Privacy policy

Data controller

Pilovia (sole proprietorship), operated by Jacky Désirée — SIREN 102 268 588, RCS Agen — 283 Route de Charpeau, 47240 Bon-Encontre, France.

Data contact: contact@pilovia.fr (no DPO appointed, GDPR art. 37 — small business).

Local vs cloud data

Guest / QR / spectator mode: your matches and scores stay stored locally on your device (localStorage). No account, no personal data sent. Clearing your browser cache erases this data; there is no cross-device sync in this mode.

With an account (email / magic link): your email and synced matches/teams/competitions are stored on Supabase (EU) so you can access them across devices.

Data collected (with an account)

Email address (account management, legal basis: performance of the Terms).

Content you create: matches, scores, teams, competitions.

Payment data (Android/iOS): we never receive your card details. For a purchase we only receive a transaction identifier / purchase token, the product id and its status.

Processors & hosting

App hosted by Vercel Inc. (United States, transfers governed by Standard Contractual Clauses, GDPR art. 46). Database, authentication and realtime sync by Supabase Inc. (European Union, AWS eu-west-3 region).

Payments: Apple (App Store) and Google (Play) for in-app purchases; Stripe for business offers on the web. Non-EU transfers governed by Standard Contractual Clauses (GDPR art. 46).

Your rights

Access, rectification, erasure, portability (JSON export), objection. Exercise them in-app (Account → Export / Delete) or by email. Reply within one month.

You may lodge a complaint with your data protection authority.

Cookies

ScoreZen only uses local storage strictly necessary to function. No advertising cookies, no third-party analytics, no tracking pixels — so no consent banner is required.

Retention

Account data: for the life of the account, then deleted. Billing data: kept per legal accounting obligations. Game data deleted immediately on account deletion.