Account management

How to update your profile, change your password, manage saved payment methods, and delete your account.

Profile editing

Profile → Edit:

Save → changes apply immediately.

Password

Profile → Security → Password:

1. Type current password.
2. Type new password (twice).
3. Save.

Min 8 characters. No reuse rule yet (so the same password as before is technically allowed but please don't).

If you forgot the current password, sign out and use the password reset flow on the sign-in page.

Multi-factor authentication (MFA)

Profile → Security → MFA → Enable:

1. QR code shown.
2. Scan with Google Authenticator / Authy / 1Password.
3. Type the current 6-digit code.
4. Save backup codes (10 single-use codes — store in your password manager).

MFA adds a second factor on every login. Strongly recommended if you store payment methods and book frequently.

To disable: Profile → Security → MFA → Disable, type a current TOTP code, confirm.

If you've lost your authenticator and all backup codes, contact the venue — they have a manual reset path (audit-logged for security).

Payment methods

Profile → Payment methods:

• List of saved cards (last 4 digits + brand)
• Add new card (next checkout will save it automatically; or add via this page proactively)
• Set a default
• Remove a card

Removing the only saved card means the next booking will prompt you to enter a fresh card.

Notification preferences

See Notifications. Quick links:

• Add a phone (for SMS / WhatsApp)
• Verify phone via OTP
• Toggle category × channel preferences
• Opt out of marketing
• Adjust reminder timing

Booking history

Bookings in the main nav shows every booking you've ever made:

• Confirmed (upcoming)
• Completed (past)
• Cancelled

Click any to see details: PIN, payment, refund history, comms log (every message sent for that booking).

Filter by date range, status, venue.

Membership

Profile → Membership:

• Current plan + status
• Next billing date
• Pause / cancel buttons
• Switch plan
• View receipts

See Memberships for the full lifecycle.

Privacy controls

Profile → Privacy:

Download my data

Generates a JSON file with everything CourtPass holds about you:

• Profile fields
• Bookings + payments
• Comms history (every message sent / received)
• Login history
• Consent receipts (proof of what you opted into)

The file is large for active users (10s of MB). Available for download for 7 days, then auto-deleted.

Delete my account

Triggers a soft-delete — your account is locked immediately and physically removed after 30 days. Inside the 30-day window you can roll back via the same page.

What happens after 30 days:

• All personal data (name, email, phone, address) is anonymised
• Bookings stay in the database with userId replaced by a placeholder (so the venue's audit trail and revenue reports don't break)
• Comms history is anonymised — text content stripped, recipient set to <deleted>
• You can never re-create an account with the same email at the same venue (uniqueness retained)

To delete only at one venue and keep your account at another, contact that specific venue — they can soft-delete you from their side.

Subject Access Request (SAR)

If you want a structured report (for legal / compliance reasons), request a SAR via Profile → Privacy → Request SAR. The venue's admin team produces the report within 30 days per AU Privacy Act.

Consent log

See exactly what you opted into and when. Each row:

• Channel (SMS / WhatsApp / Email)
• Category (transactional / reminders / marketing / etc.)
• Timestamp of consent
• Method (OTP verification / clicking a link / etc.)
• Withdrawn timestamp (if you opted out later)

This is your evidence trail — you can prove what you consented to (and revoked).

Sign out

Top-right of the page → click your name → Sign out. Or visit /logout directly.

You're signed out across this venue's CourtPass page. If you have multiple browsers / devices, sign out on each separately (no global sign-out yet).

Session timeout

Sessions last 8 hours. After that you're signed out automatically and need to log in again. Refresh tokens extend this if you're actively using the page.

Common scenarios

"I want to change my email"

Email is your login key — changing it isn't self-service. Workflows:

• Soft option: contact the venue. Their admin can change the email after verifying you (email confirmation to old + new).
• Hard option: create a new account with the new email, then ask the venue to merge the two accounts (manual support process).

"I deleted my account but want it back"

Within 30 days: log in once and the deletion request is auto-cancelled. You're back to active.

After 30 days: the data is gone (anonymised). You can sign up fresh under the same email — nothing carries over.

"I see two of my old bookings"

Each booking is one row, can't be duplicated. If you genuinely see two identical bookings, contact the venue — there may have been a payment retry that double-booked. They can refund the duplicate.

"I changed venues — do I need a new account?"

No. The same CourtPass account works across every venue using CourtPass. You'll just see different content per venue.

"Where do I see my receipts for tax time?"

Bookings → click each → Payment → Download PDF. Each PDF is a tax invoice with the venue's ABN.

For a year-long export, contact the venue — they can run a CSV export of all your payments.

← Notifications · Back to TOC