Privacy policy

Who we are

SportsScorer is a tournament and live-scoring platform for grassroots sport in India, available as an Android app and a website. For anything in this policy, contact support@sportsscorer.in.

What we collect

• Phone number — your account identifier. We use it to sign you in with a one-time password (OTP) and to link you to teams you're added to.
• Display name and profile details — the name shown on scorecards and any optional details you add to your player profile (such as city, date of birth, or batting and bowling style).
• Tournament and match data — tournaments, teams, fixtures, and scores created by you or recorded about matches you play in, including who recorded each scoring action (kept as an audit trail so scores stay trustworthy).
• Technical data — standard server logs (such as IP address and request time) used for security, rate limiting, and keeping the service running.
• How you found us — which link, page or app-store referral brought your browser or app to SportsScorer. See how you found us below.
• Crash reports — from the Android app only. See crash reporting below.

We don't collect payment information — there are no payments in the product today.

Sign-in, OTP, and cookies

You sign in with your phone number and an OTP sent by SMS. We share your phone number with an SMS delivery provider solely to deliver that code. After you verify, we issue a short-lived access token and a rotating refresh token; the refresh token is stored in an httpOnly cookie on the web, used only to keep you signed in. If you choose the organiser or player side of our home page, a first-party ss_trackcookie remembers that choice for a year so the home page opens on your side next time; it holds nothing else. We don't use advertising or cross-site tracking cookies, and the web app currently includes no third-party analytics or ad scripts.

How you found us

We keep a simple, first-party record of how people find SportsScorer, so we know which channels — a shared scorecard, a post, a search, the Play Store — actually bring people in. It is first-party: no third-party analytics or advertising tools are involved.

• A random device id — made up the first time you visit and stored in your browser (or in the app). It identifies that browser or install, not you, and carries nothing else.
• What brought you — the link you opened (for example one of our campaign links, or a share link that says which share button it came from and who shared it), or the app-store referral that came with an install — together with the time the app was installed and its version number.
• The pages you arrive on — on the website, the first page of every visit (each new browser tab counts as a new visit) and any page opened from a tagged link; in the app, each tagged SportsScorer link that opens it (a share, campaign or partner link — a plain link records nothing). We keep the page's path, such as a match or tournament page, and the domain of the site that sent you (for example google.com) — never the full address you came from. This keeps happening after you sign up, so over time it is a list of where you came in from — not a record of every page you look at.

Google Play.When you tap a button to get the Android app, or scan the download QR, on the website, the Google Play link carries your browser's random device id, a short tag saying which button or campaign link it came from, and — if a partner sent you — the partner's click reference. Google Play hands these back to the app when it is installed, so the install is credited to the right link. Nothing else about you goes with it.

We don't store your IP address or your browser or device details with these records. When you sign up or sign in — or, in the app, if you're already signed in when it records its install — the device id is linked to your account, so we can tell which channel brought you. We use it only to understand which channels bring people to SportsScorer. We never sell it, and apart from the Google Play hand-off above we never share it — never for advertising. If you delete your account, these records stay attached to the anonymised “Deleted user” and no longer point to you.

What is public

SportsScorer exists so anyone can follow a tournament without logging in. That means live scores, scorecards, fixtures, standings, tournament pages, and player profiles — your display name, career stats, and match history — are visible to anyone with the link. Your phone number is never shown on public pages.

Stub profiles

A team captain or tournament organizer can add you to a roster using your phone number and a display name before you've ever signed up — we call this a stub profile. When you later sign up with that same phone number, the stub becomes your account and you keep all of its history: team memberships, appearances, and stats. Stub profiles are excluded from search-engine indexing. If someone created a stub profile about you and you want it removed, email support@sportsscorer.in and we'll take it down.

App permissions

The Android app asks for a permission only at the moment a feature needs it, never on launch. Declining any of them leaves the rest of the app working normally.

• Contacts — only for “import players from contacts” when building a team roster, and only from the moment you tap it. Your address book is read and filtered on your device; it is never uploaded. Only the people you actually tick are sent to us, as the name and phone number needed to add them to that team — exactly as if you had typed them in. We only read contacts; the app cannot modify them.
• Approximate location — only when you tap “Use my location” while picking a city (in the app or on the website). We ask for coarse location — roughly which town you are in, not a precise position — round it to about 1 km, and send it to our own server only to look up the nearest town on our list. The town you pick is what gets saved (to your profile or the tournament); the location itself is not saved to your account or the tournament, and we never check your location in the background or when you are not using it.
• Camera and photos — declared in the app so that profile pictures and team logos can be added in a future update. That feature is not built yet: the app currently has no screen that opens your camera or photo library, and no image is uploaded anywhere. When it ships, this policy will be updated before it does anything.
• Notifications — so we can alert you about match starts, results, and invitations. See push notifications below.

Crash reporting

The Android app uses Sentry to report crashes. Beta testers rarely file bug reports — without this, a crash simply reads as “the app is broken” and we never find out. The website does not use Sentry or any equivalent.

A crash report contains the technical stack trace, your device model and Android version, the app version, and a short trail of which screens and controls you touched just before it happened. We have deliberately turned off Sentry's personal-data collection, and the app strips the network request details and any user identifier from every report before it is sent — so a report cannot carry your phone number. Sentry collects crashes only — no performance or usage tracking. How you found SportsScorer is recorded separately, first-party; see how you found us.

Push notifications

The app ships with Google's Firebase Cloud Messaging SDK, which is the standard way an Android app receives push notifications. Push is not switched on yet. The app does not currently request or send a push token to us or to Google, so no notifications are being delivered and no device identifier is being collected through it. When we turn push on, a token identifying your installation will be registered so we can send you match alerts, and this policy will say so.

Where your data is stored

Your data is stored on a managed Postgres database hosted in Mumbai, India (the AWS ap-south-1 region). Access is restricted to our backend service; the app and website never talk to the database directly.

Deleting your account

You can delete your account yourself, at any time, without asking us. In the Android app, open Profile and choose Delete account. On the web, go to sportsscorer.in/delete-account — you don't need the app installed to use it. There is no waiting period: it happens immediately and cannot be undone.

What is destroyed: your name, phone number, photo, city, date of birth and any other profile details; your player preferences; your notifications; and every signed-in session, on every device.

What survives, and why: a scorecard belongs to everyone who played in that match. Deleting your entries from it would change other players' figures and break results that a whole tournament depends on. So those entries stay and your identity is removed from them — wherever your name appeared, the record reads “Deleted user”. Nothing links those entries back to you afterwards. Your phone number is released, so it can be used to sign up again; that would be a completely new account, starting empty.

If you can't sign in — you've lost the number, or you're not receiving the code — email support@sportsscorer.in and we'll verify the account is yours and delete it for you.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can:

• Ask what personal data we hold about you
• Ask us to correct inaccurate data
• Delete your account and personal data — you can do this yourself, see deleting your account
• Raise a grievance about how your data has been handled

Send any of these requests to support@sportsscorer.in from a channel where we can verify you control the phone number on the account. We aim to acknowledge within 2 working days.

Changes to this policy

If this policy changes in a way that matters, we'll update this page and the date at the top. Questions about anything here — or anything not covered — are welcome via contact.