Data for Tennis Cookie Policy
Applies from: Publication of this version.
Last updated: 5 October 2026
1. Operator and scope
This Policy explains browser cookies and similar storage or access technologies in connection with Data for Tennis, its account interfaces and related online services.
The operator is ACYCLIC LABS LIMITED, a private limited company registered in England and Wales, United Kingdom, company number 16816653, with its registered office at 11 11 Ampton Road, Birmingham, United Kingdom, B15 2UH (we, us or our).
For questions about these technologies or privacy choices, contact [email protected]. Our Privacy Policy explains personal-data categories, purposes, recipients, retention and rights. Our Terms of Service govern purchases and the data licence.
2. What these technologies do
A cookie is a small piece of information a website asks your browser to store and send with relevant later requests. Cookies can associate a browser with a signed-in session or support a requested operation. Local storage and session storage are other browser mechanisms for retaining information. Similar legal rules can apply to a technology that accesses device information without creating a conventional cookie.
A first-party item is associated with the site you are visiting. A third-party service can set or access items through its own domain or embedded functionality, subject to the browser and the relevant configuration. The classification does not, by itself, decide whether consent is required.
A server log, invoice or account record is different from a cookie stored in your browser. Deleting a browser item does not automatically delete information already held by a server or another provider.
3. Requested functions and optional uses
3.1. Account access and sessions
When you use account and sign-in features, authentication and session mechanisms allow the Service to recognize a valid signed-in session, associate it with the requested account and maintain authorized access between page requests. These functions can require browser cookies even though the corresponding account information is held on a server.
A technology is treated as strictly necessary only where it meets the applicable legal test for the communication or service you requested. A security, convenience or commercial purpose is not automatically sufficient to qualify every associated technology for an exception.
3.2. External sign-in and payment services
If you choose an external sign-in service such as Google where offered, its authentication process can use its own browser technologies. The provider's privacy and technology information applies to its independent activity. Choosing Google sign-in is not consent to Google Analytics or unrelated advertising.
If you select an external checkout or payment method, the identified provider can use technologies needed for that transaction, payment-session continuity or its applicable security checks. Available providers are identified in the actual purchase flow. A provider's separate notice does not excuse consent or disclosure requirements that apply to an integration operated on our pages.
Requesting an external sign-in or payment function is not blanket consent to every optional purpose of that provider. The applicable exception or consent requirement must be assessed for the particular use.
3.3. Optional technologies
Preferences unrelated to essential operation, audience analytics and advertising are separate purposes from account authentication. Where an optional technology is offered, information about its specific purpose, provider and duration must accompany the relevant choice before it is activated, with any legally required consent or other applicable exception.
Optional tracking is not authorized by these Terms, this Policy, a purchase, continued browsing or scrolling. A new purpose or materially changed provider arrangement may require new information and a new choice. Updating a policy page does not, by itself, revive withdrawn consent or authorize new tracking.
4. Duration and removal
Session-based information normally lasts for the relevant browser session, although browser restore features can preserve or restore some session information. Persistent cookies have a configured expiry or remain until earlier deletion. A persistent item's expiry may be renewed by a relevant interaction where that behavior is part of its disclosed operation.
Local storage is not automatically cleared when a tab closes; session storage is normally associated with the relevant tab or browsing session. An application's deletion rules and browser behavior determine the actual lifetime. A label such as authentication or security does not justify keeping a device identifier longer than needed for its purpose.
Your browser's site-data settings can display stored items, their domains and, for cookies where shown, their expiry. Removing an item may sign you out or reset a stored preference. A server-side session may also expire or be revoked independently of whether a browser still holds an associated item.
Device duration and retention of associated server information are separate. Server-side records follow the purposes and retention criteria in the Privacy Policy.
5. Consent and legal grounds
Where EU/EEA ePrivacy rules apply, storing or accessing information on a device generally requires prior informed consent unless a specific exception applies, including storage or access strictly necessary for a service explicitly requested by the user or solely necessary to transmit a communication. The applicable national rules determine the precise conditions.
UK PECR also regulates storage and access technologies. Any applicable exception must satisfy its own requirements, including information and objection controls where relevant. A UK exception does not automatically apply in another jurisdiction or authorize a different purpose.
An exception from device-storage consent does not remove the obligation to provide required information. If personal data is processed, a separate valid data-protection ground is needed. Legitimate interests under data-protection law do not replace consent where device-storage law requires it.
Where consent is required, the choice must be informed, specific and affirmative. A preselected option, general acceptance of the Terms or failure to change browser defaults is not treated as that consent. Genuinely exempt technologies do not require consent merely for the sake of displaying a banner.
6. Your choices
You can inspect, delete or block cookies and other site data through the settings offered by your browser. Settings may be specific to a browser, profile or device. Blocking an authentication mechanism can prevent sign-in or interrupt an existing session; removing stored choices can reset those choices.
Where a consent-dependent technology is offered, you must be able to decline it and withdraw consent through the relevant controls as easily as you gave it, subject to the applicable law. Contact [email protected] for assistance. Contacting support is not imposed as a substitute for a legally required immediate or self-service choice.
Withdrawing consent stops further consent-dependent use as required by law, without making earlier lawful processing unlawful. Rejecting optional tracking does not, by itself, justify withholding unrelated core functionality. A request necessary to recognize or remember your rejection must not be repurposed as an advertising identifier.
Browser blocking does not necessarily stop all server-side processing or remove information held independently by a payment or identity provider. The privacy rights explained in our Privacy Policy remain available.
7. US opt-out signals and athlete records
A legally recognized universal opt-out signal, including Global Privacy Control (GPC) where applicable, is different from the older Do Not Track (DNT) browser setting. Where a relevant US law requires a recognized signal to control covered sale, sharing or targeted advertising, those requirements apply. General agreement to our Terms cannot waive them.
Deleting cookies, declining analytics and objecting to a commercial disclosure of an athlete record are not necessarily the same action. A player can have rights in tennis-product information without using a cookie or maintaining an account with us. Where a browser or account cannot reasonably be associated with the record concerned, contact [email protected] to identify the record and exercise an applicable right. We do not require additional identification for a signal where the law requires it to be effective without that information.
Our Privacy Policy explains the distinction between information used to operate the Service and identifiable sporting information provided to customers. The absence of advertising cookies does not, by itself, determine the legal status of those separate disclosures.
8. Recipients and international processing
We operate the account and session functions associated with our Service. A provider involved in a requested external sign-in or payment interaction can receive identifiers and request information relevant to that function. Its independent processing is governed by its applicable notice, alongside any obligations we have for our own part of the interaction.
The Privacy Policy describes recipient categories, international-processing considerations and how to request information about relevant safeguards. Our UK registration is not a statement that every provider or server is in the United Kingdom. Consent to a cookie is not automatically consent to every subsequent use or international transfer of the associated personal data.
9. Updates and contact
We may update this Policy when the Service, relevant technologies or applicable requirements change. The date above identifies the current version. A change requiring new information, consent or another legal step must meet that requirement before the affected technology is used.
For contractual information, read the Terms of Service. For personal-data processing and requests, read the Privacy Policy. Product information is available in pricing, coverage and the documentation; these pages do not replace applicable technology disclosures.
For all cookie and privacy enquiries: [email protected].