Privacy Policy

Privacy Policy - Minimal data collection with details on personal data types, use of cookies, data retention, and third-party tools.

Last Updated: November 24, 2025

We are committed to minimal data collection across all our online scoreboard and leaderboard services. Below you will
find details about the types of data we collect, how we use them, and whom we might share them with.

What Personal Data Do We Collect?

We collect the following types of personal data:

  • IP Addresses: Collected for security, fraud prevention, and service optimization
  • Participant Names: Voluntarily provided by users to display on scoreboards and leaderboards
  • Email Addresses: Required for optional account registration, login functionality, and payment processing

Legal Basis for Processing

Under the General Data Protection Regulation (GDPR), we process your personal data based on the following legal grounds:

  • Contractual Necessity (Article 6(1)(b) GDPR): Processing necessary to provide our scoreboard and leaderboard services to you
  • Consent (Article 6(1)(a) GDPR): For optional features including advertising, optional analytics (Google Analytics 4), comments (Hyvor Talk), and marketing communications
  • Legitimate Interest (Article 6(1)(f) GDPR): For essential analytics (Fathom Analytics), security measures, fraud prevention, error tracking, and service improvement. Our legitimate interests do not override your fundamental rights and freedoms

You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.

Use of Cookies

Cookies are used by our services to enhance, secure, and improve functionality, as well as to develop new features. We use the following categories of cookies:

  • Strictly Necessary Cookies: Essential for the service to function. These include:
  • Session management cookies (Flask session cookie)
  • Authentication cookies (remember me functionality for logged-in users)

  • These cookies cannot be disabled as they are required for the service to operate.

  • Analytics Cookies: Help us understand how visitors interact with our service:

  • Microsoft Clarity: Session replay and heatmaps (set for all users)
  • Google Analytics 4: Traffic analysis and user behavior (only on free scoreboards with opt-in consent)
  • Microsoft Bing UET: Conversion tracking for advertising optimization

  • Fathom Analytics and Ahrefs Analytics: Privacy-focused analytics that do NOT use cookies

  • Advertising Cookies: Used to deliver relevant advertisements on free scoreboards (requires opt-in consent for non-premium users):

  • Raptive/Adthrive: Ad delivery and targeting
  • Google Analytics 4: Also used for advertising optimization on free boards

For non-premium service users, an opt-in consent prompt for advertising and optional analytics cookies will be presented. Premium members do not see advertising and these advertising cookies are not set. You can manage your cookie preferences at any time through our consent management platform.

Data Retention Period

Scoreboards are deleted 2 years after their last activity. You have the option to delete any scoreboard you've created manually. User account data is retained for as long as your account is active. You can delete your account and all associated data directly from your account settings at any time.

Data Storage and Processing Locations

Your personal data is stored and processed in the following locations:

  • Primary data storage: Amazon Web Services (AWS) and Google Cloud infrastructure, with data centers located in both the European Union and the United States
  • Backup systems: Data is replicated across multiple geographic regions for reliability and disaster recovery
  • Third-party processors: As detailed below, some sub-processors may store or process data in various locations globally

We ensure appropriate safeguards are in place for all data transfers, as described in the "International Data Transfers" section below.

Third-Party Tools and Sub-Processors

We make use of the following third-party tools and sub-processors. While we share your information with these entities, we maintain responsibility for it. Sub-processors are classified as either essential or optional.

  • Amazon Web Services (AWS) (Essential): For data hosting.
    Further Information: AWS Compliance

  • Google Cloud (Essential): For data hosting.
    Further Information: Google Privacy Policy

  • SolarWinds Papertrail (Essential): For backend log-file management.
    Further Information: SolarWinds Trust Center

  • Sentry (Essential): For backend log-file management.
    Further Information: Sentry Privacy Policy

  • Twilio Sendgrid (Essential): For sending transactional emails.
    Further Information: Twilio Privacy Policy

  • Customer.io (Essential): For sending personalized emails and newsletters.
    For more information, please review Customer.io's Privacy Policy.

