Legal
Privacy Policy
Last updated: July 25, 2026
Palametric (“Palametric”, “we”, “us”) helps padel players find rackets that fit them. This policy explains what personal data we collect, why, and your rights under the EU General Data Protection Regulation (GDPR).
1. Who we are (Controller)
Palametric, operated by Urh Kovačič, Slovenia. Contact: hello@palametric.com.
2. What we collect
- Account data: email address and a securely hashed password when you create an account.
- Player DNA data: your answers to the quiz and the resulting player profile (“DNA vector”, level, play style, preferences, and any injury/comfort flags you choose to share). You can complete the quiz without an account; in that case answers are stored locally in your browser and, if you later sign up, linked to your account.
- Reviews & rackets: rackets you mark as owned/tried and any reviews or feedback you write.
- Communications: emails you send us and your email preferences.
- Usage data: privacy-friendly, cookieless analytics (Plausible) that measures aggregate page views and key actions (e.g. quiz completions, outbound clicks) without cookies and without building a personal profile about you.
3. Why we use it and our legal basis
- To provide the service — run the quiz, compute recommendations, manage your account (performance of a contract).
- To operate the Twin feature — matching you pseudonymously with players who have a similar DNA profile, and showing your pseudonymous profile, rackets and feedback to your matches (consent — see section 4).
- To send transactional emails (e.g. password reset) (contract) and, if you opt in, product emails such as price-drop alerts and retest reminders (consent).
- To improve the platform and keep it secure (legitimate interests).
4. The Twin feature (pseudonymous matching)
If you consent when creating your account, we match you with players who have a similar Player DNA and let you see their rackets and feedback — and them see yours. Matches see only a pseudonym and your DNA profile, rackets and feedback — never your email or real identity. You can turn Twin visibility off at any time in your profile (you stay matched to no one and remain hidden) without deleting your account. We rely on your consent for this and record when it was given.
5. Cookies
We use a strictly necessary cookie to keep you signed in. Our analytics (Plausible) is cookieless, so we set no analytics or advertising cookies and no cookie-consent banner is required. When you click an outbound “buy” link, the retailer or affiliate network (e.g. Awin, CJ) may set their own cookies to attribute the referral — these are governed by their privacy policies, not ours.
6. Affiliate links & third parties
Some links to retailers are affiliate links; if you buy, we may earn a commission at no extra cost to you (see How We Make Money). We do not sell your personal data. We share data only with service providers that process it on our behalf: hosting (Vercel), database (Neon, EU/Frankfurt), and cookieless analytics (Plausible). If we later enable transactional email, we will use a reputable provider and update this list. Where a provider processes data outside the EU, it is covered by appropriate safeguards (e.g. Standard Contractual Clauses).
7. Data retention
We keep account and profile data while your account is active. If you delete your account, we delete or anonymise your personal data within a reasonable period, except where we must retain limited records by law.
8. Your rights
You have the right to access, correct, delete, export (portability), restrict or object to processing, and to withdraw consent at any time. Email hello@palametric.com and we will respond within the timeframes required by law. You also have the right to lodge a complaint with the Slovenian Information Commissioner (Informacijski pooblaščenec, ip-rs.si).
9. Security
Passwords are stored hashed; traffic is encrypted in transit (HTTPS). No system is perfectly secure, but we take reasonable measures to protect your data.
10. Children
Palametric is not directed at children under 16. If you believe a child has provided us data, contact us and we will remove it.
11. Changes
We may update this policy; we will change the “last updated” date and, for material changes, notify you.