Privacy Policy

Last Updated: October 26, 2026

This policy explains what information ScoresDeck collects when you use our mobile app (the App) and our website at scoresdeck.com (the Site), why we collect it, who we share it with, how long we keep it, and the choices and rights you have.

Who we are. ScoresDeck is operated by ScoresDeck LLC, a company in the United States. ScoresDeck LLC is the controller of the personal data described here. You can reach us about anything in this policy at support@scoresdeck.com.

1. Information We Collect

Information you give us

  • Account: email address, username, display name, bio, profile picture (only the photo you choose — we do not otherwise access your photo library), and your password, which we store only as an Argon2id hash, never in plain text.
  • Phone number (optional): if you add one to your profile. It is used to keep accounts unique and to help us verify ownership of an account if you contact support; it is not shown to other users.
  • Preferences: your language, notification and email choices, and privacy settings such as a private account.
  • Content: comments, likes and bookmarks; and for business accounts, posts, photos, offers, ad campaigns and venue details.
  • Reports and support: reports about users or content, bug reports (which can include a screenshot you attach and basic device details such as model, OS and app version), and emails you send to our support address.

Information created as you use ScoresDeck

  • Gameplay: matches you create or join, scores, results, statistics, match invitations, tournament entries and results, and champion badges.
  • Social: who you follow and who follows you, follow requests, and users you block.
  • Venues: venues you follow, table check-ins (when you scan a venue's table code, your match is linked to that venue), and offers you redeem.
  • Signed-in sessions: for each place you are signed in — the device type and model (App) or browser and operating system (Site), the approximate location the sign-in came from (city, region and country), and when it started and was last active. You can see and end these in Settings → Security.

Information collected automatically

  • Approximate location: your country, state/region and city, worked out from your IP address on our own servers each time you open the App. We do not collect precise GPS location.
  • Connection and log data: IP address, device or browser type, app version, and times of requests and connections, used for security, debugging and abuse prevention.
  • Device data for notifications: a push-notification token and your device's language, if you allow notifications.
  • Advertising data: for users who see third-party ads, Google's advertising software may collect your device's advertising identifier and related signals (see section 5).

Business accounts

For business (venue and advertiser) accounts we also hold the organization's profile and address, the owner and staff accounts that manage it (staff passwords are stored only as hashes), wallet balance and transactions, and campaign performance (impressions by region). Card details are entered with Stripe and never reach our servers (section 6).

2. How We Use Your Information, and Why We Are Allowed To

Where data protection laws require a legal basis (for example the GDPR in the EU and UK, or similar laws in Saudi Arabia and the UAE), the basis for each use is shown in brackets.

  • Create and secure your account, keep you signed in, show you where you are signed in, and alert you to sign-ins from a new device or country. [Contract; legitimate interest in account security]
  • Run the service: matches, scoring, statistics, tournaments, following, venues, offers and notifications you ask for. [Contract]
  • Send service emails and notifications: verification, password resets, security alerts, billing notices and replies to support. [Contract; legal obligation where applicable]
  • Send optional updates: monthly and yearly recap emails of your games (on by default, with an unsubscribe link in every one), venue offers, venue announcements, reminders and "venues near you" suggestions. You can turn these off in Settings → Preferences or in your device's notification settings. [Consent or legitimate interest, depending on where you live; you can always opt out]
  • Show sponsored content to everyone (the scoreboard's "Presented by" sponsor and posts that organizations promote, chosen only by your general location) and, to users without Premium, third-party ads from Google (section 5). [Legitimate interest for non-personalized ads; consent for personalized ads where the law requires it]
  • Process payments and keep financial records for subscriptions and business wallets. [Contract; legal obligation]
  • Keep ScoresDeck safe: detect fraud and abuse, review reports, moderate content, and enforce our Terms of Service — including warnings, removing content, and suspending or banning accounts. Organization announcements are screened by an automated content-safety check before they are sent; this affects only whether an announcement is sent. [Legitimate interest; legal obligation]
  • Understand and improve ScoresDeck using aggregate statistics, such as how many people use the App in each region. [Legitimate interest]
  • Comply with law and respond to lawful requests. [Legal obligation]

We do not use your information to make decisions that produce legal or similarly significant effects on you based solely on automated processing.

3. What Others Can See

ScoresDeck is a social app, so some information is visible by design. Your username, display name, profile picture, bio and gameplay activity (matches, scores, comments, tournament results and badges) may be seen by other users — including followers and people watching a live match — and may appear in feeds, leaderboards and shareable match links, including link-preview cards shown by search engines and messaging apps.

Your profile page — username, display name, profile picture and bio — can appear in search engines such as Google, including when your account is private: a private account hides your stats and match history, not your profile page. To keep your profile out of search engines, turn off Show in Search Engines in Settings. A search engine may take some time to drop a page it has already listed.

