Last updated: 25 July 2026
Beachmates Privacy Policy
1. Who We Are
Celsior Interactive Ltd ("Beachmates", "we"), a company incorporated in the Republic of Cyprus, registration number HE 489924, registered office at Onisiforou Center, Floor 2, Neofytou Nikolaidi & Theodorou Kolokotroni, Agios Theodoros, 8011 Paphos, Cyprus, is the data controller for personal data processed through the Service. Contact: hello@celsior-interactive.com. Given our size, we are not required to and have not appointed a Data Protection Officer; privacy requests should be sent to hello@celsior-interactive.com.
2. Scope
This Policy explains what personal data we collect, why, on what legal basis, with whom we share it, and your rights, in accordance with the General Data Protection Regulation (GDPR) and applicable Cyprus law. The Service is for users aged 18 or over; we do not knowingly process data of minors.
3. Data We Collect
- Account and profile: name/display name, email, date of birth (used to verify you are 18 or over), city, playing level, position, height, playing hand (handedness), a short bio, gender, avatar (your main photo) and up to five additional profile photos (visible to signed-in players who are allowed to see your identity), language preference. Gender is optional, and you control who sees your identity, your gender and your photos: see Section 11, Visibility of Your Identity, which explains exactly who sees what.
- Phone number (optional): if you add one, it is used only so friends can find you by number when you turn that setting on. It is never shown publicly, and discovery by number is off by default.
- Gameplay: matches, scores, ratings, tiers, teams, check-ins, slots you create or join, tournament participation, and, if you commit to ranked play while your identity is hidden, the date on which you acknowledged that ranked play is public.
- Partner matching (Matchmates): when you opt in, your weekly availability, your home city and search radius, whether you have access to your own court, and the likes and passes you make together with the mutual matches they create. A Matchmates card requires a main photo, and your card shows your display name and your photos to the other players whose area and criteria match yours: switching your card on is itself your agreement to that, even if you hide your identity elsewhere on the Service. You can switch your card off at any time.
- Location and presence: approximate or precise location when you enable it, the approximate location (city and radius) you set for partner matching, any location you choose to share inside a conversation, courts you interact with, and your presence status (subject to your visibility settings).
- Social: friends, follows, blocks, and the content of messages you send through the Service.
- Verification (Coaches and Clubs): if you apply to be verified as a Coach or Club, the supporting documents or proof you upload for that request.
- Match videos: where you upload a video of a match, the video file and the analysis data derived from it.
- Payments and billing: transaction records and references, and, for Coaches and Clubs, the billing details you provide (name, company, VAT number, address). Card details are handled directly by our payment providers; we do not store full card numbers.
- Usage and device: log data, IP address, device and browser information, and interactions with the Service.
- Communications: messages you send us for support.
4. Legal Bases (GDPR Art. 6)
- Performance of a contract: to provide the Service (account, matchmaking, ratings, bookings).
- Consent: precise location, presence sharing, non-essential analytics, marketing. You may withdraw consent at any time.
- Legitimate interests: security, fraud and abuse prevention, improving the Service, enforcing our Terms.
- Legal obligation: accounting, tax and legal compliance.
5. How We Use Data
To operate the Service and its features (matchmaking, ratings, leaderboards, presence, marketplace); to process payments; to ensure safety and moderation; to communicate with you; to improve and secure the Service; and to comply with law.
6. Sharing and Processors
We share data with service providers acting on our behalf, under data-processing agreements:
- Supabase (database, authentication, storage), Cloudflare (hosting, delivery), Polar (first-party payments, merchant of record), Stripe (marketplace payments and Provider KYC), map/tiles provider, analytics provider, email provider.
- Providers (Coaches/Clubs) receive the booking data necessary to deliver a service you purchase.
- Other users can see your profile, your ratings and your presence, according to your settings and to the visibility rules set out in Section 11.
- We may disclose data where required by law or to protect rights and safety.
With your explicit consent (Article 6(1)(a) GDPR), we may share or sell your email address to third-party partner companies from any sector, so that they can send you their own marketing offers. These partners process your email address as independent data controllers. You can withdraw this consent at any time from your account settings, without affecting the lawfulness of processing carried out before withdrawal.
7. International Transfers
Where data is transferred outside the EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or adequacy decisions.
8. Retention
We keep personal data for as long as your account is active and as needed to provide the Service, then delete or anonymise it, except where longer retention is required by law (for example financial and tax records) or to preserve the integrity of competitive records in anonymised form.
