YOUR DATA

Your privacy on the Hub

What Shuttle Hub keeps about you, who can see it, and how to get it removed.

Last updated 17 October 2026 · hpbadminton.com

Who runs the Hub

The Hub is a volunteer project, started for clubs in the Hunts & Peterborough Badminton League, run by its owner, Mohammed Dhanji. For any privacy question or request, email privacy@hpbadminton.com. Each club’s admins look after their own club’s players and teams. The Hub uses your information to run league matches and club nights for your club, which is what you join it for. Notifications are only sent if you turn them on.

Your account

Everyone who signs in starts as a player. You can sign in with Google or with an email address and password.

• Google: the Hub receives only your name, email address and a Google account number. It cannot see your Gmail, Drive or anything else in your Google account.
• Email and password: the Hub never stores your password, only a scrambled code made from it that cannot be turned back into the password. We email you a link to confirm your address. Until it is confirmed you cannot accept invitations. After five wrong passwords, sign-in pauses for 15 minutes.
• When you sign up you give your name, your club (optional) and whether you are under 18. If you choose a club, its admins are asked to link you to your player record. If you sign up with an email that already has an account, the page says so and that address is emailed, so its owner knows.

Sign-in uses a secure cookie that lasts 30 days on each device. Signing out ends it on that device.

Who can see what

• You see your own results, partners, Shuttle Rating, overview, replies and your teams’ upcoming matches. You also see your club’s Shuttle Ratings leaderboard.
• Captains and sub-captains see their team’s scorecards, squad, “Can you play?” replies and line-ups, and stats for players who played for their team (not juniors).
• Club admins see everything for their own club. That covers players, stats, club nights, groups and teams, plus the names and email addresses of people linked to the club in Club → People and roles. They approve players, give roles, correct or remove player records and can reset the club’s player stats. They cannot see other clubs.
• The app owner looks after the whole Hub and its database. They can see the stored data and are the only one who can suspend, sign out, rename or delete accounts. Their changes are recorded in an audit log.

Team members can see each other’s names. Invitation links work only for the email they were sent to, last seven days and can be cancelled.

Scorecards

A scorecard holds the teams, date, players’ names, scores and signatures. Every card is shared with its team: the team’s captains, sub-captains and club admin can see it. Only the person who entered it can change or delete it. Some older private cards from before October 2026 stay private to their account.

Cards save on your phone first and then to the Hub’s cloud database, so they are on every phone you sign in on. A phone you have signed in on keeps its copy for offline use for up to 30 days. That copy is protected by your phone’s screen lock, not by the Hub. Deleted cards go to Recently deleted for 30 days. The Hub also keeps a daily recovery copy for 30 days.

Player records and stats

Each club keeps one record per player: their name and the spellings used for it on scorecards and at club nights. Opponents’ names on scorecards stay as typed and do not become records. From league scorecards and club night games, the Hub works out each player’s results, partners and their Shuttle Rating (1 to 8, with how reliable it is). New players can answer six questions about their game for a starting rating; the answers are kept with their account. Everyone at your club can see your Shuttle Rating on the club’s leaderboard (under-18s only by the club admin), and it shows on the public league page only if you switch on public results in My badminton.

A player can ask to be linked to their record; a club admin approves it, so nobody can claim someone else’s record. You can unlink your account at any time under My badminton. Club admins can rename, merge, remove or reset player records for their club. When a club resets its player stats to clear test data, a copy of what was removed is kept in case it was a mistake.

Club nights

Organisers run club nights in the Hub. It keeps who said they are coming, who checked in, the games played and their scores, and which group (for example Intermediate) each player is in. These are used to pick fair games and suggest who could move group. Club night details are seen by that club’s admins and organisers, and each player sees their own.

Club night links and other clubs. When you answer a club’s link and are new to that club, it gets a guest record with your name, so its organisers can see you are coming. A club only sees its own club nights and your league games, unless you switch on sharing all your games in My badminton. Your level learns from all your games. People with the link see only the night’s details and how many are coming, never names.

