Privacy policy
Last updated: 6 October 2026
SmashPoint (“we”, “us”) runs www.smashpoint.pk, an online badminton shop for Pakistan, and SmashPoint Play, a free feature that lets players make a profile, add friends and plan matches together. This policy explains what information we collect, how we use it, who we share it with and the choices you have.
1. Information we collect
When you place an order
- Your name, mobile number, city and delivery address, and your email if you give it.
- The items you order, stringing preferences (string, tension), payment method (cash on delivery or bank transfer) and any notes you add.
You do not need an account to order.
When you sign in to SmashPoint Play
You can sign in with your Google account or with an email address and password.
- Sign in with Google: we receive your name, email address and profile picture from Google. We do not receive your Google password and we do not access your Gmail, contacts, Drive, calendar or any other Google data.
- Email sign-in: your email address. Your password is handled by Google Firebase Authentication and is never visible to us.
To use Play you also create a player profile with:
- Your display name and profile picture (from Google, if you used Google sign-in).
- Your city, playing level (beginner, intermediate or advanced) and an optional short bio.
As you use Play we store your friend requests and friends, the matches you create, join or are invited to (venue, date and time, format, players and notes), match scores that players enter and confirm, and the leaderboard rating, points and win/loss record we calculate from those scores.
Stored in your browser
Your shopping bag and the codes of orders placed from your device are kept in your browser's local storage, not on our servers. Signing in keeps a login session in your browser so you stay signed in.
2. How we use your information
- To confirm, prepare, string, deliver and support your orders, including contacting you on WhatsApp or by phone about your order.
- To run SmashPoint Play: show your profile to other members, let people find you by name, send and accept friend requests, and organise matches.
- To keep the service secure and prevent abuse.
We do not sell your information, use it for advertising, or use it to build advertising profiles.
3. Who can see your information
- Other Play members (signed in) can see your display name, profile picture, city, level and bio. They can search for you by name.
- The leaderboard is public. Once you have a confirmed match score, anyone visiting the website can see your name, picture, city, rating, monthly points and win/loss record there. We ask search engines not to index it. You can untick “Show me on the public leaderboard” on your Profile page to appear only to signed-in members.
- Your email address is never shown to other members.
- Friend requests are visible only to the two people involved.
- Invite-only matches are visible only to the organiser and the people invited. Open matches, including the names of players who joined, are visible to all signed-in members.
- SmashPoint staff can see orders and the list of Play members to run the shop and the service.
4. Service providers
- Google Firebase (Google LLC) hosts the website and stores account, order and Play data, and handles sign-in. See the Google Privacy Policy.
- Couriers receive your name, phone number and delivery address to deliver your order.
- WhatsApp: if you use a “Share on WhatsApp” or “Chat on WhatsApp” button, the message is sent through WhatsApp under its own privacy policy.
We may also disclose information if the law requires it.
5. Google user data
SmashPoint's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
From Google sign-in we only request your basic profile (name, email address and profile picture). We use it only to create and show your SmashPoint Play profile and to sign you in. We do not transfer it to others except as described in this policy, do not use it for advertising, and do not let humans read it except to provide support you ask for, for security, or to comply with the law.
6. Embedded videos and our YouTube channel
Some pages show videos from YouTube, TikTok, Instagram or Facebook. Those services may set their own cookies when you view or play them, under their own privacy policies.
We use the YouTube API Services only to manage our own SmashPoint channel (uploading and editing our videos, playlists and replying to comments). We do not access other people's YouTube accounts. See the YouTube Terms of Service and the Google Privacy Policy.
7. How long we keep it
- Order records are kept as long as needed for delivery, returns, warranty and our business records.
- Your Play profile, friends and matches are kept until you delete them or ask us to delete your account.
8. Your choices and rights
- You can edit your Play profile at any time from the Profile page.
- You can remove friends, decline invites and leave matches at any time.
- You can ask us to show, correct or delete your order details or your Play account and data. Contact us using the details below and we will act on your request within 30 days.
- You can remove SmashPoint's access to your Google account at any time at myaccount.google.com/permissions.
9. Security
Data is sent over encrypted HTTPS connections and stored with Google Firebase. Access rules make sure members can only change their own profile and only add or remove themselves from matches. No system is perfectly secure, but we work to protect your information.
10. Children
SmashPoint Play is meant for people aged 13 and older. Younger players should use it only with a parent or guardian's permission.
11. Changes to this policy
If we change this policy we will update the date at the top of this page. Significant changes will also be announced on the website.
12. Contact us
SmashPoint
Ghamrali Road, Mangowal Gharbi, Gujrat, Pakistan
Phone and WhatsApp: 0341 0242821