Privacy policy

Scorers is a small football score-prediction game run by an individual in the United Kingdom. There is no company behind it and no advertising business attached to it. Questions about this policy, or about your data, go to privacy@scorersonline.uk.

• ·Your account — the email address, display name and password you give us when you register. The password is stored only as a bcrypt hash; we never see or store the password itself.
• ·Your gameplay — the score predictions you submit, which fixture you nominated as your banker, the points those picks scored, and which leagues you belong to.
• ·Notification tokens — if you allow notifications in the mobile app, the push token your device issues, so we can send you a reminder about a fixture you have not predicted.
• ·Session tokens — a login cookie on the website, and access/refresh tokens stored in the device keychain in the apps.
• ·An API key, if you use the public bot API.

We do not collect your location, contacts, photos, device identifiers for advertising, or any analytics or behavioural tracking. There are no third-party trackers, advertising SDKs or analytics SDKs in the website or in the apps.

• ·To create and secure your account, and to sign you in.
• ·To run the game: scoring your predictions and placing you on the leaderboards of the leagues you have joined.
• ·To email you when you ask us to — a password reset, or a deadline reminder for a fixture you have not yet predicted.
• ·To send the push reminders you opted into, if you opted in.

The lawful basis is performance of a contract (running the game you signed up for) and, for reminders, your consent — which you can withdraw at any time by turning notifications off for Scorers in your device settings.

Your display name, your predictions once a fixture has kicked off, and your points are visible to the other members of the leagues you join. That is the game. Your email address is never shown to other players.

We use these processors, and no others:

• ·Google Cloud Platform (London, europe-west2) — hosting and the database.
• ·Cloudflare — the proxy in front of the site.
• ·Resend — sending transactional email.
• ·Expo — delivering push notifications to your device.
• ·football-data.org — the source of fixtures and results. Nothing about you is sent to them.

We do not sell your data, and we do not share it for advertising or marketing by anyone.

Your account and its predictions are kept while your account exists. Password-reset tokens expire within an hour and are deleted when used. Refresh tokens are deleted when you sign out. Push tokens are deleted when you turn notifications off or delete your account.

You can delete your account at any time, and the deletion is immediate and permanent — there is no deactivated state and no grace period.

• ·In the app: Leagues tab → Account → Delete account.
• ·On the website: your profile page → Delete account.

This removes your account, your predictions, your points, your league memberships, your push tokens and your sessions. Leagues you started stay open for their other members — a league belongs to everyone in it — but a league with no members left is deleted with you.

If you are in the UK or the EU you have the right to access, correct, export or erase your personal data, and to object to processing. Deleting your account exercises the erasure right directly; for anything else, email privacy@scorersonline.uk and we will respond within 30 days. You may also complain to the UK Information Commissioner's Office at ico.org.uk.

Scorers is not directed at children under 13 and we do not knowingly collect data from them. If you believe a child has created an account, email us and we will delete it.

If this policy changes materially we will update the date at the top of this page and, where the change affects how we use data you have already given us, tell you by email before it takes effect.