Privacy Policy

Last updated: March 2026

TTA Membership Checker ("we", "our", or "us") is operated by Hundred Acre Tech. This policy explains what information we collect, how we use it, and your rights in relation to it.

1. What We Collect

We collect only what is necessary to provide the service:

• Account information — your email address and a hashed password, stored securely via Firebase Authentication.
• Payment information — payment is processed by Stripe. We do not see or store your card details. We only retain a record that a valid purchase was made (via a Stripe session ID).
• Usage data — we do not collect analytics, crash reports, or browsing behaviour.

2. Player Data You Upload

When you upload an Excel or CSV file to check TTA memberships, all processing happens locally in your browser. Player names and member IDs are sent directly from your browser to the Table Tennis Australia website (tabletennis.org.au) using your own TTA login session. This data is never sent to our servers.

3. How We Use Your Information

• To authenticate you and verify your licence is active.
• To process your one-time payment via Stripe.
• To respond to support requests if you contact us.

We do not sell, rent, or share your personal information with third parties for marketing purposes.

4. Third-Party Services

• Firebase (Google) — authentication and licence storage. Subject to Google's Privacy Policy.
• Stripe — payment processing. Subject to Stripe's Privacy Policy.
• Table Tennis Australia — your browser communicates directly with their member-finder to retrieve membership data.

5. Data Retention

Your account email and licence status are retained for as long as your account exists. You can request deletion at any time by contacting us. Stripe session records used for fraud prevention are retained for 12 months.

6. Security

We use Firebase Authentication (industry-standard, OAuth 2.0 based) and HTTPS throughout. We do not store passwords in plaintext. Payment data is never stored on our infrastructure.

7. Your Rights & Account Deletion

You have the right to access, correct, or delete your personal data. To request account deletion, email steven@hundredacretech.com from the address associated with your account with the subject line "Delete My Account". We will process your request within 30 days. Note that deleting your account will permanently revoke your licence.

8. Changes to This Policy

We may update this policy occasionally. We'll update the "last updated" date above. Continued use of the extension after changes constitutes acceptance.

9. Contact

Questions? Email us at steven@hundredacretech.com.