Privacy policy

Last updated: 23 October 2026

This policy covers Criclock’s website, ground-management service and Criclock Ads app. For privacy questions or requests, contact the Criclock operator at support@criclock.com.

Information used by the service

We use your email address or phone number to verify and manage your account. Ground owners and their authorised staff may enter venue details, staff permissions, booking contact names and phone numbers, reservation times, player attendance, refreshments, expenses, invoices and payment records. Public venue details are displayed when published by the venue. Private operational records are restricted by account and role permissions.

These records support bookings, ground operations, billing records, customer support and protection against misuse. Venue operators are responsible for the customer and staff information they enter and should provide their own relevant notices. Criclock’s payment records do not require you to enter a card number or CVV into Criclock.

Location, maps and browser storage

Nearby search requests browser location only with your permission. Your search location stays in browser memory. Saving a venue entrance pin stores that venue location separately. Map tiles use OpenStreetMap; address searches use Photon/Komoot. Requests to those services can include an IP address, the map area or the address search you enter.

Authentication uses session storage or cookies. The owner learning checklist is saved locally in your browser. The PWA stores public interface resources for its offline fallback; private account, API and checkout responses are not cached by its service worker. Offline actions do not create confirmed bookings or payments.

Criclock Ads and Meta information

Criclock Ads is an internal tool for Criclock’s own advertising. With authorised access, it uses Criclock’s Meta Page and ad-account IDs, advertising assets, campaign settings, budgets and performance data to prepare and manage Criclock campaigns. Access credentials are kept privately and are not included in the public website. The current integration does not offer Facebook sign-in to Criclock customers or access their Facebook friends, private messages or personal posts.

Visit feedback

After a completed Criclock visit, customers with a verified email may receive one feedback invitation through Brevo when delivery is enabled. The invitation link is private, expires after 30 days and offers an option to stop future feedback invitations. Opening a star link does not submit a rating. Submission requires confirmation and consent to publication.

Ratings contribute to the venue’s Criclock average. Optional comments are checked for privacy and abuse before publication under “Verified Criclock player”; your email, name and booking reference are not published. Critical and positive scores follow the same rules. Criclock Opinion is separate editorial content. Google review links open Google’s service.

Optional Google Calendar connection

Owners can choose to connect Google Calendar when this option is enabled. Criclock uses the connected Google account identifier, email address and calendar authorization to create and update a separate Criclock Bookings calendar. Connection credentials are encrypted on the server. The permission requested covers calendars created by Criclock; it does not provide access to the owner’s other personal calendars.

Confirmed booking events include the customer name, ground, venue, reserved time, estimated players and a link back to Criclock. Owners can separately opt in to exporting customer phone numbers and financial details. Google processes this exported information, and people the owner shares their calendar with may be able to see it. Owners are responsible for appropriate customer notices and calendar sharing. Google account/calendar information is used to operate this connection, not for advertising or sale to others.

Owners can disconnect in calendar settings to stop future updates and remove stored connection credentials, or revoke access through their Google Account. Existing exported events remain in Google until removed there. Viewing the connected Google account in iPhone Calendar also makes those events available through Apple’s Calendar app. Booking and financial records retained by Criclock follow the retention rules below.

Service providers and disclosure

Hosting and database/authentication services are provided through Vercel and Supabase. Meta processes advertising data, and authorised advertising work may use OpenAI’s Codex tools. Information is handled by these providers to operate the relevant features and may be processed in other countries. We do not sell personal information. We may disclose relevant information when required by law or to investigate fraud, protect accounts or resolve a dispute.

Retention and your choices

We retain information needed to provide the service, maintain accurate transaction and audit records, resolve disputes and meet applicable obligations. Deletion requests are reviewed against these needs; closing an account does not automatically erase a venue’s historical financial or booking records. You can request access, correction or deletion by contacting support. We may ask you to verify your identity and authority over the affected account before acting.

See data and account deletion instructions. Material changes will be reflected on this page with an updated date.