Privacy notice

What we store and why

Judge Call is run by Ladderline Software, a sole trader in the UK, who is responsible for your data (the "data controller"). Address: Postal address available on request. Contact: hello@judgecall.co.uk. This notice covers this website and the judge-call pages used at events.

Players

Players don't sign in. When a judge is called we store the table, the reason chosen and any note typed in, so referees can see it. Please don't put personal details in the note.

Referees and tournament organisers

The organiser adds each referee by name and sends them a personal sign-in link; we keep the name and a scrambled (hashed) copy of the link, never the link itself. If a referee turns on notifications, their browser gives us a notification address, which we use only to send judge-call alerts. Organisers sign in with a username and password; we store the username and a salted, scrambled (hashed) form of the password, never the password itself, and keep a signed cookie on their device so they stay signed in. If an email address is added to a login, we use it only to send that person their set-up link and password-reset links.

Clubs, sign-up and billing

When a club signs up we store the club name, the owner's username, a scrambled (hashed) password and the email address given, which we use to confirm the address, send a welcome email, remind the owner before a free trial ends, and contact the club about its account. To keep to one free trial per email address we keep a keyed fingerprint of the address, not the address itself. For each club we also store its plan, a record of payments (amount, date, card fee) and, if it chooses branding, its logo, colours and sponsor line.

Payments are handled by Stripe. Card details go straight to Stripe and never reach us; we keep only Stripe's reference numbers for the club's customer record and subscription. Stripe's own privacy notice covers what it holds.

How we protect it

Everything we store, including names and email addresses, is kept in a data file encrypted with AES-256. The key is kept separately on the server. Passwords and links are stored only in scrambled (hashed) form, and the site is served only over HTTPS.

Technical data

Visitors' IP addresses are held briefly in memory to stop abuse, such as repeated sign-in guesses or fake calls, and are not written to disk. We keep a service log of actions (for example a sign-in, a judge call or a settings change), with the username, club, time and result, and a short keyed code in place of the IP address, so we can fix problems and spot misuse. The log never contains passwords, links or email addresses, is encrypted, and is deleted after 90 days. We also record when each login last signed in. We use only the cookie needed to keep staff signed in. There are no adverts, analytics or tracking cookies, and fonts are served from this site.

How long we keep it

Club and billing details are kept while the club has an account, and payment records for as long as UK tax rules require. Unpaid sign-ups are removed after a few days. Service logs are deleted after 90 days. Open calls are kept until they're resolved. The most recent 500 closed calls are kept so organisers can review an event, then older ones are deleted. Notification addresses are removed when a referee signs out, when the referee code changes, or when the phone stops accepting them.

Why we can use it

We rely on legitimate interests: running the event smoothly and keeping the service secure. We use the email address and billing details to provide the service a club has signed up for (contract). We don't sell data or share it with anyone, except Stripe (payments), our email provider (which sends our emails for us), and the browser companies (Google, Apple, Mozilla, Microsoft) that deliver notifications to referees' phones.

Your rights

You can ask what we hold about you, or ask us to correct or delete it, by contacting hello@judgecall.co.uk. If you're unhappy with how we've handled your data, you can complain to the Information Commissioner's Office at ico.org.uk.

Last updated: November 2026.