Privacy: what the Desk keeps

These are the Desk's privacy terms, word for word.

What the Desk collects and why

The Desk collects usage data, which is a record of how people use the site. Usage data helps the Desk run the site, answer questions and make it better, but the Desk doesn't sell it or use it for advertising.

The Desk records each visit as a screen recording: clicks, pointer movement, scrolling and what you type. Typed text is not masked, so a recording shows what you type in the search box, the chat box and the sign-in form.

The Desk collects these kinds of data:

• What you type, search and ask, and the Desk's answers.
• The pages you open, what you click, and screen recordings of your visit.
• Your device, browser, network address and rough location, such as your city.
• If you sign in, your name, email address, the team, club and league you name, and a link to your player record.
• If you buy a Desk Pass, your subscription, its status and its email address.
• If you ask for your area, the area you pick and any email you leave, used only to tell you when your area opens.
• If you hold today's Desk Pass price, the area, your email and that price, used only to tell you when your area opens.
• If you vote on what's next, the item, the day and a one-way code that stops repeat votes. A vote holds no name, email or address.
• If you get the weekly results email, your yes or no, and when each email went.

Each chat question is stored with the Desk's answer, the date and codes that link it to your browser, network or account. Anyone with a shared answer's link sees your question and the Desk's answer, and nothing else about you.

Who helps run the site

• Vercel hosts the site. It logs each request and counts page opens.
• Railway hosts the Desk's own database.
• PostHog Inc. stores usage data and screen recordings in the United States. Your browser sends them through the Desk's own address. Each night the Desk's server also sends PostHog a list of chat, search, Desk Pass and link-open events, without names, emails or typed words.
• The Desk's server also sends PostHog each chat question that goes to Anthropic's AI, with the answer and the recent conversation. If you are signed in, what the server sends PostHog can include your name and team. What an agent asks the Desk goes to PostHog too.
• Each area request goes to PostHog too, with the area and the page you asked from, but not your email or network address.
• Anthropic's AI, Claude, writes the chat's answers. Anthropic receives your questions, the recent conversation and, if you are signed in, your name and team.
• Stripe takes Desk Pass payments and holds your payment details.
• An email service sends sign-in links and codes and the weekly results email, so it receives your email address.
• Telegram carries a message to the owner when a sign-in is refused because the name is already claimed. The message holds the name you typed.

How long it is kept

• Screen recordings are kept for up to 30 days.
• PostHog keeps usage data other than recordings for up to a year.
• If your browser holds a key from signing in or an invite link, PostHog keeps a profile of it with no end date. A profile holds the first page the browser opened, the site that sent it and a rough location.
• The Desk's own database keeps search terms for up to a year.
• The Desk keeps each area request, which holds the area, the day and a code made from your network address. The Desk deletes an area request's email and network code 365 days after the request. The Desk uses the email only to tell you when your area opens.
• The Desk deletes a held price's email and network code 365 days after the hold.
• Chat questions and answers, accounts and the Desk's other records have no set end date.
• A shared answer stays readable at its link with no set end date.
• Vercel keeps its request log for about an hour, and its count of page opens for 31 days.
• Data in your browser stays until you clear it.

What is left out

• A shared report page is never recorded, and it sends nothing to PostHog.
• A shared answer's page is never recorded, and PostHog events never hold its link.
• Recording pauses on a page opened from a sign-in link or a Year in Review link.
• Agent keys, sign-in links and sign-in keys are removed from PostHog events. A recording still shows a sign-in link, key or code on the screen.
• Email addresses are removed from PostHog events too. A recording still shows an email address you type into a form.
• Vercel's count of page opens never holds a search term, a sign-in link or a shared answer's link.

What stays in your browser

Your chat conversations are saved in your browser, so a reload keeps them. Your browser also keeps a random visitor code, your theme, a few small settings and, if you have one, your sign-in key. PostHog keeps its own random codes there, with the first page you opened and the site that sent you. All of it stays until you clear it.

If you use the Desk from ChatGPT or Claude

When an AI app asks the Desk for you, the Desk keeps these to answer it and to learn what people ask:

• Each request: the Desk tool the app used, such as a team look-up, and what it asked that tool for. The record also holds the app's name and your question as the app passed it on. If you're signed in, the request is linked to your account.
• If you're not signed in, a one-way code that only counts your free use and can't be turned back into its source. The code comes from your ChatGPT account in ChatGPT, from your conversation in the Claude app, and from your network in any other app.
• If you link an app: which app, when you linked it and when it last asked. The Desk also keeps one-way codes of your email and of the app's tokens, the keys it holds to ask for you.
• To count sign-ins from an app, the Desk also keeps your network address and a second one-way code of your email.
• Each request also goes to PostHog, with your question and what the app asked the tool for.

Each kind of record has its own end date, but a linked app stays until it's revoked.

What the Desk keeps	Deleted
Each request	365 days after the request
The code that counts your free use	35 days after its last use
An app's expired token	1 day after it expires
The code of your email from an app's sign-in	1 day after the sign-in
Your network address and the second code of your email	35 days after their last use
A linked app and its tokens	30 days after it's revoked

You can revoke an app on Bring your own agent.

Your choices and questions

You can clear the site's data in your browser at any time. Write to support@thetennisdesk.com to see or delete what the Desk holds from your use of the site. Questions about these terms go to the same address, and a person reads every message.

A player's name

The Desk prints the names USTA publishes on its rosters and results, but you can ask to have your own name withheld.