Legal

Privacy Policy

Last updated 13 May 2026

This Privacy Policy explains how Natrix Visuals, a sole proprietorship of Jenny Etoiles based in Bali, Indonesia ("we", "us", "our"), handles personal data in connection with the matchscreen.app marketing site and any branded tenant of the app we provision for a customer.

For these matters, Natrix Visuals is the data controller. Contact: [email protected].

1. Scope

This policy covers:

• The marketing website at matchscreen.app.
• Each branded tenant instance of the app we deploy for a customer (usually at yourclub.matchscreen.app).
• Email and other written communications with us.

It does not cover third-party websites or services we link to.

2. What we collect

Visitor data on the marketing site

• Cookieless analytics. We use Cloudflare Web Analytics, which is privacy-friendly and does not set cookies or fingerprint visitors. It gives us aggregate counts (pages viewed, referrer, country, broad device type) — not individual visitor identities.
• Server logs. Cloudflare, our hosting provider, records standard request metadata (IP address, user agent, timestamp, URL) for security, abuse prevention, and infrastructure operation. We don't combine these logs with marketing profiles.

Customer data (business contacts)

• When you enquire or purchase, we collect business contact information you provide: name, work email, business name, and any details needed to invoice you.
• We keep email correspondence and invoices as part of our business records.

Tenant operational data (scores, names, tournament data)

The tournament console is a thin client that runs in the browser. The Operator (a staff member at the club) types in player names, scores, timers, and the tournament name. This data is held in the browser's memory and localStorage on the device running the app. It is not transmitted to a Natrix Visuals server. There is no central database of tournament data.

For any personal data of players that a club enters (typically just names), the club is the controller. Our role is limited: we provide the software, and the hosting infrastructure (Cloudflare) is involved only insofar as the browser fetches the app itself and any static assets.

Communications

Emails sent to [email protected] are received by our email provider and retained as long as we need them to support you or to keep accurate business records.

3. Legal bases (GDPR / UK GDPR)

Where the GDPR or UK GDPR applies, we rely on:

• Performance of a contract — to deliver and support your tenant after you place an order.
• Legitimate interests — to operate the marketing site, prevent fraud and abuse, and run minimal cookieless analytics. We've considered your rights and we think these processing activities are low-impact.
• Consent — where required, for example for any direct marketing emails you ask to receive.
• Legal obligation — to keep tax and accounting records.

4. Cookies and tracking

• Marketing site: Cloudflare Web Analytics (cookieless, no fingerprinting). Google Fonts is loaded from Google's servers; this means Google may receive your IP and user-agent for the purpose of serving the font files. See Google's privacy policy for details.
• Tenant app: Uses localStorage in the browser to persist tournament state (format, players, scores, timer) so an accidental refresh doesn't wipe a tournament in progress. This is not used for tracking.
• We do not use advertising cookies, remarketing pixels, or third-party trackers.

5. Sharing and sub-processors

We share personal data only with the limited set of providers we need to run the service:

• Cloudflare — hosting, CDN, edge logs, and cookieless analytics. See Cloudflare's privacy policy.
• Google Fonts — for the marketing site only. See Google's privacy policy.
• Our email provider — to send and receive email to and from [email protected].
• Payment processors (Stripe, Wise, or your bank) — when we invoice you. They only receive the data needed to process the payment.

We do not sell or rent personal data. We do not share data for cross-context behavioral advertising.

6. International transfers

Natrix Visuals operates from Indonesia. Cloudflare delivers the service from its global edge network and may process your request from a point of presence outside your country. Google Fonts is served from Google's global infrastructure. As a result, personal data may be processed in Indonesia, the United States, the European Union, and elsewhere.

Where these transfers leave the EEA, UK, or other regulated jurisdictions, we rely on the providers' relevant transfer mechanisms (such as adequacy decisions or Standard Contractual Clauses) and on the privacy-preserving design of the service (no central tournament database).

7. Retention

• Tenant operational data (player names, scores, tournament names): held in the browser's local storage on the device running the app. It stays there until the Operator clears it, the browser clears it, or the tenant is deprovisioned. We don't have a copy.
• Business records (invoices, contracts, emails): retained for as long as needed to deliver the service and to comply with applicable tax and accounting law (typically up to ten years under Indonesian rules), and otherwise as long as reasonably needed.
• Server logs: retained by Cloudflare under its default retention policies.
• Cookieless analytics: aggregated; not tied to identifiable visitors.

8. Your rights

Depending on where you live, you may have rights over the personal data we hold about you, including the right to:

• access the data we hold about you;
• have inaccurate data corrected;
• request deletion;
• restrict or object to processing;
• receive a copy of the data in a portable format;
• withdraw consent at any time (for any processing based on consent);
• lodge a complaint with a supervisory authority in your country.

To exercise any of these rights, email [email protected]. We may ask you to verify your identity in a way that is proportionate to the sensitivity of the request.

9. For club customers (controller / processor)

When a club uses its tenant to run a tournament and enters personal data about players (for example, their names on the leaderboard), the club is the controller of that data. The club is responsible for having a lawful basis for processing it, and for obtaining any required consent — including parental consent for any minors taking part in junior tournaments.

Because tournament data lives in the browser and is not transmitted to a Natrix Visuals server, our processor role is narrow: we provide the software and the hosting infrastructure that delivers it. We do not access player data in the course of normal operations.

10. Children

The product is sold business-to-business and is not directed at children. Junior tournaments may, however, involve participants under 18 whose names are entered by the club's Operator. The club is responsible for the lawful basis (typically parental consent) for entering those names.

11. Security

We take reasonable measures to protect personal data, including: serving the site and the app over TLS, keeping no server-side database of tournament data, applying the principle of least data (we collect what we need to deliver and invoice), and using reputable infrastructure providers. No system is 100% secure; if we become aware of an incident that affects you, we'll take appropriate steps to notify you in line with applicable law.

12. Automated decision-making

We do not use personal data for automated decision-making or profiling that has legal or similarly significant effects on you.

13. Changes to this policy

We may update this policy from time to time. When we do, we'll update the "Last updated" date at the top of this page. For material changes, we'll notify affected customers by email.

14. Contact

Natrix Visuals (sole proprietorship of Jenny Etoiles)
Bali, Indonesia
Email: [email protected]

---

This document is provided in English. We are a small business and these terms are not bespoke legal advice for you, the reader — please consult your own counsel before relying on them for your jurisdiction.