You can limit what others see of your games with a private account and private matches. Anything shared publicly or through a share link may be viewable by anyone who has the link.

4. Location

We work out your general location (country, state/region and city) from your IP address on our own servers, using a location database we host ourselves — your IP address is not sent to a third party for this, and you do not need to turn on location services.

We use it to show nearby venues and venue suggestions, to choose which sponsor ads to show, to record where a sign-in came from, and for aggregate statistics. We keep your most recent location while your account is active, and a history of past locations for 24 months, after which it is deleted. Sponsors can target ads by country, state or city but never receive your individual location — only aggregated impression counts per region.

5. Advertising

Everyone sees sponsored content. Users without a Premium subscription also see Google ads:

  • Sponsored content that we serve ourselves: the scoreboard's "Presented by" sponsor and posts that organizations promote, always labelled "Presented by" or "Sponsored" and chosen only by your general location. Premium members see it too. Sponsors receive only aggregated, anonymous impression counts.
  • Google ads (users without Premium only) — in the App through Google AdMob, and on the Site through Google AdSense. To show and measure these ads, Google may collect your device's advertising identifier, IP address, approximate location, cookies (on the Site) and information about your interactions with ads, and may use it to personalize ads across other apps and websites. Google's use of this data is governed by Google's Privacy Policy and how Google uses information from sites or apps that use its services.

Your choices:

  • In the EEA, the UK and Switzerland, Google's consent form asks for your choice before any personalized ads are shown. You can change it at any time in the App under Settings → Ad privacy choices.
  • On iOS, personalized ads use your advertising identifier only if you allow tracking when asked; you can change this in Settings → Privacy & Security → Tracking.
  • On Android, you can delete or reset your advertising ID in your device's Google ad settings.
  • On the Web, you can manage Google ad personalization at myadcenter.google.com.
  • Premium removes all Google ads: no Google ad is requested for Premium users, in the App or on the Site.

"Selling" and "sharing". We do not sell your personal information for money. When Google shows personalized ads, some US state laws may treat this as "sharing" personal information for targeted advertising. You can opt out using the choices above, or by contacting us.

6. Payments

Premium subscriptions, Silver and Gold business plans, and business wallet top-ups are bought on the Site and processed by Stripe, Inc. You enter your card details on a Stripe-hosted page or in Stripe's secure form; they never reach or are stored on our servers. We keep your Stripe customer and subscription IDs, your plan, its status and billing dates, and records of wallet transactions.

Stripe may collect device and browser information to detect fraud when its software is loaded on the Site; this is governed by Stripe's Privacy Policy.

The App itself does not sell anything and does not use Apple App Store or Google Play in-app purchases.

7. Who We Share Information With

We do not sell your personal data. We share it only as described here:

  • DigitalOcean — hosts our servers and database (United States).
  • Cloudflare — delivers and protects the Site and our servers, and stores uploaded files such as photos (Cloudflare R2). It may also provide cookieless, aggregate website statistics.
  • Amazon Web Services (Amazon SES) — sends our emails.
  • Stripe — payments and fraud prevention (section 6).
  • Google — ads (AdMob and AdSense, section 5) and Android push notifications (Firebase Cloud Messaging).
  • Apple — iOS push notifications (Apple Push Notification service).
  • Expo — delivers App updates; it receives your IP address and basic device and app information when the App checks for an update.
  • Zoho — our support help desk (Zoho Desk) stores the emails you send to our support address.
  • Twilio — sends text-message alerts to ScoresDeck staff only (section 15).

These providers process data on our behalf and under our instructions, except Google when it serves ads, which uses data under its own privacy policy as described in section 5. We only work with providers whose terms commit them to protect personal data with safeguards at least as protective as this policy and applicable law.

We may also disclose information when required by law, court order or a government authority; when we believe in good faith it is necessary to protect the rights, property or safety of ScoresDeck, our users or the public; or as part of a merger, acquisition or sale of assets, in which case this policy will continue to apply to your information.

8. International Transfers

ScoresDeck is operated from the United States, and our servers are in the United States. If you use ScoresDeck from elsewhere — including the European Union, the United Kingdom, Saudi Arabia or the United Arab Emirates — your information is transferred to and processed in the United States, where data protection laws may differ from yours.

Where the law requires, these transfers rely on safeguards such as the European Commission's Standard Contractual Clauses included in our providers' data processing terms, and on the transfer being necessary to provide the service you asked for.

9. How Long We Keep Information

  • Account and profile data — while your account is active. When you delete your account it is removed or anonymized as described in section 10.
  • Location history — 24 months, then deleted.
  • Signed-in session details — until the session ends: when you sign out, when you or we sign it out, or when it expires (at most 60 days after sign-in).
  • Connection history (IP address, approximate location, device and times of connections) — 90 days in our main database, then in a private archive until 12 months after it was recorded, then deleted.
  • Server logs — up to 90 days.
  • Bug report screenshots — deleted 90 days after the report is closed (the written report is kept to track the issue).
  • Financial records (subscription and wallet transactions) — at least 7 years, as accounting and tax laws require.
  • Backups — our database backups roll over, so deleted data leaves them within about 7 days.

