Privacy Policy

1. Data Visibility & Player Privacy

We value the privacy of our community. To ensure the safety and comfort of all participants:

• Ladder Positions & Analytics: Live rankings, match history, and performance analytics are visible only to registered, signed-up players.
• Player Directory: Contact information (phone numbers and email addresses) is strictly restricted to registered players for the sole purpose of scheduling matches. This data is never made public to the open internet.

2. Account Security

User accounts are managed by Ladder Administrators to ensure the integrity of the community. However, we strictly adhere to modern security practices:

• Password Encryption: All user passwords are fully encrypted (hashed) before being stored in our database.
• Zero Knowledge: Passwords are completely unknown to everyone, including Administrators. We cannot see your password; we can only reset it if requested.

3. Cloud Infrastructure & Security

WTF Tennis is hosted on Amazon Web Services (AWS), the world's most comprehensive and broadly adopted cloud platform. We leverage AWS's industry-leading security to protect your data.

We utilize the following AWS services, each covered by AWS's Privacy Policy:

• AWS Amplify: Secure hosting and deployment of the application.
• Amazon DynamoDB: Encrypted database storage for user profiles and match data. Data is encrypted at rest using AWS KMS.
• Amazon S3: Secure storage for application assets and backups.
• Amazon SES: Secure email delivery for notifications and password resets.
• AWS Lambda: Serverless compute for secure backend processing.

Protection against Hacking: Our platform inherits the global security compliance of AWS infrastructure. We employ specific security measures including:

• HTTPS/TLS encryption for all data in transit.
• Encryption at rest for all database records.
• Strict Identity & Access Management (IAM) policies to limit internal access.
• Automated threat detection via AWS infrastructure monitoring.

4. Spam Protection & Automated Systems

We are committed to transparency regarding how we monitor website performance and security.

Spam Protection

We employ automated systems (including custom rate-limiting and potentially third-party tools like Google reCAPTCHA or AWS WAF) to protect our forms from automated "bots". These systems analyze usage patterns (like IP address and interaction timing) to verify human users.