Rondamos – Privacy Policy
Last updated: 7 November 2026
1. Who is responsible
Rondamos (rondamos.com, formerly Ascenso) is operated by:
VQualis LLC
Limited Liability Company registered in Wyoming, United States
30 N Gould St Ste N
Sheridan, WY 82801, United States
EIN: 41-5115987
Email: hola@rondamos.com · Company: info@vqualis.org · support@vqualis.org
This policy applies to all users worldwide. Section 11 contains additional information for users in the European Union and the European Economic Area.
2. What Rondamos does
Rondamos helps padel groups organise games: sign-up links for match days, game results, rankings and statistics within a group. Rondamos is free. There are no ads today. If partner offers come later, they will be clearly marked as “Ad”, never get in the way of playing and never receive personal data.
3. Which data we process
a) Data you or your group organiser enter
Names are often added by the group organiser. If you were added and want your data removed, ask your organiser or write to hola@rondamos.com.
- Name or nickname as shown in the group, optional avatar (emoji) and optional birthday (day and month)
- Group membership and role (player, organiser, co-organiser)
- Sign-ups and cancellations for match days, game results, rankings
- Requests to join a group ("I'm new"), including the name entered
b) Account (optional)
If you create an account: email address and password. The password is stored only as a secure hash, never in readable form. Each signed-in device gets its own sign-in key (stored only as a hash); logging out on a device makes its key invalid. To check that your email address can receive mail, we look up whether its domain accepts email (DNS lookup) and note whether our emails were delivered.
c) Technical data
- Device identifier: a random ID stored in your browser so the app recognises your device. It contains no personal information, is not shared with anyone and expires after 13 months.
- Usage statistics: day of use, number of visits, approximate time spent, device type (phone/computer, iOS/Android), country, and counts of which functions were used (e.g. "link opened", "game entered"). We count functions; we do not record individual clicks per person.
- IP address: your IP address is used only at the moment of the request, to determine the country and to protect the service against abuse. Limits count under a one-way hash of the address with a secret key that is renewed daily; these counters stay in memory only and are removed when their time window ends (checked every hour). We do not store IP addresses.
- Error reports: if the app runs into a problem, it sends a short technical report (message, page without access keys, app version, rough device type such as "iOS/mobile"). Reports are deleted after 90 days.
- Local storage on your device: the app stores your groups, access keys, language and settings in your browser so you do not have to log in again.
d) Visits to our homepage
When our homepage (rondamos.com) is shown, the page sends short counting messages to our own server – no cookies, no third-party services. From them we count, per day and only as totals: where the visit came from (the referring website, or a tag in the address such as ?von=tiktok, and a search term if the referring site passes one on), country (determined as in c), time zone, browser language and page language, device type, operating system and browser, a rough screen size class, light or dark mode, how far the page was scrolled, the active time on the page, which buttons were used (for example "I'm starting a group"), whether a group was created or joined or an account was used afterwards on that device, and the loading time. To count a visitor only once per day, our server forms a one-way hash of the IP address and the browser identification together with a random key that changes every day; the key of the previous day is deleted, and the hashes are deleted after 48 hours at the latest. Visits therefore cannot be linked across days or to a person. To tell new from returning visitors, your browser keeps only the date of your first visit in local storage; this date is never sent to us, only "new" or "returning". Search engines, link-preview robots and data-centre traffic are counted separately and never as visitors. The daily totals are kept for up to 400 days. IP addresses are not stored. (Section added on 11 November 2026.)
We do not use advertising cookies, we do not track you across other websites and we do not sell or rent personal data.
