Privacy Policy — Palarena
Version 2026-10-14 — applicable as of October 14, 2026
1. Who uses your data?
PALARENA, 138 avenue Victor Hugo, 75016 Paris, France, operates Palarena. For any question about your data, write to contact@palarena.com or to this postal address.
Palarena is the controller of the processing necessary for its site, demo requests, the global account, connecting users, platform-wide sports features, security and its commercial relationship with the Clubs.
The Club identified on the offer and the confirmation is responsible for its service, its customer file and its legal obligations. Palarena is a processor for the management data entrusted to it by the Club, in particular the schedule, notes, supporting documents, email campaigns and WhatsApp posts. The Club decides on the content and the recipients of its communications; these files are not used for marketing by Palarena or by another Club. Its privacy notice is on the Club page and in the documents presented before the order, then in the confirmation.
2. What data, and for what purpose?
We receive your data, data from the Club or the organizer, technical usage information and payment statuses. Mandatory fields are marked: without them, the feature concerned cannot be provided. The others remain optional.
| Use | Data concerned | Legal basis |
|---|---|---|
| Responding to a request for a demo, a callback or the launch announcement | contact details, the Club’s business, availability and exchanges | requested pre-contractual steps; legitimate interest in responding to a Club’s representative; agreement to the requested announcement |
| Creating and using an account, with Google sign-in if chosen | identity, contact details, identifiers, hashed password or authorized Google profile, sessions and preferences | performance of the requested feature; Google also uses the data under its own policy |
| Booking a court, joining or organizing a match, registering for an activity | participants, Club, court, slot, price, status, accepted rules and license if necessary | performance of the service; for a guest added by a third party, legitimate interest in organizing the match or the activity, subject to their rights |
| Paying for a booking or a pass; using club credit | payment references, partial card details if transmitted, amount, expiration date, mandate, pass, club credit and its balance, entries, refund or dispute | performance of the service; legal obligations and defense of rights for the necessary evidence |
| Saving a card for future purchases | Stripe reference, limited display and proof of the choice | separate, optional and revocable consent |
| Using a sports profile and open matches | username, photo, city, sports, questionnaire, levels, results and participation | performance of the requested sports feature |
| Receiving confirmations and notifications | contact details, content, delivery, preferences and the authorized browser notification subscription | performance of the service; legitimate interest in ensuring delivery |
| Managing the Club’s professional subscription | representative, authorizations, contract, invoices and Stripe status | contract; legitimate interest in managing professional contacts; accounting obligations |
| Informing Club representatives about the Palarena offer | professional contact details, Club, source of the contact, messages sent and objection | legitimate interest for marketing related to their role, with a simple objection at any time |
| Support, security and reports | exchanges, access, IP, browser, logs and useful documents | legitimate interest in protecting the service and its users; applicable legal obligations |
| Optional diagnostics of the apps | browser, errors, performance and diagnostic session | consent revocable in the privacy settings |
| Umami audience measurement of the site | technical browsing data | optional consent |
Declining to save a card for future purchases does not prevent the current order. The data and the mandate necessary for this order, for its deferred payment or for a membership already taken out may remain stored for that sole purpose.
Palarena does not use your player account for its own marketing. Invitations, confirmations and security messages do not sign you up for a Club’s commercial communications.
For Clubs’ email campaigns, you choose each Club separately: “Club activities, offers and news by email. One-click unsubscribe.” Palarena applies this choice and keeps proof of it on the Club’s instructions. You can withdraw your agreement in your preferences or from each message, without signing in; this does not affect other Clubs or the messages necessary for a booking. An email already handed over to the service provider may still arrive. These campaigns track neither opens nor individual clicks; delivery statuses are used to manage sending and abuse.
Push notifications go through the service of your browser or system. Their permission is optional, revocable in its settings and separate from any agreement to commercial communications.
For WhatsApp posts, Palarena processes, on the Club’s instructions, the authorized connection, the chosen groups, the announcements and their tracking, without importing private conversations. Link opens are counted in aggregate, without individual tracking or attribution of bookings. The Club informs the groups, justifies the agreements or exceptions required for commercial messages and allows a simple objection; joining a group does not amount to general consent. Disconnecting stops new posts, without erasing the copies already received.
If you request a nearby search, the location provided is used for that search. The browser’s permission concerns access to the device; it does not constitute a general authorization to reuse your position.
We do not ask for medical data to create your profile. Do not enter any in a description or a free-text note. The Club informs you separately if it needs to collect a particular supporting document for its activity.
3. Who can see this information?
The Club and its authorized persons access the data necessary for their services and customer relationships, with no automatic authorization for marketing. Your sports profile is visible to signed-in users: first name, last name, username, photo, levels and statistics. Holders of a match invitation link can see the names and photos of the participants, even without an account. These displays include neither contact details nor financial information.
Activity lists may show an initial to visitors without an account, or the first name and photo to signed-in users. For a sanctioned tournament, access is reserved for registrants and may be limited to their own registration for as long as withdrawal is free of charge.
If a Club or an organizer registers you as a guest, it transmits your participation and contact data. This does not create an account allowing you to sign in. You can report an error to Palarena or to the Club. We tell you the source and the use of this data at the first contact, or at the first transmission to another recipient if that occurs earlier, and at the latest within one month, unless a legal exception applies.
