Privacy policy
Last updated: 11 November 2026
This policy covers the Multipass apps and the Multipass account. It explains what data we process, why, for how long, who can access it and how to exercise your rights.
In short
- Your tournaments, matches and players stay on your phone. Multipass has no access to them: no server for this data, no analytics, no crash reports, no advertising.
- The Multipass account is optional and is only used for credits (upgrading a Billiard Bracket tournament to L128). It only keeps your email address, your sign-in methods and your credit history.
- Nothing is sold or shared for commercial purposes.
- You can delete your account at any time, from the app or by email: see Delete your account.
1. Who we are
The data controller is Alain PROST, sole trader, trading as Multipass.
- Postal address: BP 367, 98810 Mont-Dore, New Caledonia
- Street address: 802 rue Félix Bernut, 98809 Mont-Dore, New Caledonia
- All correspondence must be sent to the postal address.
- Contact for your personal data: dpo@multipass.studio
No data protection officer has been appointed; this address is our point of contact.
2. On your phone or in your account
The Multipass apps work offline. What you enter in an app (players, tournaments, matches, settings) is stored only on your phone. We do not receive it, cannot see it, and cannot view, correct or recover it for you. For this data, you decide what you store, how long you keep it and who you show it to: each app's section (§9) explains what is stored and how to delete it. The only exception: technical data from the QR code scanner (§9).
Only the Multipass account goes through our servers. It never receives a player, a score or the content of a tournament: only your email address, your sign-in methods and your credits (§3).
If your phone's backup is turned on, Android or iOS may copy the apps' data to your Google account (Google Drive) or Apple account (iCloud). This copy is between you and Google or Apple, under their own terms, and does not go through Multipass.
3. The Multipass account
The account is shared by all Multipass apps. It is created the first time you sign in, with a code sent by email, or with your Google account (Android) or Apple account (iPhone). When it is created, you accept the terms of use and confirm that you are 15 or over.
| Data | Why | Legal basis | How long |
|---|---|---|---|
| Email address | Identify your account, send you the sign-in code | Performance of a contract | Until the account is deleted |
| Sign-in methods: Google or Apple identifier, email address provided and whether it is verified | Sign you in; link sign-ins sharing the same verified address to a single account | Same | Until the account is deleted |
| 6-digit sign-in code | Check that the address is yours | Same | 10 minutes |
| Acceptance of the terms of use and confirmation of being 15 or over: date and version accepted | Prove your agreement | Performance of a contract | Until the account is deleted |
| Credit history: operations (credit, activation, release), app concerned, identifier of the tournament upgraded to L128, date | Keep your balance, activate a tournament, help you if something goes wrong | Performance of a contract | Until the account is deleted |
| Technical logs: IP address, device, requests, emails sent | Security, troubleshooting | Legitimate interest | 7 days (server), 30 days (email delivery) |
| Database backups | Recovery after an incident | Legitimate interest | 7 days |
- Limit on sending codes: to prevent abuse, we count the codes requested for each address, using a fingerprint of your address and not the address itself, kept for 2 days. Before sending, the domain name of your address (what follows the @, never the rest) is checked with Cloudflare.
- Accounts never used: a code request that is never confirmed is erased after 48 hours. An account that has never had a credit is erased after 12 months without a sign-in; you can create a new one at any time. An account that has had credits is never erased this way.
- When an account is deleted, unused credits are lost; we only keep their total number per month, with no link to you.
- In-app purchases: not available yet. This policy will be updated before they open.
4. The multipass.studio website
The website (and the app websites under *.multipass.studio) uses no cookies and no analytics. Its host,
Cloudflare, records visit logs (IP address, browser, page requested) for security and to run the site. It keeps them
for as long as it needs to protect its network, then deletes them; it does not publish a fixed period. We have no
access to these logs.
5. Our service providers and where your data is
| Provider | Role | Where |
|---|---|---|
| Supabase (Supabase Pte. Ltd., Singapore; Supabase, Inc., United States) | Database, sign-in, account server | Database and backups in Paris, France; service support and administration from the United States and Singapore |
| Resend, Inc. (United States) | Sending the sign-in code email | Sent from Ireland; account and logs in the United States |
| Cloudflare, Inc. (United States) | Website hosting | Cloudflare's global network |
| Google (Google Workspace) | multipass.studio email (your emails to dpo@ and to the support addresses) | Google data centres |
These providers act on our behalf, under a data processing agreement. Google (Google sign-in, Google Play, the ML Kit library used by the QR code scanner) and Apple (Sign in with Apple, Hide My Email, App Store) also process data for their own services, as independent controllers.
