COGNIMBLE LLC
Privacy & your choices
Effective October 9, 2026 · Main10s is operated by Cognimble LLC. Contact: maxson@main10s.com.
Our current account service is for United States residents aged 13 or older. Public pages may be viewed elsewhere; this policy explains our processing of visitor information too.
Finding a stringer and Google Maps
Device location is requested only when you choose “Use my location.” Main10s uses rounded coordinates to find nearby shops without saving them to your account or putting them in the page URL. Search state stays in page memory and is cleared by a full page reload. Public shop pins and service details are published only through the stringer’s directory settings.
Google Maps links share the chosen area or destination with Google when opened. If embedded Maps is available and you choose to load it, Google receives technical information such as your IP address and map interactions. Signed-in area and business lookups pass through Main10s to Google. Google results are displayed temporarily, not imported into Main10s accounts or stored in our directory. To enforce usage limits, we keep daily request counts and hashed account identifiers in a separate usage ledger, without search text or coordinates. Entries older than the 35-day control window are removed during subsequent lookup processing. See Google’s Privacy Policy.
Notice at collection
We receive information you enter, information from your verified sign-in provider, records shared by your chosen stringer, and technical information generated when you use Main10s. Do not submit passwords, financial account numbers, government identifiers, medical details or other sensitive information in free-text fields.
| Information | Why we use it | Who receives it |
|---|---|---|
| Account identifiers, verified email, profile name and optional contact details; authentication and security data | Sign-in, account ownership, support and preventing abuse | Cognimble LLC, authentication and hosting providers; contact information you choose to share with a stringer |
| Rackets, string setups, service requests, job history, prices recorded for jobs, preferences, reviews and private notes | Provide your history, experiments and stringing workflows | Cognimble LLC and hosting provider; selected job participants and stringers under your sharing settings. Your private notes are not shared with stringers or made public. |
| Published setup cards, community contributions, shop/directory profiles, and opted-in leaderboard nickname and score | Features you choose to publish | Public visitors, including search engines. They may copy public information. |
| Suggestions, support messages and optional reply email; notification preferences and delivery records | Respond to requests, improve Main10s and send requested service messages | Cognimble LLC, hosting and email providers. Suggestions are private, not community posts. |
| IP address, browser/request information, security events and operational logs | Deliver pages, secure the service, diagnose errors and enforce request limits | Cognimble LLC and infrastructure/authentication providers |
Providers and disclosures
Cloudflare hosts the application, database and infrastructure; Clerk provides authentication; Resend delivers service and suggestion emails. These providers process information needed for their services. Their operations may involve the United States and other countries. We may disclose information when legally required or necessary to protect rights and security, and in a business transfer subject to applicable protections.
We do not use advertising pixels or cross-site advertising in Main10s. We do not sell personal information or share it for cross-context behavioral advertising. We do not use sensitive personal information to infer personal characteristics. Provider processing necessary for authentication, hosting and email still occurs. Links to other websites are governed by those sites’ practices.
How long information stays
Account records and saved history remain while you use the service, until you delete eligible records or close your account. Public visibility can be withdrawn using the relevant feature controls. Suggestions and support correspondence remain available for follow-up unless removed through account closure or a verified deletion request, subject to necessary retention.
Account closure removes private notes, saved setups, sharing grants, leaderboard data and stored suggestions, and removes or anonymizes profile information. Some job records remain for the other participant’s history. A minimal identity/closure record remains to prevent a closed account from silently reopening. Active jobs can prevent self-service closure; you can still request privacy assistance by email.
Closure does not automatically delete the separate Clerk login, delivered email copies, recipient-held records or every backup. Contact us for assistance with provider deletion and retained records. Security, legal, dispute and backup records may need to remain for their necessary purpose; we assess the scope of each verified request. Browser draft expiry is described below.
Access, correction, deletion and other requests
Use your account controls to correct profiles, manage sharing, unpublish content, download player-owned history or close your account. The history download is not a complete privacy access response. For other information, provider deletion, a closed account, or assistance without signing in, email maxson@main10s.com with “Privacy request” and describe your request. Do not email a password or identity document. We may request proportionate verification before disclosing or deleting personal information.
Depending on your location and applicable law, you may have rights to access, obtain a portable copy, correct or delete information; opt out of sale, targeted advertising or certain profiling; limit certain sensitive-data uses; and appeal a denial. Authorized agents may contact us with evidence of authorization. To appeal, reply with “Privacy appeal.” We will explain any refusal, relevant exceptions and available appeal routes, and respond within applicable legal deadlines. We do not discriminate for exercising privacy rights.
California residents can use the same contact for requests under applicable California privacy laws. Global Privacy Control does not need to change our no-sale/no-cross-context-advertising behavior. We do not otherwise change site behavior in response to the legacy Do Not Track signal. Essential service providers may process information across their services under their own policies; Main10s does not authorize advertising tracking. Provider information: Cloudflare privacy, Clerk privacy, and Resend privacy.
If EU/UK data protection law applies to a particular interaction, our purposes rely as appropriate on providing a requested service, legitimate interests in security and support, legal obligations, or consent for optional features. You may also request restriction or object to processing, withdraw consent without affecting earlier lawful processing, and complain to your local data protection authority. Our US-only account policy does not waive anyone’s applicable rights.
Cookies and browser drafts
Authentication and security use cookies and similar technology to provide sign-in and protect the service. Blocking these can prevent sign-in. We have disabled Clerk’s optional SDK telemetry. Main10s does not add optional analytics or advertising cookies.
String Lab saves a draft on this device only when you enable “Remember this draft on this browser.” It can contain your setup and private goal; avoid this on shared devices. Permission applies to the current String Lab visit. A stored draft can be recovered after you enable this option on a later visit. Drafts older than 30 days since the last edit are removed when you next enable browser draft recovery in String Lab; browsers do not run our expiry cleanup while the site is closed. Turn off the option to remove the current account’s local draft, or clear all Main10s drafts below. Your account saves are separate.
Account eligibility
We ask you to confirm that you are at least 13 and reside in the United States before account access. We retain the eligibility outcome, policy version and time against your verified login. The current screen does not ask for an age bracket, birthday or street address. A signed security cookie lasts up to 30 minutes for a successful check or 24 hours for a blocked attempt. Known blocked signed-in identities require support review. These are self-reported answers, not independent age or location verification.
Accounts and history are private by default. Public features require a separate publishing choice. Teen users should avoid publishing school, home address, contact details or other identifying information. Parents may manage younger players’ equipment through their own accounts using minimal information such as a racket nickname; younger children must not use the parent’s login.
Children and changes
Main10s accounts are not offered to anyone under 13. We do not knowingly collect account information from children under 13. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action. An eligibility confirmation is not independent age verification.
We update this page’s effective date when practices change. Material changes will be communicated through the service or another appropriate channel before new uses where required, with renewed consent where required.