Cookies and Similar Technologies
1. The short version
This policy (our "Cookies Policy") covers cookies and similar technologies, such as your browser's local storage and session storage. Racket365 uses only what it needs to work: storage in your browser that keeps you signed in and remembers your settings. We do not use advertising or tracking cookies, and we do not let advertisers place cookies through Racket365. We count visits to our pages with Umami, which uses no cookies and stores nothing in your browser (section 4). When you pay or save a card, Stripe uses its own cookies to prevent fraud, and when you sign up, Cloudflare checks that you're a person (section 3).
2. What Racket365 stores in your browser
These are stored in your browser's local storage or session storage (similar to cookies, but not sent to our servers automatically). They are essential: without them you could not stay signed in or use the app.
| Name | What it does | How long |
|---|---|---|
| r365_access | Short-lived sign-in token | Until you close the tab (session storage) |
| r365_refresh | Keeps you signed in between visits | Removed when you sign out. If you don't use Racket365 for 30 days, the sign-in it holds expires and it is removed on your next visit |
| r365_user | Your name and role, to show the right menus | Until you sign out |
| r365_org_context | The Club you are currently working in | Until you sign out |
| r365_join_after_auth | Remembers the club invitation you signed in or up from, so you join that club when you come back | Until it is used or the tab closes (session storage) |
| r365_join_after_confirm | Remembers the club invitation you opened before confirming your email, so confirming takes you back to it | Until you confirm your email and join, or clear your browser storage |
| r365_idle_logout | Explains, on the sign-in page, that you were signed out for inactivity | Until it is shown or the tab closes (session storage) |
| r365_cookie_consent | Remembers that you have seen the cookie notice | Until you clear your browser storage |
| r365_age_block | Remembers an "Under 13" answer at sign-up, so it can't simply be changed | 24 hours |
| r365_install_hint | Remembers that you closed the "Get the Racket365 app" banner on your phone, so it isn't shown again | Until you clear your browser storage |
| Saved app files | If you install Racket365 on your home screen or computer, copies of its own pages, styles, scripts and fonts are saved (in your browser's cache storage) so the app opens without a connection and shows its own typefaces straight away. They never include your club's data or personal information | Replaced with each new version of Racket365; removed when you remove the app or clear your browser storage |
| Secure sign-in copy (iPhone and Android apps only) | A copy of your sign-in kept in the phone's secure storage (iPhone Keychain, Android Keystore), so the app keeps you signed in even if its other storage is cleared | Removed when you sign out of the app. If you delete the app without signing out, the sign-in it holds still ends like any other: after 30 days without use, or at once with a password change |
| r365_push_asked (iPhone and Android apps only) | When the app last asked whether you want notifications, so it asks at most once every 30 days | Until you clear the app's data or delete the app |
| umami.disabled | Only if you choose "Don't count my visits" (section 4): tells Umami not to count visits from this browser | Until you turn counting back on or clear your browser storage |
3. Stripe, and Cloudflare's sign-up check
Card payments happen on Stripe's checkout page (checkout.stripe.com), and Club administrators save their card through a Stripe form. To detect and prevent fraud, Stripe sets these cookies on racket365.com, only on the page that shows that card form:
| Name | What it does | How long |
|---|---|---|
| __stripe_mid | Recognises your browser in Stripe's fraud checks | 1 year |
| __stripe_sid | The same, for a single visit | 30 minutes |
Stripe also sets its own cookies on its checkout page. These are strictly necessary for payments, and Stripe's use of them is described in Stripe's Cookies Policy.
The sign-up page loads Cloudflare's Turnstile check, which is strictly necessary to protect sign-up from automated abuse. It may store a small item in your browser used only for that check. See Cloudflare's Turnstile privacy addendum.
Nothing else sets cookies on racket365.com: our servers, our network provider Cloudflare and Umami (section 4) set none.
4. Visit statistics (Umami)
We use Umami to count visits to our pages, so we can see which pages are used and improve Racket365. Umami sets no cookies and stores nothing in your browser. For each visit it receives the page address (without anything after “?” or “#”, and with invite codes and record numbers removed), the site you came from, your browser, operating system, device type, screen size and language, and your approximate country and region, worked out from your IP address. It does not receive page titles or your name, email address or account, and Umami states that it stores no personally identifiable information.
We do not count visits from browsers that send a Do Not Track or Global Privacy Control signal. You can also turn counting off for this browser:
5. Your choices
The browser storage in section 2 is essential, so there is nothing to switch on or off there; visit counting can be turned off in section 4. You can clear or block browser storage and cookies in your browser's settings, but Racket365 will not work without them and you will be signed out.
Visit counting follows Do Not Track and Global Privacy Control signals (section 4). We do not track you across sites, and we do not sell or share your personal information for advertising.
6. Changes
If we start using any non-essential cookies, such as advertising or analytics cookies, we will update this policy and ask for your choice first where the law requires it.
7. Contact us
iGEN Service LLC (Racket365)
Email: support@racket365.com