are legally required to, or to resolve disputes and enforce our agreements.
8. Data about other people
Some features let you enter information about other individuals — for example, adding an opponent’s name, tagging a match, or (as a tournament manager) entering the names and countries of participants.
If you enter another person’s personal data, you are responsible for having a proper basis to do so, and you must not enter more than is necessary. In relation to that data, you may act as a controller in your own right. If someone asks us to remove data you entered about them, we may contact you or remove it to comply with the law.
Please do not enter special-category data, or any sensitive information, about anyone.
9. Deleting your data
You can ask us to delete your account and personal data at any time. When account deletion is available in-app, you will be able to trigger it yourself from the Account panel; until then, email privacy@cueevo.com and we will erase your data.
Deleting your account permanently removes your profile, matches, racks, practice data, drill images, and tournament participation, subject to the limited retention described in Section 7. Some effects are permanent and are not reversed on deletion — for example, rating changes already applied to other players’ ELO from matches you played with them remain, as they form part of another user’s record.
10. Your rights
Under UK/EU GDPR you have the right to:
- Access the personal data we hold about you;
- Rectify inaccurate or incomplete data (much of which you can edit directly in the app);
- Erase your data (“right to be forgotten” — see Section 9);
- Restrict or object to our processing, including profiling and our legitimate-interest uses;
- Data portability — receive your data in a common, machine-readable format;
- Withdraw consent at any time where we rely on it (this does not affect processing already carried out);
- Not be subject to solely automated decisions with legal or similarly significant effects (we do not make any such decisions).
To exercise any right, email privacy@cueevo.com. We will respond within one month. There is normally no charge, and we may need to verify your identity first.
11. Complaints
If you are unhappy with how we handle your data, please contact us first at privacy@cueevo.com so we can try to resolve it. You also have the right to complain to the UK supervisory authority:
Information Commissioner’s Office (ICO) — https://ico.org.uk — 0303 123 1113
If you are in the EEA, you may also complain to your local data protection authority.
12. Children
CueEvo is not directed at children under 16. We do not knowingly collect data from anyone under this age. If you believe a child has given us personal data, contact privacy@cueevo.com and we will delete it.
13. Changes to this policy
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date above and, where appropriate, notify you in the app or by email. Continuing to use CueEvo after a change means you accept the updated policy.
Contact: privacy@cueevo.com