Privacy Policy
This privacy policy informs you about the processing of personal data when you use Scorix. It applies to:
- the app Scorix (package name: com.scorix.football) from the Google Play Store
- the website scorix.io
The app and the website use the same account. Where processing differs, this is noted in the respective section.
1. Controller
The controller within the meaning of the General Data Protection Regulation (GDPR) is:
Dustin Friese
Skylet - Built to Perform
Hubertusweg 9
53501 Grafschaft-Birresdorf
Germany
Email: info@scorix.io
Full provider identification: see Imprint.
2. Overview
Scorix shows live scores, fixtures, tables, statistics, predictions, news and video highlights from football. You can use Scorix without an account. With an account, your favourites and notifications are available in the app and on the website.
We obtain the sports data from a licensed data provider. No personal data of our users is transmitted in the process.
3. What data we process
3.1 Account and registration
- Email address and password (stored only encrypted/hashed)
- Name or display name and optionally a profile picture (app)
- When signing in with Google (app): name and email address of your Google account
- Supabase session and authentication data (e.g. access tokens)
- Time of registration and last sign-in
An account is optional. It works in the app and on the website with the same sign-in. For “Forgot password” we send a code to your email address.
3.2 Favourites and starred matches
- Leagues, teams and players you follow, and starred matches
With an account, we store this information with your account so that it is available on all your devices; when you sign in on the website, the favourites stored in the browser are merged with those of your account. Without an account, the website stores them only in your browser; the app stores them together with a pseudonymous device ID in our database so that notifications for your leagues and teams work.
3.3 Notifications (app)
For notifications (e.g. goals, kick-off, full time), the app uses Google's Firebase Cloud Messaging. For this we process a push token of your device, your app language, your favourites and the matches for which you have activated the bell. You can switch off notifications at any time in the app or in your device settings; the token is then no longer used.
3.4 Prediction game, quiz and polls (app)
- Prediction game: your tips, your score and the country you selected for the country ranking
- Quiz: your answers and points for the leaderboard
- Polls before kick-off: one vote per device (pseudonymous device ID); only the overall result is shown
Users without an account appear in leaderboards only with a pseudonymous identifier.
3.5 Installation count (reach measurement, app)
So that we know how many devices use the app, the app reports a count to our server at start-up. Only the pseudonymous device ID, platform, app version and app language are transmitted. The legal basis is our legitimate interest in developing the app according to demand (Art. 6 (1) (f) GDPR).
3.6 Payments (Premium, app)
Premium is an auto-renewing subscription that removes advertising. Payment is handled exclusively by Google Play (Play Billing). We do not receive payment data (e.g. card numbers).
3.7 Advertising (app)
The free version of the app shows advertising via Google AdMob. Google may process device identifiers (advertising ID), the IP address and usage information under its own responsibility. More information: Google Privacy Policy. The website does not show advertising.
3.8 Storage in the browser (website)
The website stores in your browser's LocalStorage: appearance (light/dark) and language, your favourites, a random device ID for polls and – if you sign in – your sign-in session. Without “Keep me signed in”, the session ends when you close the browser. This data remains only on your device; you can delete it at any time via your browser settings. The website uses no advertising or tracking cookies.
3.9 Images, fonts and videos from third parties
- Crests, logos and player photos are loaded from the image server (content delivery network) of our sports data provider, some player photos from Wikimedia Commons (with image credit).
- The app and the website load fonts from Google Fonts; the website also loads icons and program libraries from unpkg.com and cdn.jsdelivr.net.
- Video highlights are YouTube videos. On the website they are only loaded when you start a video, via youtube-nocookie.com (privacy-enhanced mode).
When this content is loaded, your IP address is transmitted to the respective provider.
3.10 News
News comes from public RSS feeds retrieved by our server. No personal data is transmitted to the sources when news is displayed. If you open an article, you are taken to the source's website, where its privacy policy applies.
3.11 Technical log data
- IP address when accessing the website or the interfaces (server-side, briefly)
- Error and access logs for security and stability
4. Purposes and legal bases
- Performance of a contract (Art. 6 (1) (b) GDPR): account, favourites, notifications, prediction game, quiz and Premium
- Legitimate interest (Art. 6 (1) (f) GDPR): IT security, prevention of misuse, error analysis, stability, reach measurement
- Consent (Art. 6 (1) (a) GDPR): where required, e.g. for notifications
- Legal obligation (Art. 6 (1) (c) GDPR): retention where required by law
5. Hosting and processors
We use the following services, which may process personal data on our behalf:
- Supabase – sign-in, database, backend (servers in the EU, Frankfurt)
- Google – Firebase Cloud Messaging (notifications), Google Play (payments), Google AdMob (advertising), Google sign-in
- Hosting provider for scorix.io
Where required, contracts pursuant to Art. 28 GDPR are concluded with processors.
6. Storage period
Personal data is deleted as soon as the purpose no longer applies and no statutory retention obligations stand in the way. Account data is kept until you delete your account. Server logs are usually deleted automatically after a short time. Data that is stored only on your device or in your browser disappears when you uninstall the app or delete your browser data.
6.1 Deleting your account
You can request the deletion of your account at any time by email to info@scorix.io. We will then remove your profile including name and email address, your favourites, starred matches and notification settings, your tips and quiz results, and your sign-in account itself.
Note on Premium: An existing subscription is not cancelled by deleting your account, as billing runs via Google Play. Please cancel it beforehand in your Google Play subscriptions.
7. Disclosure to third parties
Data is disclosed to processors (see section 5) and to Google for notifications, payments and advertising. Any other disclosure to third parties only takes place with a legal basis or your consent.
8. Transfer to third countries
When using services based outside the EU (e.g. USA), data may be transferred to third countries. Appropriate safeguards (e.g. standard contractual clauses) are used where provided by the provider.
9. Your rights
You have the following rights towards us, provided the legal requirements are met:
- Access (Art. 15 GDPR)
- Rectification (Art. 16 GDPR)
- Erasure (Art. 17 GDPR)
- Restriction of processing (Art. 18 GDPR)
- Data portability (Art. 20 GDPR)
- Objection (Art. 21 GDPR)
- Withdrawal of consent (Art. 7 (3) GDPR)
To exercise your rights, please contact the controller at info@scorix.io. You can also lodge a complaint with a data protection supervisory authority, for example the State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate (www.datenschutz.rlp.de).
10. Security
We use technical and organisational measures (including TLS encryption, access controls and secure password storage) to protect your data against unauthorised access.
11. Children
Our services are not directed at persons under 16 years of age. We do not knowingly collect data from children under this age.
12. Changes
We may adapt this privacy policy if our services or legal requirements change. The current version can always be found at this URL.