Some categories are deleted automatically on a fixed schedule:
- Media shared in event chats (photos and videos posted in a session, course or camp conversation): deleted 7 days after upload during the beta.
- Casual (non-ranked) matches: deleted 30 days after they are played.
- Enrollment and application responses: declined responses are deleted 3 months after review; responses left pending or waitlisted are deleted 6 months after submission; accepted club applications are deleted 12 months after review once you are no longer a member.
- Reports and moderation records: closed reports are deleted 12 months after they are made, and internal moderation action records are deleted after 24 months.
Data that is not on a fixed schedule, including your profile, your Matchmates photos, availability, swipes and matches, any match videos you upload and any verification documents, is kept until you delete your account, after which it is removed or anonymised as described above, subject to legal retention obligations.
9. Your Rights
Subject to law, you have the right to access, rectify, erase, restrict, and object to processing, to data portability, and to withdraw consent. You may exercise these in the app or by contacting hello@celsior-interactive.com. You may lodge a complaint with the Office of the Commissioner for Personal Data Protection of Cyprus or your local supervisory authority.
10. Location and Presence Controls
You control whether the app uses your location and whether your presence is visible to others. You can hide your presence ("invisible") at any time. We do not expose the precise real-time location of an individual beyond what presence settings allow. Whether your name and photo appear alongside your presence is governed by Section 11.
11. Visibility of Your Identity
Hiding your identity on Beachmates means being hidden from strangers, not from the people you actually play with. The control is the Show my identity setting in Account, then Privacy. You can switch it on or off at any time, and the new setting applies immediately across the Service.
With Show my identity on, your display name and your avatar are visible to anyone using the Service.
With Show my identity off, you appear as an anonymous player to people you have no connection with, while your display name, your avatar and your photos stay visible to:
- yourself;
- your accepted friends;
- your team mates, for as long as the team is not archived;
- the players signed up to the same session as you, whether that session is still to come or already played;
- the players who took part in a match you played together, on the record of that match, permanently;
- the members of a club you both belong to;
- the people enrolled in the same camp, class or coaching group as you, and those who booked the same coaching session;
- your coach once your application is accepted, and equally the players a coach has accepted, so that a coach and a student always see each other.
To anyone outside those circles, your profile shows as "Anonymous player", with no name, no photo, no social links and no favourite spot. It still shows your tier, your title, your playing position and how often you play, because on their own these do not identify you, and it keeps the block and report actions so that you can always be reported.
Competitive surfaces are public. Leaderboards and the ranking search show your display name and tier to everyone, including visitors who are not signed in, whatever your identity setting, because a ranking is by nature a public record. On a match sheet, your display name and your photo are shown only to the players who were in that match. A photo is never required in order to compete; if you do set an avatar, it appears next to your ranking entry when your identity is visible, and strangers see a generic avatar instead while your identity is hidden. Your display name may be a nickname: nothing obliges you to compete under your legal name. The first time you commit to ranked play while your identity is hidden (creating or joining a team, accepting a ranked challenge, entering your team in a ranked slot) we show you this rule and record the date you acknowledged it. If you decline, nothing is published and you keep full access to casual play.
Physical presence stays anonymous. Check-ins, the "here now" list of a spot, partner suggestions on a spot, the results ticker, the King of the Spot title, and the sign-up list of a session as seen by someone who is not signed up to it, never reveal to anyone outside the circles above an identity you have chosen to hide. This is what the setting protects above all: where you are and when. Each check-in and each sign-up also lets you override your global choice for that action alone.
Your gender is a separate control. With Show my gender on, your gender can be shown on public surfaces even while your name is hidden from strangers. Hiding your identity does not hide your gender, and hiding your gender does not hide your name.
12. Security
We use technical and organisational measures (including access controls and row-level security) to protect personal data. No system is completely secure; we encourage you to keep your credentials safe.
13. Age
The Service is strictly for users 18 and over. If we learn we hold data of a person under 18, we will delete the account and associated data.
14. Cookies
See our Cookie Policy for details on cookies and local storage.
15. Changes
We may update this Policy and will notify you of material changes and update the date above.
16. Contact
hello@celsior-interactive.com · Celsior Interactive Ltd, Onisiforou Center, Floor 2, Neofytou Nikolaidi & Theodorou Kolokotroni, Agios Theodoros, 8011 Paphos, Cyprus.