4. Why we process data
| Purpose | Data | Legal basis (EU) |
|---|---|---|
| Running the app for your group (sign-ups, results, rankings) | 3a, 3c local storage | Performance of the service you use (Art. 6(1)(b) GDPR) |
| Account login and password reset | 3b | Performance of the service (Art. 6(1)(b)) |
| Security and abuse prevention | IP (not stored), device ID | Legitimate interest (Art. 6(1)(f)) |
| Usage statistics to improve the app | 3c | Legitimate interest (Art. 6(1)(f)); audience measurement for our own service only, no third parties |
| Homepage visit statistics | 3d | Legitimate interest (Art. 6(1)(f)); aggregated audience measurement for our own website only, no third parties |
5. Service providers
We use the following providers, who process data on our behalf:
- Replit, Inc. (USA) – hosting of the app and database; servers are located in the USA
- Resend (Plus Five Five, Inc., USA; sending region Ireland, EU) – sending account emails (login, password reset)
- Cloudflare, Inc. (USA) – domain name service (DNS only; your traffic is not routed through Cloudflare)
- Namecheap, Inc. (USA) – domain registration and the mailbox hola@ascenso.club
Country detection uses the GeoLite2 data created by MaxMind, available from https://www.maxmind.com. The lookup happens on our own server; no data is sent to MaxMind.
6. Who can see your data
- Members of your group see names, avatars, sign-ups, results and rankings within that group.
- People with a sign-up link see the match day details, the group name and place, and the first name (with avatar) of those who signed up or are on the waiting list – nothing else about the group.
- The group organiser manages the group and its members.
- Organisers and co-organisers see who invited, added or confirmed a player (“Invited by …”, “Confirmed by …”).
- VQualis LLC as operator has access for running and supporting the service. Usage statistics are visible only to the operator.
7. How long we keep data
- Group data: as long as the group exists. A player who has already played can be removed from a group; their results stay in the group's history. If you delete your own data in the app ("Delete my data"), your name (also in join requests), birthday, avatar, device identifier and usage statistics are erased – also for entries that were merged into yours (duplicate players combined by the organiser), including their name in the administration log; past results remain without your name. Your account (email and password) is erased as well if you are signed in on that device; otherwise sign in and delete it under "Account" → "Delete account", or write to us. The organiser cannot delete themselves this way, only the whole group. When the organiser deletes a group, it disappears from the app at once but is kept so it can be restored; it is erased completely when deleted groups are removed in the administration area. Its detailed usage statistics are erased after 90 days at the latest.
- Deleted games: we keep them internally in an archive so results stay traceable (for example to spot misuse). The players in an archived game are not named; it is noted who deleted it. Archived games never count anywhere.
- Anonymised results without names or other identifying details may be kept for statistical purposes.
- Account: until you delete it.
- Error reports: 90 days.
- Detailed usage statistics: 90 days; after that only daily totals without reference to a person or device are kept.
- Homepage visit statistics: daily totals up to 400 days; the daily visitor hashes at most 48 hours; the daily key one day.
- Backups: up to 30 days.
8. Rondamos Rewards – Play & Earn (not live yet)
The Rondamos Rewards programme (Play & Earn) with Rondamos points is not live yet. When it starts, it will need a separate sign-up; for cash prizes there will be an identity check. That data will be held by our payment partner. We will update this policy before it starts.
9. Security
Connections are encrypted (HTTPS). Passwords are stored as hashes. Access keys and PINs are never shown in the administration area – except a newly created personal link, shown once so it can be passed on, and the full backup file, which is protected by the admin password and must be kept safe. No system is completely secure; if a breach affecting your data occurs, we will inform you as required by law.
10. Children
Rondamos is not directed at children under 14. If you are under 14, please use Rondamos only with the consent of a parent or guardian.
11. Additional information for users in the EU/EEA
You have the right to access, rectify, erase, restrict and object to the processing of your data, and to data portability. Where processing is based on legitimate interest, you may object at any time. To exercise your rights, write to hola@rondamos.com.
You also have the right to lodge a complaint with a supervisory authority, in Spain the Agencia Española de Protección de Datos (www.aepd.es).
International transfers: VQualis LLC and several providers are located in the USA. Transfers are based on the EU-U.S. Data Privacy Framework where the provider is certified, or on the European Commission's Standard Contractual Clauses.
12. Users in the United States
We do not sell or share personal information for cross-context behavioural advertising. You may request access to or deletion of your data at hola@rondamos.com.
13. Changes
We may update this policy. The current version is always available in the app. Significant changes will be announced in the app.
14. Language
This policy is available in English, Spanish and German. In case of differences, the English version prevails.