Privacy policy

Last updated: 2026-08-26

This policy explains what data Unicourt (unicourt.app and the Unicourt Telegram Mini App) collects, why, who can see it and how you can have it deleted. It is written to be read, not to be scrolled past.

Who is responsible

Unicourt is operated by Sergey Kharkin as an individual while the operating company in Cambodia is being registered. Until then he is the data controller. Contact for anything in this policy: Telegram, t.me/unicourta.

What we collect

• Account: when you sign in with Telegram — your Telegram ID, display name, profile photo and language; when you sign in with a phone number — the number and the name you enter. Phone numbers are verified with a one-time code; the code is stored only as a hash and deleted within 24 hours.
• Bookings and games: which court you booked and when, which open games you joined or organised, whether you cancelled or did not show up, and the scores you and your opponents enter.
• Rating: a skill level from 1.0 to 5.0 calculated from confirmed results, and its history.
• Booking requests: when a club takes requests rather than instant bookings, the phone number you give so the club can call you back.
• Notifications: what we sent you (bot messages and the in-app feed) and whether it was delivered.
• Technical: server logs with your IP address and request path for 14 days; error reports (without personal data) when error monitoring is enabled.

We do not collect your precise location unless you tap “near me”, in which case the coordinates are used for that search only and are not stored. We do not use advertising trackers or third-party analytics.

Why

• To run the service: show free courts, hold your booking, fill a game, calculate your level, remind you about your court.
• To let clubs run their courts: the club sees bookings on its own courts.
• To prevent abuse: rate limits, sign-in attempts, duplicate accounts.
• To fix what breaks: logs and error reports.

Who sees your data

• The club you book at sees your display name and the booking. It does not see your phone number — unless you gave it in a booking request for that club to call you.
• Players in the same open game see your display name and level. Your contact details are never shown to other players.
• Service providers that process data on our behalf: DigitalOcean (hosting and backups, Singapore), Telegram (sign-in and bot messages), an SMS provider for sign-in codes when phone sign-in is enabled, and Sentry for error reports when enabled. Each receives only what its job needs.
• Authorities, if the law of Cambodia requires it.

We do not sell personal data and do not share player contacts with clubs, sponsors or anyone else for marketing.

Cookies and storage

One cookie keeps you signed in (30 days for players, 12 hours for club staff). The browser also remembers your language choice. There are no advertising or tracking cookies. The booking widget on a club’s website shows availability only and sets no cookies on that site.

How long we keep it

Your account and its data are kept while you use the service. Booking and game history is kept as long as the account exists, because ratings are computed from it. Sign-in codes are deleted within 24 hours; server logs within 14 days; backups are overwritten within 14 days. When a club leaves the platform, guest records the club created are deleted after 90 days.

Your rights

You can see and change your name and language in the app. To get a copy of your data or to delete your account, write to t.me/unicourta. Deletion removes your account, contact details and notifications; anonymised results of games you played stay in other players’ rating history, because their level was computed from them. We answer within 14 days.

Security

Traffic is encrypted (HTTPS). Passwords of club staff are hashed; administrators use two-factor authentication. Sign-in sessions can be revoked by signing out. Servers are in Singapore with daily encrypted backups. No system is perfect; if we learn of a breach affecting you, we will tell you.

Age

The service is for people aged 16 and over. If you believe a younger person has created an account, contact us and we will delete it.

Changes

If this policy changes in a way that matters, the date above changes and the change is described on this page. The English text is the binding one; the Khmer text is a translation for convenience.