The short version

• We collect what you give us (your name, email, phone number, reviews and booking requests) and simple, anonymous counts of how often listings are viewed.
• When you request a booking, the venue sees your name, phone number and note so they can confirm it.
• Your location is only used on your own device to show you on the map. It is never sent to us.
• You can ask us to see, correct or delete your information at any time.

Information we collect

When you create an account

Your name, email address and password. Your password is stored by our login provider in a scrambled (hashed) form; we can never see it.

When you use your account

• Phone number, if you add one to your profile or enter one when booking (we save it to fill in your next booking).
• Booking requests: the venue, date and time, number of hours, price, your phone number and any note you add.
• Reviews: your rating, what you write, and the date.
• Venue claims: if you claim a venue, your role (owner or manager), phone number and any note you add. We use them only to check that you run the venue.
• Business accounts: your business name and the venue details you publish (name, address, location, prices, opening hours, contact details and description).

When you browse

• Listing activity: we count how many times each venue is shown, opened, clicked or booked, so owners can see how their listing performs. To avoid counting the same visitor twice, your browser keeps a random ID that isn't linked to your name or account. To stop people faking these counts, we also use a scrambled (one-way hashed) version of your IP address. Our database keeps these scrambled values for about a day, then only the daily totals per venue.
• Your location, only if you choose "Use my location" and allow it in your browser. It is used on your device to show where you are on the map and is never sent to or stored by us. You can turn it off at any time in your browser settings.
• Technical information such as your IP address and browser type is processed by our hosting providers to deliver the site and keep it secure, as with any website.

How we use it

• To run your account and let you log in, including sending login, confirmation and password-reset emails.
• To send your booking requests to venues and show you their replies.
• To show reviews, ratings and venue listings to everyone who visits.
• To give venue owners statistics about their listings (views, clicks, bookings, occupancy and demand), always as totals rather than about individual visitors.
• To keep the service secure, prevent abuse and fix problems.

Who can see your information

• Everyone: your reviews, shown with your name, and published venue listings.
• The venue you book: your name, phone number, the time you asked for and your note. They may contact you by phone or WhatsApp about the booking.
• Players who book your venue (business accounts): the contact details you publish on your listing.
• Service providers who run parts of the service for us and may only use your information to do so:
  • Supabase, which hosts our database and handles logins and account emails (servers in Mumbai, India).
  • Vercel, which hosts the website (servers in Mumbai, India).
  • Map providers (OpenStreetMap, Esri for satellite imagery, and Thunderforest for the transport map). Your browser loads map images directly from them, which shares your IP address and the area of the map you're viewing.
• Legal reasons: if the law requires it, or to protect the safety and rights of our users or others.

When you tap a WhatsApp or phone link, you leave Khel Baz; WhatsApp's and your phone provider's own policies apply.

How long we keep it

• Account, profile, reviews and venue listings: until you delete them or ask us to delete your account.
• Booking records: as long as your account exists, so both you and the venue keep a history of bookings.
• Scrambled visitor IDs and IP addresses used to avoid double or fake counting: about one day.
• Daily listing totals: up to two years, then deleted automatically.

Your choices and rights

• See and correct: you can change your name and phone number in Account settings, and edit, hide or delete your venues under My venues. To remove a review you wrote, email us.
• Delete: email us at us24man@gmail.com from your account's email address and we'll delete your account and personal information. Booking records a venue needs may be kept without your contact details.
• Get a copy: email us and we'll send you the information we hold about you.
• Location: choose "Not now", or block location for this site in your browser settings.

We'll reply within 30 days.

Security

Connections to Khel Baz are encrypted, passwords are hashed, and database access rules ensure people only see what they're allowed to (for example, only the venue sees the contact details on a booking request). No system is perfectly secure, so please use a password you don't use elsewhere.

Children

Khel Baz isn't meant for children under 13, and they shouldn't create an account. If you believe a child has given us their information, contact us and we'll delete it.

Changes to this policy

If we change this policy, we'll update the date at the top. If the changes are significant, we'll tell you on the site or by email before they take effect.

Contact

Questions or requests about your privacy: us24man@gmail.com. See also our cookie notice and terms of service.