Privacy Policy

Last updated: July 27, 2026

Introduction

ScorBoo ("we", "us", "our") is a mobile board game score tracker operated by an independent developer. This Privacy Policy explains how we collect, use, and protect your personal information when you use the ScorBoo application.

Data We Collect

We collect the following information when you use ScorBoo:

  • Email address (from your Google, Apple, or email sign-in)
  • Display name (from your sign-in provider or set by you)
  • Username (chosen by you during setup)
  • Profile photo. Your sign-in provider's photo is copied once into our own storage and served from there, so the app never repeatedly fetches it from Google or Apple.
  • Game session data: scores, player names, game history, and statistics
  • Session memories: an optional short note and one optional photo you can attach to a finished game. Photos are stored in our own storage under an unguessable but publicly readable URL, so treat them as shareable rather than secret. In the app they are shown only to people who can already see that game session. Both the note and the photo are optional and can be removed at any time.
  • Push notification token (for delivering notifications to your device)
  • Language preference (English or French)
  • App milestone events: anonymous, aggregated counts of a small set of key actions (signup, onboarding completion, first session, hitting the 25-game cap, purchase, sharing a result card). No screen-by-screen tracking, no individual behavior profiling - used only to measure activation and the impact of our marketing.
  • Optional acquisition source: if you answer the "how did you find me?" picker during onboarding, your answer is stored to help us understand which marketing channels work. The picker is skippable, and the answer is removed when you delete your account.

Third-Party Services

We use the following third-party services to operate ScorBoo:

  • Supabase: Database hosting and authentication (PostgreSQL). Your data is stored on Supabase servers.
  • Firebase Cloud Messaging: Push notification delivery (iOS and Android only). We send your device token to Firebase to deliver notifications.
  • RevenueCat: In-app purchase management. RevenueCat processes the ScorBooz purchase.
  • Google / Apple: Authentication providers. We use Google Sign-In and Sign in with Apple to verify your identity. We only receive your email, name, and profile photo. See "How ScorBoo uses Google user data" below for the full disclosure covering Google.

How ScorBoo Uses Google User Data

ScorBoo offers "Sign in with Google" as one way to create and access your account. This section describes exactly what Google user data ScorBoo receives, and how we use, store, share, and delete it. ScorBoo never accesses Gmail, Google Drive, Google Calendar, Google Contacts, Google Photos, or any other Google service.

The Google data we access

When you choose "Sign in with Google", ScorBoo requests these OAuth scopes and nothing else:

  • openid - your Google account identifier. Used to link your Google account to your ScorBoo account so you can sign back in on any device.
  • .../auth/userinfo.email - your Google account email address. Used as the unique identifier of your ScorBoo account and to reply to support requests you send us.
  • .../auth/userinfo.profile - your basic profile information: your name and your profile picture. Used to pre-fill your ScorBoo display name and avatar.

We do not request, receive, or store your Google password, contacts, calendar, emails, files, or photo library. Signing in with Google is optional: you can create a ScorBoo account with Apple Sign-In or with an email one-time code instead.

How we use it

  • Authentication: your Google account identifier and email address create your ScorBoo account, identify it on every sign-in, and let us answer support requests you send us. We do not send marketing email.
  • Profile setup: your Google name pre-fills your ScorBoo display name, and your Google profile picture is copied once into our own storage and used as your ScorBoo avatar (so the app does not repeatedly fetch the image from Google servers). You can change or remove both at any time in the app.
  • Visibility to other players: your display name, username, and avatar are shown to players in game sessions you take part in, to your ScorBoo friends, and - only if you turn on a public profile - on public profile pages and the leaderboard. Your Google email address is never shown to other users.

Google user data is used only for the purposes listed above - operating the score tracker's account, profile, and social features. It is not used for advertising, ad personalization, or behavioral profiling.

How we store and protect it

Google user data is stored in our Supabase-hosted PostgreSQL database, and the copy of your profile picture is stored in Supabase Storage. All traffic between the app and our servers is encrypted in transit with HTTPS/TLS. Access is restricted at the database level by PostgreSQL row-level security policies, so each account can only read the data it is entitled to see. The only person with administrative access is the independent developer who operates ScorBoo, who accesses it only to handle a support request you have made, to investigate a security or abuse issue, or when legally required.

How we share it

We do not sell Google user data, and we do not transfer it to advertisers, data brokers, or any other third party for their own purposes. The only service provider with access is Supabase, our database and storage host, which processes the data solely on our instructions to run the app. We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models.

Retention, deletion, and revoking access

Google user data is kept for as long as your ScorBoo account exists. You can delete your account at any time from Settings > Delete Account in the app, which removes or anonymizes your name, email address, and avatar as described in "Account Deletion" above. You can also revoke ScorBoo's access to your Google account at any time from your Google Account permissions page (myaccount.google.com/permissions). Revoking access prevents future Google sign-in but does not by itself erase data already stored, so use in-app account deletion for that.

Limited Use disclosure

ScorBoo's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data Retention

Your data is retained as long as your account is active. Game sessions you participated in are preserved for other players' statistics, but your personal information is anonymized upon account deletion.

Account Deletion

You can delete your account at any time from Settings > Delete Account within the app. Deletion anonymizes your personal information (name, email, username, avatar) and removes your friendships. Your scores remain in shared game sessions but are no longer linked to your identity.

Analytics & Tracking

No third-party analytics SDKs in my pocket - no Firebase Analytics, no Google Analytics, no Mixpanel, no advertising IDs (IDFA/GAID), no ads, ever. To know if my marketing actually works without spying on you, I do two small things, both on my own servers: (1) cookieless visit counts on this website (no cookies, no fingerprinting, aggregated stats only - powered by self-hosted Umami running on my own infrastructure at analytics.scorboo.app), and (2) a handful of milestone events from the app - like "someone finished onboarding" or "someone hit the 25-game cap" - written to my own Supabase. No screen-by-screen tracking. No selling, no sharing with anyone. The "how did you find me?" picker shown during onboarding is optional - skip it if you want. Caw.

Your Rights (GDPR)

If you are located in the European Economic Area, you have the following rights:

  • Right of access: View your data within the app (profile, game history, statistics).
  • Right to erasure: Delete your account from Settings, which anonymizes your personal data.
  • Right to data portability: Export your session history as CSV.
  • Right to rectification: Update your display name and profile settings at any time.

Children's Privacy

ScorBoo is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page indicates when it was last revised. Continued use of ScorBoo after changes constitutes acceptance of the updated policy.

Contact

For any privacy-related questions or requests, contact us at: info@scorboo.app

Privacy Policy · ScorBoo