GDPR & Fingerprint Policy

What is Fingerprinting?

RacketMaps uses anonymous fingerprinting to prevent abuse such as spam reviews, duplicate submissions, and automated bot attacks. We do NOT use fingerprinting for advertising, tracking, or profiling.

How It Works

When you submit content (reviews, photos, suggestions), we generate a one-way hash from:

• Your IP address
• Your browser user agent

This hash is a SHA-256 digest truncated to 32 characters. It cannot be reversed to recover your IP or user agent. The original data is never stored.

Legal Basis (GDPR Article 6)

Our legal basis for processing this data is Legitimate Interest (Article 6(1)(f)). The fingerprint is necessary to:

• Enforce rate limits (prevent spam)
• Ensure one review per user per club
• Enable moderation and abuse prevention

Data We Store

For each submission, we store:

• anon_fingerprint: 32-character hash (not reversible)
• ip_hash: 16-character truncated hash of IP
• ua_hash: 16-character truncated hash of user agent
• locale: Browser language preference

None of these can identify you personally.

Your Rights

Under GDPR, you have the right to:

• Access: Request all data linked to your fingerprint
• Erasure: Request deletion of all your submissions
• Object: Object to this processing
• Portability: Receive your data in a portable format

To exercise any right, email privacy@racketmaps.com with your approximate submission details (club name, date) so we can locate your records.

Data Protection Officer

For GDPR inquiries: dpo@racketmaps.com