← Back to site

Privacy Policy

Effective April 27, 2026 · Updated October 30, 2026

What we collect

When you book a lesson or send an inquiry, we collect your name, email address, phone number, preferred court setup, and optional preferred area or court notes. We do not collect payment information directly — payments are handled by third-party processors.

When you write a review, we collect your star rating, any words you add, the name you want shown, and, on the public review form, an email or phone number so DeMario knows who you are. With your permission, given by the checkbox on the form, the rating, words, and name are published on this site; your email or phone number never is. A review with words sent from the private link in our email appears right away, and DeMario can take it down. A review sent from the public form appears only after he approves it.

To slow down spam, when you book, send an inquiry, or write a review, the site also stores a scrambled one-way code made from your IP address (a salted hash), not the address itself. It cannot be turned back into your address, and it is used only to slow down or spot repeated and abusive submissions.

How we use your information

We do not sell, rent, or share your personal information with third parties for marketing purposes.

Google Calendar availability data

DeMario may connect his Google Calendar so this site can check whether a requested lesson time is already busy. The site uses Google Calendar FreeBusy access only to read busy time ranges for scheduling availability. It does not request event titles, notes, locations, attendees, or event descriptions.

Google Calendar availability data is used only to prevent double-booking lessons. It is not sold, used for advertising, or used to build marketing profiles. OAuth tokens are stored server-side as deployment secrets, and Google Calendar data is not shown to students.

This site's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. DeMario can revoke access at any time from his Google Account permissions or by removing the Google OAuth credentials from the site's deployment settings.

Data storage

Your data is stored securely via Supabase (a managed PostgreSQL provider). Supabase processes data in accordance with GDPR and SOC 2 standards. For more information, see Supabase's privacy policy.

Data retention

We retain booking and inquiry records for up to 2 years for scheduling and business record-keeping purposes.

Your rights

You may request access to, correction of, or deletion of your personal data at any time. To make a request, email demariomontez10@gmail.com. We will respond within 30 days.

Cookies and analytics

This site uses session cookies for authentication purposes only (admin login). We do not use tracking or advertising cookies.

We measure page views and a few anonymous interactions using Vercel Web Analytics, which is cookieless. It records the page visited, referrer, and general device type, and counts actions such as which booking button was tapped, how far the booking form got, and whether a payment or partner-platform link was opened. Those counts never include your name, email address, phone number, or anything you type into a form. It does not set cookies, does not build a profile of you, and does not follow you to other websites.

Some links DeMario shares, such as the one in his Instagram or TikTok bio, on his QR card, or in the email asking for a review, carry a short label naming where they were shared. If you arrive through one, your browser keeps that label for the current tab only (session storage, not a cookie), and a booking you make sends it along so DeMario knows where you found him. It is one of a few fixed words, such as “instagram”, and never anything about you.

Contact

Questions about this policy? Email demariomontez10@gmail.com or call (469) 371-9220.