Privacy Policy

Information pursuant to the GDPR. Last updated: 26 September 2026

1. Controller

Markus Prenner, Mariahilfer Straße 1/4, 8020 Graz, Austria, email management@wavehubtennis.com. See also the Legal Notice.

2. What data we process

Account data: name and email address. There is no password: you sign in with a one-time code sent to your email.
Usage data: login times, chosen membership, settings, technical log/device information.
Push notifications: if you turn them on, the delivery address your browser or phone issues for this device (with its encryption keys), so we can send notifications to it. Turning them off or deleting the app ends this.
Membership records: which upgrade links were redeemed on your account and when.
Payment data: processed via Whop. WaveHub stores no card data — only payment/subscription status, customer and subscription ID.
Communication: emails and support requests.
Reach measurement: page views, the page you came from, country, browser and device type. This is collected without cookies, is not linked to your account and is only ever shown to us as totals.

3. Purposes & legal bases

Providing the membership & processing payments — Art. 6(1)(b) (contract).
Legal retention obligations (e.g. invoices) — (c).
Security, abuse prevention, product improvement — (f) (legitimate interest).
Reach measurement — (f) (legitimate interest in knowing how the site is used).
Playing the embedded video — (a) (consent, given by clicking play).
Newsletter/marketing — (a) (consent), revocable at any time.

4. Recipients / processors

We use carefully selected processors (data processing agreements are in place):

Supabase — database, authentication, hosting of app data.
Whop & its payment providers — checkout, payment processing, subscription management and invoicing.
Resend — sending emails: sign-in codes and confirmations, and, if you have agreed to it, picks and offers.
Vercel — hosting of the website and application, and Vercel Analytics for cookieless reach measurement.
Google Ireland / YouTube — the analysis video on the start page is played from YouTube. Opening the page sends nothing to Google: you first see a still image, and the player is only loaded once you click it. From that click on, your IP address and browser details reach Google and it may store data in your browser. The player is embedded over youtube-nocookie.com.
Apple, Google and Mozilla push services — delivering push notifications to your device, depending on the device and browser you use.
Telegram — the members' groups through which Content is also shared.

Some services may process data in third countries (e.g. the USA); transfers are based on the EU Standard Contractual Clauses or an adequacy decision.

5. Cookies & local storage

Technically necessary cookies/local storage for login sessions (no consent required). Traffic measurement runs through Vercel Analytics, which counts page views, referrers and countries without cookies, without profiling and without storing your IP address. There is no advertising pixel and no cross-site tracking. The YouTube player on the start page loads nothing until you click it; if you never play the video, nothing about your visit reaches Google.

6. Retention

We store personal data only as long as necessary for the stated purposes or required by statutory retention periods. After account deletion, data is deleted or anonymised unless a retention obligation applies.

7. Your rights

You have the right to access, rectification, erasure, restriction, data portability and objection, as well as the right to withdraw consent. Requests to management@wavehubtennis.com.

Right to lodge a complaint with the supervisory authority: Austrian Data Protection Authority, dsb.gv.at.

← Back to WaveHub