10. Deleting Your Account

You can delete your account at any time in the App (Settings → Delete Account) or on the Site; you will be asked for your password. You can also request deletion by emailing support@scoresdeck.com — see scoresdeck.com/delete-account.

When your account is deleted we permanently remove or anonymize your email address, username, display name, bio, phone number, password, profile picture, preferences, location data, followers and follows, follow requests, pending match invitations, bookmarks and push-notification devices, and sign you out everywhere. Match results that involve other players are kept in anonymized form so their records stay accurate, and financial records are kept for the period required by law.

11. Your Rights and Choices

Depending on where you live, you may have the right to:

  • Access the personal data we hold about you and receive a copy;
  • Correct inaccurate or incomplete data (most of it you can edit yourself in Settings);
  • Delete your data (section 10);
  • Port your data — receive it in a structured, machine-readable format;
  • Restrict or object to processing, including processing based on legitimate interests and any use for direct marketing;
  • Withdraw consent at any time where we rely on it (for example ad personalization or notifications), without affecting earlier processing;
  • Opt out of targeted advertising, "sharing" or "selling" under US state laws (section 5);
  • Complain to a data protection authority — for example your local authority in the EU, the Information Commissioner's Office in the UK, the Saudi Data & AI Authority (SDAIA) in Saudi Arabia, or the UAE Data Office.

To exercise any of these rights, email support@scoresdeck.com from the address on your account, or use the tools in Settings (edit profile, privacy controls, Where you're signed in, Ad privacy choices, Delete Account). We may need to verify your identity before acting on a request. We respond within 30 days, and will tell you if we need longer as the law allows. We will not treat you differently for exercising your rights.

Do Not Track. Our Site does not change how it works in response to browser "Do Not Track" signals. When you use the Site without Premium, Google may collect information about your online activities over time and across different websites (section 5).

12. Security

We protect your data with technical and organizational measures: passwords are hashed with Argon2id; all traffic to our servers is encrypted in transit; the Site keeps you signed in with a secure, HttpOnly cookie that scripts cannot read, and the App keeps its sign-in token in your device's secure storage; sessions expire after at most 60 days and can be ended at any time from Settings → Security; and access to our systems is restricted to staff who need it.

No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affects your personal data, we will notify you and the authorities as the law requires.

13. Children

ScoresDeck is not intended for anyone under 13, and we do not knowingly collect personal information from children under 13. In countries where a person must be older to consent to the use of their data online (up to 16 in some EU countries), users below that age may use ScoresDeck only with a parent's or guardian's consent. If we learn that a child under 13 has given us personal information, we will delete it. If you believe a child has created an account, contact support@scoresdeck.com.

14. Cookies and Local Storage

  • Sign-in cookie (strictly necessary): a single cookie named session keeps you signed in. It is HttpOnly, Secure and SameSite=Strict — scripts cannot read it, it is sent only over HTTPS and never to other sites — and it is cleared when you sign out.
  • Advertising cookies: Google AdSense sets cookies to show and measure ads to Site visitors without Premium (section 5). In the EEA, the UK and Switzerland, Google asks for your consent first.
  • Local storage: the Site keeps non-sensitive display information (such as your username) in your browser so pages load quickly. Signing out clears it.
  • Statistics: any website statistics we use are cookieless and aggregate — they do not identify you or follow you to other sites.

You can block or delete cookies in your browser settings; the Site cannot keep you signed in without the sign-in cookie.

15. SMS & Text Message Notifications

ScoresDeck runs an internal text-message program that alerts ScoresDeck staff when our production systems report a fault. It is limited to staff who provide their own mobile number for on-call alerts; ScoresDeck does not send text messages to users of the App or Site. For this program we collect only the participant's mobile number and the delivery status of messages sent to it, used solely to deliver operational alerts and confirm they arrived. Messages are delivered through Twilio Inc.

We do not sell or share SMS opt-in data or personal information with third parties for marketing purposes. Participants may reply STOP to any message to unsubscribe, or HELP for assistance. See our Terms of Service for the full SMS terms.

16. Changes to This Policy

We may update this policy from time to time. We change the "Last Updated" date for every update, and for material changes we will also tell you in advance by email or in the App. If you keep using ScoresDeck after a change takes effect, the updated policy applies.

17. Contact Us

ScoresDeck LLC — support@scoresdeck.com. For privacy requests, please write "Privacy request" in the subject line.

By mail: ScoresDeck LLC, PO Box 925, Ridgecrest, CA 93555, USA.

This policy is also available in Arabic (العربية). If the versions differ, the English version applies.