Memberships and payments. Club admins can record your membership (plan, price, whether it is paid and sessions used) and whether you paid on the night. The Hub does not take payments or card details. This is seen by you and your club’s admins, who can download it for the club’s treasurer.

Match day

A captain or club admin can ask the squad “Can you play?” for a league match. Replies and the chosen line-up are seen by the team’s captains and the club admin. Each player sees their own reply and whether they were picked. The Hub can suggest a line-up from this season’s results. The captain always decides. Anything shared to WhatsApp is handled by WhatsApp.

AI features

Some features use an AI model (Google’s Gemma), run on Cloudflare Workers AI, the same service that hosts the Hub:

• Ask about your game and the badminton helper: your question and your own results are sent to write the answer. On the team helper, your team’s stats and, if your account is linked to your player record, your name (so the answer knows which player you are).
• Player overviews: a short write-up of a linked adult’s recent results, at most once a day after new games, seen by the player and their club admin.
• Line-up and group explanations, when a captain or organiser asks: the names, Shuttle Ratings and results of the players involved.

Ratings are never sent to the AI, and juniors are never named to it. The Hub keeps only a daily count of AI use to stay within its limits. AI answers can be wrong and are not medical advice.

Alerts, emails and calendar

Alerts are optional and turned on per phone. They can cover match reminders, fixture changes, “Can you play?” requests, club nights and link approvals. The Hub stores the phone’s push address so alerts can be delivered through Apple, Google or Mozilla. Alerts may show team or club names on your lock screen. Turn them off under My badminton or in your phone’s settings.

Emails are sent only for your account: to confirm your email, reset your password or tell you someone tried to sign up with your email. They come from no-reply@hpbadminton.com through Cloudflare’s email service. There is no marketing email.

Calendar: if you subscribe to your match calendar, it uses a private link. Anyone with the link can see your fixtures, so keep it to yourself. You can make a new link at any time, which stops the old one.

Players under 18

Players under 18 are linked to their record only after a parent or guardian agrees, and the club admin confirms it. A junior’s results and Shuttle Rating are seen only by the junior and their club admin. They are left out of stats shown to captains, never named to the AI, and get no AI overview.

Services we use

• Cloudflare hosts the Hub, its database, AI and email. Data is stored by Cloudflare and may be handled outside the UK under Cloudflare’s data protection terms.
• Google handles “Continue with Google”, if you use it.
• Apple, Google or Mozilla deliver alerts to your phone, if you turn them on.
• LeagueRepublic and the league’s public Google Sheet supply public fixtures, results and tables. Your account details, scorecards and signatures are not sent to them.

Connections use HTTPS. Data is not end-to-end encrypted, so the app owner can access it to run the Hub. Nothing is sold or shared for advertising.

How long things are kept

• Your account, scorecards and player record: until you ask for them to be deleted.
• Recently deleted cards and daily recovery copies: 30 days.
• Sign-in on a device: 30 days unless you sign out. Password reset links: one hour. Email confirmation links: seven days.
• Alert delivery records: up to 30 days after the alert expires.
• Results stay with the club as part of its league and club night history.

Your choices and rights

You can see, correct or remove your information. Ask your club admin to correct or remove your player record. To delete your account, or for anything else, email privacy@hpbadminton.com. Deleting an account removes its sign-in, private cards, backups, roles and alerts. Shared team scorecards and the club’s results stay with the club, no longer linked to you, unless you ask for those to be removed too. Uninstalling the app from your phone does not delete anything from the cloud.

Under UK data protection law you can also ask for a copy of your information or object to how it is used. We reply within one month. If you are unhappy with the answer, you can complain to the Information Commissioner’s Office (ico.org.uk).

The Hub runs on Cloudflare’s Workers Paid plan and stays within its included allowances. If a daily limit is reached, some features (such as AI answers or emails) pause until the next day. Scoring on your phone keeps working.