Privacy Policy for Championship Darts Scorer 2

1. Data controller and contact details

The App is published under the name Giron Apps. The data controller is:

Jens Kangosjärvi, operating under the name Giron Apps

Email: championshipdarts@outlook.com

Contact us using the email address above if you have questions about this Policy or wish to exercise your privacy rights.

2. Personal data we process

Depending on the features you use, the App may process the following data:

• Account and authentication data: your email address, internal user ID, display name, player name, registration and sign-in timestamps, and information required to maintain your signed-in session. Passwords are handled by the authentication provider and are not stored by us in plain text.
• Darts, match, and competition data: player names, match settings, throws and scores, legs, sets, checkouts, results, statistics, cups, leagues, tournaments, and related competition information.
• Social and shared-feature data: friend requests, friendships, competition invitations, participation, lobby and presence status, and events required to operate online matches and shared competitions.
• Video-feature data: video-room identifiers, participants, connection and disconnection times, and usage metadata. If you actively enable the camera, microphone, or highlight saving, live audio and video may be processed and short highlight clips may be stored. Ordinary live calls are not intended to be recorded or stored by us when highlight saving is disabled.
• Feedback: text you submit through the App's feedback feature and, unless you choose anonymous feedback, its association with your account.
• Subscription and transaction data: if you purchase an optional Premium subscription, we may process your Stripe customer identifier, email address, selected plan, subscription status, transaction amount and date, payment status, invoice and tax information, and references for refunds, disputes, or cancellations. Payment-card and bank-account details are entered directly into Stripe's checkout and are not stored by us.
• Technical data: IP address, timestamps, App or browser version, operating system, session and security logs, and error or diagnostic data that our infrastructure providers may process to deliver and protect the service.
• Locally stored data: matches, players, preferences, offline queues, and cached data may be stored on your device using Local Storage or IndexedDB. This data does not leave your device unless it is synchronised with the online service through a feature you choose to use.

We do not use third-party advertising or advertising-based tracking in the current version of the App.

3. Why we process personal data

We process personal data to:

• create and administer user accounts;
• save, synchronise, and display matches, statistics, and competitions;
• provide online matches, friend features, invitations, and real-time updates;
• provide optional video and highlight features;
• provide support, receive feedback, and troubleshoot problems;
• process purchases and administer Premium access, subscriptions, renewals, cancellations, refunds, invoices, and payment-related support;
• prevent abuse, protect accounts, and maintain the security and reliability of the service;
• comply with legal obligations and establish, exercise, or defend legal claims.

4. Legal bases for processing

Where the General Data Protection Regulation ("GDPR") applies, we rely on the following legal bases:

• Performance of a contract: processing is necessary to provide your account, the App features you choose to use, and any Premium subscription you purchase.
• Legitimate interests: we have legitimate interests in protecting the service, preventing abuse and payment fraud, troubleshooting problems, and improving reliability. We balance those interests against your rights and freedoms.
• Consent: camera, microphone, recording, and saved-video features are used only after an active choice and the permissions required by your device or browser. You can withdraw consent by disabling the feature or the relevant device permission.
• Legal obligation: we may process certain data where required by law.

5. Information visible to other users

Player names, match results, statistics, competition participation, presence status, and other information relating to a shared match or competition may be visible to its other participants. Open competitions or public profiles may make information that is clearly identified as public available to other users.

Do not enter another person's real name or other personal data when creating local players or competitions without that person's permission.

6. Service providers and other recipients

The following providers may process data to the extent required to deliver the service:

• Supabase: database, authentication, real-time functionality, file storage, and backend infrastructure.
• Vercel: hosting and delivery of the separate web service used for video features.
• Stripe: secure checkout, payment processing, subscription administration, invoicing, tax-related functionality where enabled, fraud prevention, refunds, and payment disputes. Stripe may act as a processor and/or an independent controller depending on the service and processing activity. Stripe's Privacy Policy is available at https://stripe.com/privacy.
• Microsoft: distribution of the Windows App through Microsoft Store and related installation and Store information under Microsoft's own terms and privacy statement.
• Authorities and legal parties: where disclosure is required by law or necessary to establish, exercise, or defend legal claims.

These providers' processing is also governed by their own terms and privacy policies.

7. International data transfers

Some service providers may process data in countries outside the European Union or European Economic Area. Where GDPR applies, such transfers must use a valid transfer mechanism, such as an adequacy decision or the European Commission's Standard Contractual Clauses, together with supplementary safeguards where required.

8. How long we retain data

We retain personal data only for as long as necessary for the purposes described in this Policy:

• account and cloud-stored App data is normally retained while your account remains active or until it is deleted by you or following an approved deletion request;
• match and competition data is retained for as long as needed to provide history, statistics, and the shared records of other participants;
• video rooms have a limited active duration, while saved highlight clips remain until they are deleted, the account is closed, or the storage is no longer required;
• feedback and security logs are retained for as long as needed for support, security, and troubleshooting;
• subscription and transaction records are retained for as long as needed to administer the subscription, handle refunds or disputes, prevent fraud, and comply with accounting, tax, and other legal retention obligations;
• personal data in backups may remain until the relevant backup is overwritten through the provider's normal backup cycle;
• locally stored data remains on your device until it is cleared in the App, removed by the operating system, or deleted by uninstalling or clearing the App's data.

Some data may be retained for longer where required by law, necessary to resolve disputes, or needed to prevent abuse. Where complete deletion would adversely affect another participant's match or competition history, relevant results may instead be de-identified or access-restricted.

9. Security

We use technical and organisational safeguards, including encrypted HTTPS transmission, access controls, and database rules intended to restrict access to authorised users. Video highlights use private storage and permission-controlled or time-limited access.

No technical system is entirely risk-free. Contact us if you suspect unauthorised access to your account or personal data.

10. Your choices and rights

Subject to applicable law, you may have the right to:

• receive information about and obtain access to your personal data;
• correct inaccurate personal data;
• request deletion or restriction of processing;
• object to processing based on legitimate interests;
• receive certain data in a structured, commonly used, and machine-readable format;
• withdraw consent without affecting processing that took place before withdrawal;
• lodge a complaint with the Swedish Authority for Privacy Protection ("IMY") or another competent supervisory authority.

You can clear locally stored App data on your device. To request account access, correction, or deletion, contact championshipdarts@outlook.com. We may need to verify your identity before completing a request.

IMY's contact details are available at https://www.imy.se/.

11. Children

The App is not specifically directed to children under the age of 13. If the law where you live does not allow you to consent on your own, a parent or legal guardian must approve your use of the App. Contact us if you believe a child has submitted personal data without the required permission.

12. Payments and Premium subscriptions

The App may offer optional Premium subscriptions while remaining free to download. Purchases are processed by Stripe through a separate, secure checkout environment. Stripe receives the payment and transaction information required to authorise the payment, prevent fraud, administer recurring billing, and handle refunds or disputes. Depending on the payment method, Stripe may share relevant information with banks, card networks, payment-method providers, and fraud-prevention services.

We do not receive or store complete payment-card or bank-account details. We receive limited transaction and subscription information from Stripe so that we can activate Premium access, display subscription status, provide support, and comply with accounting and legal requirements.

Subscriptions may renew automatically until cancelled. The applicable price, billing interval, trial terms, renewal terms, and cancellation method will be shown before purchase. Stripe's own processing is described in the Stripe Privacy Policy.

13. Changes to this Policy

We may update this Policy when the App's features, service providers, or legal requirements change. If a change materially affects users, we will provide appropriate notice in the App or through another available contact method.