Privacy Policy

What we collect

• Your account. Name, display name, email address and a one-way hash of your password (we cannot read your password). Your plan, your settings and saved rule presets.
• What you score and organize. Matches, rosters, scores and play-by-play, tournaments, courts, schedules, venues and addresses you enter, overlays and logos you upload, and the names and email addresses of players you add or invite.
• Payments. If you subscribe, Stripe collects your card and billing details. We receive and keep only your Stripe customer ID, your plan, its price, status and renewal date. We never see your full card number.
• Feedback and support. What you write in a problem report, idea or support message, and an optional screenshot. Problem reports also include the page you were on, your browser and device type, screen size, time zone, whether you were online, recent script errors, and the state of the page (for example the match score), so we can fix things without asking you twice. You can see exactly what is attached before you send.
• Google sign-in. If you choose "Continue with Google", Google tells us your name, email address and a Google account id so we can sign you in. We do not get your Google password or anything else from your Google account.
• Notifications. If you turn on push notifications, the subscription address your browser gives us.
• Security and usage. IP addresses and timestamps for sign-ins, sign-ups and form submissions (to stop abuse and rate-limit), and basic activity records such as "match created".

Cookies and storage on your device

• A session cookie that keeps you signed in, and a security token that protects forms.
• A cookie (sa_vid) so the feedback board remembers your votes when you are not signed in.
• The scoring console keeps the current match in your browser's storage so scoring works without a signal and syncs later. The app also caches pages for offline use; signing out clears them.
• Google Analytics cookies on the live site, which tell us which pages are used (see below).

How we use it

To run Score All: show scoreboards and tournaments, send the emails and notifications you or your organizer trigger (invites, reminders, results, "you're up on Court 2"), calculate stats and ratings, take payments, answer support requests, fix problems, prevent abuse, and understand which features are used so we can improve them. We email you about your account, and occasionally about Score All itself; every non-essential email has an unsubscribe link.

What other people can see

• Anyone with a match link, TV code or overlay link sees that scoreboard, including player names and scores.
• Public tournaments, with their name, sport, dates, venue and entrants, are listed in the tournament directory and can appear in search engines.
• For scheduled home games, the street address and notes are shown only to the host, the players and people with the invite link.
• Feature ideas and game requests you submit can appear on the public ideas board, without your name or email. Problem reports are never public.

Who we share it with

We share information only with services that help us run Score All, and only what they need:

• Stripe, payments and receipts (Stripe privacy policy).
• Our web host (InMotion Hosting, USA), which stores the site, database and outgoing email.
• Google: Analytics on the live site, reCAPTCHA on the sign-up form to block bots, and Google sign-in if you use it.
• Your browser's push service (Google, Apple or Mozilla) delivers notifications you turned on.
• OpenStreetMap Nominatim turns a place you type into map coordinates for the "near me" tournament search.
• Linear, our issue tracker, receives the problem reports and ideas you send through the feedback panel.

We may also disclose information if the law requires it, to protect someone's safety, or as part of a sale or merger of Score All (you would be told first). We do not sell or rent personal information, and we do not use it for third-party advertising.

How long we keep it

Account data stays while your account exists. Match history and stats stay so your record is complete. Security logs are pruned regularly. Payment records are kept as long as tax and accounting rules require. When you ask us to delete your account, we delete or anonymize your personal information within 30 days, except what we must keep by law.

Your choices and rights

• Update your name and password in Settings; change your card, see invoices or cancel under Plan and billing.
• Turn push notifications off in Settings or your browser, and use the unsubscribe link in any non-essential email.
• Ask for a copy of your data, a correction, or deletion of your account by emailing support@score-all.com from the address on your account. Depending on where you live (for example California or the EU), you may have additional rights, and we will honor them.

Children

Score All is not directed at children under 13, and they may not create an account. Organizers of youth events may enter young players' names to run a match or bracket; they should not enter a child's email address without a parent's permission. If you believe a child under 13 has given us personal information, email us and we will delete it.

Security

The site is served only over HTTPS, passwords are hashed, one-time links are stored as hashes, and card data never touches our servers. No system is perfectly secure, so please use a password you do not use anywhere else.

Changes

If we change this policy in a way that matters, we will email account holders or show a notice in the app before it takes effect.

Contact

Privacy questions or requests: support@score-all.com.