Privacy

What we store

Three kinds of things, all of them yours:

• Your account. The name and email address you signed up with, and your password — stored as a bcrypt hash, which means we cannot read it back.
• Your boards. Team names, scores, colours, clocks, sponsors, saved teams and the settings behind every overlay you build. This is the product; without it there is nothing to show.
• Your uploads. Team crests, your broadcaster mark and sponsor images. More on those below.

That is the list. There is no profile beyond it, no address book, and nothing bought from a data broker.

Staying signed in

When you sign in, the server hands your browser a signed token that expires on its own after seven days. The browser keeps it in local storage and sends it back with each request that needs to know who you are. It is not a cookie, it is not readable by other sites, and it is gone the moment you sign out or clear the browser’s site data.

ScoreKeeper sets no advertising cookies and no tracking cookies. It sets no cookies at all.

Tracking and analytics

Inside the app — your dashboard, the control deck, the phone scorer, and every overlay page that goes into OBS — there are no third-party scripts and no trackers. An overlay loads the overlay and nothing else.

The public pages of the site (the home page, the documentation, contact, feedback, sign-in and this page) can use Plausible to count visits. Plausible is cookieless, keeps no personal data, is hosted in the EU, and cannot follow you to another site. It runs only when the person operating this copy of ScoreKeeper has switched it on; on a copy where it is off, no analytics script is loaded anywhere. Either way it never reaches the app pages listed above.

ScoreKeeper also counts page views itself, on its own server. It is how the people running the site see how many visits it gets and which pages lead to sign-ups. For each page it records the page address, whether you are on a phone, tablet or computer, and — on the first page of a visit only — the site that sent you or the campaign link you followed. It sets no cookie. Your IP address is combined with your browser type and a value that changes every day to make an anonymous code, so one visit can be counted once; the address itself is not stored, and the code cannot connect today’s visit to tomorrow’s. Overlays, the control deck, the phone scorer and the owner console are never counted. Page views are deleted after 13 months.

To know where a visit started, the first page is kept in your browser’s session storage until you close the tab. If you create an account during that visit, that first page and where it came from are saved with your account.

Boards and share links

Every board has a share code. A display link carrying that code is public: anyone who has it can watch the overlay, and that is what makes it work as an OBS source or a link in a group chat. Treat the link like a stadium gate, not a key — anyone you send it to can pass it on. The board’s control link works the same way: anyone holding it can run the board with you, so share it only with the people you want scoring. The phone scorekeeper page is the one link that asks them to sign in.

Uploads

Crests, marks and sponsor images are image files of up to 5 MB each — anything else is refused. They are stored in ScoreKeeper’s database alongside the board they belong to, not on a third-party file host. Deleting your account removes every image it uploaded, apart from any a board someone else cloned from yours is still showing.

Messages you send us

The contact and feedback forms deliver to an inbox inside ScoreKeeper. What you write — along with the name and email you give so we can reply — is stored there and read by the people who build the product. Nothing is forwarded to a ticketing service or a marketing list, and replies come from us by email.

Paying for a plan

Checkout, card changes, invoices and cancellations happen on pages hosted by Stripe. Your card number is entered there and stays there. ScoreKeeper keeps only the Stripe customer reference and whether the subscription is active, which is what unlocks the plan.

Password resets

If you ask for a password reset, ScoreKeeper sends a one-time link to the email address on your account. The link expires after one hour and works once.

Removing your data

Delete a board from your dashboard and it is gone, along with its display and control links. Under account settings you can download everything your account holds as a JSON file, and delete the account itself: that removes your boards, saved boards, uploads and any subscription, straight away. Messages you sent through the contact and feedback forms stay in our inbox with your account link removed.