1. General Information

Welcome to My Scores. Your privacy is extremely important to us. This Privacy Policy describes how we collect, use, store, and protect your personal data when you use our mobile application, presentation website, and backend synchronization services.

2. Types of Data Collected

To allow the use of the application and presentation website, we collect and process the following categories of personal data:

Registration and Profile Data (Third-party OAuth): To use the application, it is mandatory to sign in via Google Sign-In or Apple Sign-In. We collect your email address, full name, and unique identifiers provided by the respective provider.
Game Data Synchronized in the Cloud: All information entered regarding games, sessions, scores, edit history, names of players created, and any images of their avatars are saved and synchronized exclusively on our central cloud database.
Website Analytics and Heatmapping Data (Microsoft Clarity): On our presentation website, if you explicitly accept analytical cookies, we collect anonymized user navigation data (mouse clicks, scrolling, page interactions, screen resolution, browser type, and country) via Microsoft Clarity to improve site usability. IP addresses are masked.
Technical and Security Data: To protect our systems from abuse or cyberattacks (Rate Limiting), our servers temporarily process your device's IP address during API requests in memory.
Newsletter Data: If you voluntarily sign up to receive notifications about our application launch, we collect your email address.

3. Purposes and Legal Basis of Processing

Your personal data is processed exclusively for the following purposes:

Providing application features: Save, sync, and view game sessions. Legal basis: contract execution (Art. 6, par. 1, lett. b GDPR).
Website analytics and heatmaps (Microsoft Clarity): Analyze user navigation and website usability. Legal basis: your explicit consent (Art. 6, par. 1, lett. a GDPR), provided via the Cookie Banner and revocable at any time.
Security and stability of the service: Prevent fraud and rate limit APIs. Legal basis: legitimate interest (Art. 6, par. 1, lett. f GDPR).
Newsletter updates: Send updates regarding the application. Legal basis: your explicit consent (Art. 6, par. 1, lett. a GDPR).

4. Data Retention

Cloud Data: Kept for a maximum of 2 years from your last login.
Website Analytics Data (Clarity): Session recordings and heatmap data are stored by Microsoft Clarity for a maximum of 13 months, after which they are automatically deleted.
Security Data (IP): Temporarily held in memory for rate limiting.
Newsletter Data: Stored until you unsubscribe.

5. Third-Party Data Transfers

Cloud data is stored on secure VPS servers in the European Union. Authentication is managed via Google LLC and Apple Inc. For newsletter distribution, data is processed by Kit (ConvertKit) in the USA under GDPR compliance frameworks. For website analytics, anonymized interaction data is processed by Microsoft Corporation (USA) under the EU-U.S. Data Privacy Framework and Standard Contractual Clauses (SCC).

6. User Rights

Under GDPR, you have the right to access, rectify, erase, restrict, or transfer your personal data, or object to processing. You can revoke cookie consent at any time via the "Cookie Preferences" button. Contact us at [email protected].

7. Contacts and Data Controller

The Data Controller is the My Scores team. Email: [email protected].