Transfers outside the European Union and the United Kingdom. We run the service from New Caledonia, and some providers access data from the United States or Singapore. These transfers are covered by the European Commission's standard contractual clauses (and the UK Addendum) in our providers' data processing agreements; Resend, Cloudflare and Google are also certified under the EU–US Data Privacy Framework and its UK Extension.
6. Security
Encrypted connections (HTTPS); keys and secrets kept out of the code; two-factor authentication on our provider accounts; credit history not directly accessible from the apps; administrative access restricted to the publisher.
7. Your rights
You can ask to access your data, have it corrected or erased, restrict its processing, object to processing based on our legitimate interest, receive the data you gave us in a readable format (portability), and, under French law (Article 85 of the Loi Informatique et Libertés), leave instructions on what happens to your data after your death: its retention, erasure or disclosure, and who should carry them out. Write to dpo@multipass.studio from your account's email address; we reply within one month at most. If the request comes from another address, we check that it is yours by sending a code to the account's address.
Changing your email address. Your account is tied to your email address, not to your Google or Apple account: you can always sign in with a code sent to that address. To change address, use the app: a code is sent to the old address and one to the new address, and your account keeps its credits. Do it while you still receive emails at the old address: without access to it, we can neither change the address nor move your credits to another account, as we cannot check that the request comes from you.
You can also complain to a data protection authority: the CNIL in France (www.cnil.fr), including from New Caledonia, the authority of your country in the European Union, or the ICO in the United Kingdom (ico.org.uk).
8. Delete your account
From the app, or by email if you no longer have the app: the steps, what is deleted and what remains are on the Delete your account page.
9. What each app stores on your phone
Billiard Bracket
Billiard Bracket is for running billiards tournaments. Everything below stays on your phone; Multipass has no access to it.
- Player file: display name; if entered, first name, surname, date of birth, gender and sharing consent; creation and last-entry dates. Kept until you delete the player (not possible while they are entered in an open tournament) or uninstall the app.
- Current tournament log: entries, results, scores, times, tables, registration fees, new entries, payments received and paid out. A finished tournament is deleted when the next one is created; an interrupted one is kept until you resume or delete it.
- Past tournament summaries: date, name, standings, prizes, payouts, unpaid amounts per player, financial summary. Kept with no time limit; when you delete a player, their name is replaced with "Deleted player" and their unpaid amounts are erased.
- Licence: your Multipass account session, displayed address, last known balance, rights for L128 tournaments.
- Settings: appearance, language.
Your players' data. You, the organiser, decide what you record about your players: you are responsible for this file, Multipass is only the app's publisher.
- For a private tournament among friends, this use stays personal. If you organise for a club, association or business, the GDPR applies to this file: the organisation must inform its players and handle their requests.
- Only record what you need: date of birth and gender only if your tournament's categories require them. For a player under 18, parental consent is the organiser's responsibility.
- Tell your players what you keep and why, and delete a player who asks you to. Template wording, to display or read out at registration: "We record your name (and, if needed for categories, your date of birth and gender) in the Billiard Bracket app, on the organiser's phone, to run tournaments and results. This data is not passed on to anyone. You can ask to see it or have it deleted at any time by contacting [organiser]."
A tournament can be exchanged with Billiard Match by QR code, from a screen to a camera, without a network: player names, table, format, score and match duration. Billiard Bracket only uses the network for the Multipass account (L128 tournaments). Its QR code scanner works without a network, with the same exception as Billiard Match (below).
Billiard Match
Billiard Match is for refereeing and timing a billiards match. It works without an account and without a network, QR code scanner included. The only exception: when your phone is connected, Google's ML Kit library, which reads QR codes, sends Google technical operating data (phone model, app version, a per-installation identifier, performance metrics, errors), but not the content of QR codes or your matches. Stored on your phone: matches and their log (player names, scores, times, referee decisions), your presets and your preferences. They are kept until you delete them in the app or uninstall it. An exported preset or match log becomes a file that you share yourself, with the app of your choice; the log contains player names. Exchanges with Billiard Bracket use QR codes, from a screen to a camera, without a network.
10. Children
The apps and the Multipass account are intended for billiards organisers and referees. The account is not intended for anyone under 15: when it is created, you confirm that you are 15 or over.
11. Changes
We update this policy when our processing changes; the date at the top of the page applies. Significant changes are announced in the apps before they take effect.