Anyone who has the address of a media file intended for display can access it: do not upload any confidential document there. A removal covers the files and caches we control, without erasing copies saved independently by third parties.
Our authorized staff and the necessary service providers may process data for hosting, storage, emails, meetings, authentication or payment. The list of service providers specifies their services, their roles and the transfer information. Palarena does not sell your data.
Stripe collects card data; Palarena stores neither the full card number nor the card security code. Services are paid into the Club’s Stripe account; its software subscription is paid to Palarena. Depending on the processing, Stripe acts as a processor or as a controller, in particular for its regulatory and anti-fraud checks: privacy.
For an on-site card payment through SumUp, the Club collects the payment; Palarena receives the references, amounts and statuses, without the full card number or the card security code. A club credit top-up is also collected by the Club, separately from Stripe.
The countries and safeguards of processing outside the European Economic Area appear in the list of service providers: an adequacy decision within its scope or appropriate safeguards, in particular standard contractual clauses and the necessary supplementary measures. You can request a copy at contact@palarena.com, subject to confidential information and third-party data.
4. For how long?
Working data is distinct from the documents kept for a legal obligation or a dispute. These archives are not used for marketing or to maintain a public profile.
| Data | Period or criterion |
|---|---|
| Account and profile | period of use; review after 3 years without activity, with 30 days’ notice before deletion where contact remains possible; services in progress are handled separately |
| Demo request with no follow-up | 12 months after the last exchange; if a commercial relationship begins, retention in its file |
| Professional marketing to Club representatives | until objection, at most 3 years after the last active contact or the end of the commercial relationship |
| Waiting list on request | until the requested launch announcement, then 3 months; at most 12 months without voluntary reconfirmation |
| Evidence of booking, payment and contract | necessary documents for 5 years after the service or the end of the relationship concerned; archiving for 10 years where a specific obligation requires it, in particular the electronic contract of at least €120 covered by the French obligation |
| Invoices and accounting documents | 10 years from the close of the financial year concerned |
| In-app notifications | 90 days; a contractual supporting document sent by email follows the period of its evidence |
| Ordinary email sending traces | 12 months; technical delivery and payment events: 90 days once their processing is complete |
| Technical application logs and diagnostic traces | 7 days in the routine observation system; sessions follow their validity period and targeted security traces are kept for up to 12 months |
| Site audience measurement statistics | 13 months |
| Routine assistance | 12 months after closure; only the documents useful for a complaint or litigation are archived for longer |
| Data processed on a Club’s behalf | duration of the Club’s lawful instructions and of the service, then return and deletion in accordance with the Professional Agreement |
| The Club’s WhatsApp posts | history and links: 12 months after the end of the post or an uncertain result; operations under way continue to be tracked |
A request for erasure does not result in the destruction of an invoice that must be kept or in the automatic cancellation of a booking. We tell you which data is kept, the reason and its expiry date. A dispute may justify the restricted retention of only the documents concerned. Backups expire according to their documented cycle; during a restoration, the deletions and restrictions already decided are reapplied.
5. Your rights
Under the conditions provided for by the GDPR, you have the rights of access, rectification, erasure, restriction, portability for the processing concerned, as well as the right to object to processing based on legitimate interest. You can object to commercial marketing at any time. You may also define instructions regarding what happens to your data after your death.
You may withdraw your consent at any time, without affecting the lawfulness of the processing carried out before.
Write to contact@palarena.com. Requests are free of charge in principle, with a response within one month. An extension of two months may be justified by their complexity or number; we announce it within the first month. In case of reasonable doubt about identity, a proportionate check may be requested.
For data specific to the Club, we direct you to its contact or forward the necessary request to it; we handle the part that falls to Palarena ourselves. You may lodge a complaint with the CNIL or with the authority competent for your situation.
Your sports level is estimated from the questionnaire and confirmed competitive results in order to present your profile, the rankings and suitable matches or activities. You may ask for explanations, contest a score or ask support for a review.
6. Minors and security
Palarena is reserved for adults, in accordance with the Terms of Use. No date of birth is requested: the user declares that they meet this condition when creating their account.
Access is limited to authorized persons and protections are suited to the risks. A data breach is documented and gives rise to the required notifications, in particular to individuals in the event of a high risk.
7. Cookies and embedded services
Operations strictly necessary for sign-in, security and the requested payment feature may be exempt from consent where they meet the legal conditions. Other trackers require your prior agreement. The actual inventory and the way to change your choice are available at https://palarena.com/en/legal/service-providers/2026-10-14/#trackers-and-embedded-services.
A Calendly meeting you request transmits to that service the necessary technical information, contact details and slot. Trackers that require consent are subject to your consent. You can also request a meeting at contact@palarena.com.
The site’s Umami audience measurement and the apps’ Grafana Faro diagnostics remain disabled without your agreement. Each app keeps your choice for 180 days in this browser. You can change it in its privacy settings; in the player app: Menu › Legal information › Cookies. Withdrawal stops the sending. The periods and services concerned appear in the inventory.
A substantial change to this policy is announced to the individuals concerned. The version and its date of application remain identifiable.