Privacy Policy

Controller: JSB Holdings LLC, a Delaware limited liability company ("JSB Holdings", "we", "us"), operator of the Live Tennis API at livetennisapi.com (the "Service"). This policy explains what we collect, why, and who processes it.

1. Who this applies to

This policy covers visitors to livetennisapi.com and its subdomains, and developers who subscribe to and call the API. The tennis scores, player, and match data the API returns are factual sports data and are not personal data about our users.

2. What we collect

• Account & billing data: when you subscribe, your email and the subscription/payment details required to provision and bill your access. Card payments are processed by our payment processor. We do not store full card numbers.
• API usage data: the API key or subscription identifier used, requests made, timestamps, and volume. We use it to enforce rate limits and tiers, prevent abuse, and operate the Service.
• Site analytics & session replays: how the marketing site is used (pages viewed, approximate location, device/browser). To diagnose and improve the site we also use masked session replays and heatmaps, in which text and form-input content are hidden. We use Google Analytics 4 and Microsoft Clarity, which set first-party cookies and run only for visitors outside the EU/EEA. We also use PostHog product analytics (configured cookieless) and Cloudflare Web Analytics (cookieless). We keep our own first-party visit log too. It holds pages viewed on our own funnel, hashed network address, browser type, and approximate location at city level derived from the network address. And we set a single first-party visitor cookie, lt_vid, a random identifier with a 13-month lifetime. It is used solely for our own audience measurement, never shared with or readable by any third party. Third-party analytics and session-replay cookies are never set for EU/EEA visitors.
• Advertising & remarketing: if you arrive from one of our ads, we may record the ad click identifier against a resulting subscription. Google's gclid is one such identifier. That is how we measure our own advertising. For visitors outside the EU/EEA only, a Google Ads tag may set a first-party cookie. That lets us measure conversions and show our own ads to people who have visited the site (remarketing). EU/EEA visitors get no advertising cookie. We do not sell your data and do not build cross-site profiles beyond our own remarketing audiences within Google Ads.
• Support communications: messages you send us and our replies.

3. How we use it

We use it to provide, secure, meter, and bill the Service, and to communicate with you about your account and important service or policy notices. We also send you occasional email about the Service itself: what has changed, what your usage suggests you may need, and the plans available. You can stop that at any time using the unsubscribe link in any such message or by replying to it. We also use it to measure and improve our marketing, and to comply with law. We do not sell your personal data.

4. Processors we rely on

We share the minimum data necessary with service providers who process it on our behalf. Stripe handles payments and subscription billing. It processes payment data on our behalf, and is an independent controller of the data it needs for its own fraud, anti-money-laundering and identity checks, under its own privacy policy. Google Analytics 4 gives aggregate site analytics, and Microsoft Clarity masked session replays and heatmaps. PostHog runs cookieless product analytics, served first-party through our own domain. Google Ads measures our own advertising via offline conversions keyed to the gclid. Cloudflare provides content delivery, security, cookieless web analytics, and the Zaraz tag manager that loads the above. The last is our hosting provider. These providers act under their own privacy terms and only for the purposes above.

6. Cookies

We use the cookies needed to operate the site. One is a 30-day first-party attribution cookie that remembers which referral or ad brought you, so a resulting subscription is credited correctly. Failing that, it records only the host name of the website you came from and the page you landed on. We also set one first-party visitor-measurement cookie, lt_vid. It is a random identifier with a 13-month lifetime, used only by us to count visits and understand our own funnel. It carries no personal data and is never shared. Third-party analytics, session-replay, and advertising cookies (Google Analytics 4, Microsoft Clarity, Google Ads) are set only for visitors outside the EU/EEA. EU/EEA visitors receive no third-party analytics or advertising cookie. We do not use cookies to build cross-site advertising profiles beyond our own Google Ads remarketing audiences.

7. Retention

We keep account, billing, and usage records for as long as your subscription is active, and as required for legal, accounting, and security purposes. Then we delete or anonymize them. Aggregate analytics are retained per the analytics provider's standard windows.

8. Your rights

Depending on your location, you may request access to, correction of, or deletion of your personal data, and object to or restrict certain processing. To exercise these rights, contact us at the address below. We will respond within the time required by applicable law.

9. International transfers

We and our processors may process data in the United States and other countries. Where required, transfers rely on appropriate safeguards such as the processors' standard contractual clauses.

10. Children

The Service is a developer product not directed to children, and we do not knowingly collect personal data from children under 16.

11. Changes

We may update this policy from time to time. Material changes will be reflected by the date below and, where appropriate, by notice to subscribers.

12. Contact

Privacy questions or requests: hello@livetennisapi.com (JSB Holdings LLC).

Last updated: 19 July 2026.