  • Fathom Analytics (Essential): For privacy-friendly traffic analysis. Fathom does not use cookies.
    Further Information: Fathom Analytics Compliance

  • Ahrefs Analytics (Essential): For privacy-focused website analytics. Does not use cookies.
    Further Information: Ahrefs Privacy Policy

  • Profitwell (Essential): For engagement, retention analytics, and subscription management.
    Further Information: Profitwell Privacy Policy

  • Google Analytics 4 (Optional): Used only on free scoreboards for traffic analysis and advertising optimization. Google Analytics collects information about how visitors use our site, including pages visited, time spent on the site, and interactions with content. This information helps us improve our service and deliver relevant advertising. Uses cookies. For more information about how Google uses data, visit the Google Privacy Policy

  • Microsoft Bing UET (Essential): For conversion tracking and advertising performance measurement.
    Further Information: Microsoft Privacy Statement

  • Advertising (Optional): Free scoreboards and leaderboards show ads. If you have pro membership, the following paragraph does not apply. CMI Marketing, Inc., d/b/a Raptive ("Raptive") is a service provider of this Site for the purposes of placing advertising on the Site, and Raptive will collect and use certain data for advertising purposes. To learn more about Raptive's data usage, click here: https://raptive.com/creator-advertising-privacy-statement

  • Hyvor Talk (Optional): Enables optional comments and reactions on boards.
    Further Information: Hyvor Talk

  • Paddle (Optional): For processing payments for premium memberships.
    Further Information: Paddle Privacy Policy

  • Microsoft: We partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our website through behavioral metrics, heatmaps, and session replay to improve and market our products/services. Website usage data is captured using first and third-party cookies and other tracking technologies to determine the popularity of products/services and online activity. Additionally, we use this information for site optimization, fraud/security purposes, and advertising. For more information about how Microsoft collects and uses your data, visit the Microsoft Privacy Statement."

International Data Transfers

Some of our sub-processors and service providers are located outside the European Economic Area (EEA), including in the United States. When we transfer your personal data to countries outside the EEA, we ensure appropriate safeguards are in place to protect your data:

  • Standard Contractual Clauses (SCCs): We use European Commission-approved Standard Contractual Clauses with service providers to ensure your data receives adequate protection.
  • Adequacy Decisions: Where applicable, we rely on European Commission adequacy decisions recognizing that certain countries provide adequate data protection.
  • EU-U.S. Data Privacy Framework: Some of our service providers participate in the EU-U.S. Data Privacy Framework, which provides appropriate safeguards for data transfers.

The following service providers involve international data transfers: Amazon Web Services (AWS), Google Cloud, SolarWinds Papertrail, Sentry, Twilio Sendgrid, Customer.io, Fathom Analytics, Ahrefs Analytics, Profitwell, Google Analytics 4, Microsoft Bing UET, Raptive (advertising), Hyvor Talk, Paddle, and Microsoft Clarity.

Your Privacy Rights

Under the General Data Protection Regulation (GDPR) and other applicable data protection laws, you have the following rights:

  • Right of Access (Article 15 GDPR): Request a copy of the personal data we hold about you and information about how we process it
  • Right to Rectification (Article 16 GDPR): Request correction of inaccurate or incomplete personal data
  • Right to Erasure ("Right to be Forgotten") (Article 17 GDPR): Request deletion of your personal data when there is no compelling reason for its continued processing. You can delete your scoreboards and your entire account directly from your account settings at any time
  • Right to Restriction of Processing (Article 18 GDPR): Request that we limit the processing of your personal data in certain circumstances
  • Right to Data Portability (Article 20 GDPR): Receive your personal data in a structured, commonly used, and machine-readable format and transmit it to another data controller
  • Right to Object (Article 21 GDPR): Object to processing of your personal data based on legitimate interests or for direct marketing purposes
  • Right to Withdraw Consent: Where processing is based on consent, withdraw your consent at any time. This will not affect the lawfulness of processing based on consent before withdrawal. For advertising cookies, use our consent management platform
  • Right Not to be Subject to Automated Decision-Making (Article 22 GDPR): Not be subject to decisions based solely on automated processing that produce legal or similarly significant effects (we do not currently engage in such processing)

To exercise any of these rights, please contact us. We will respond to your request within one month, though this period may be extended by two additional months where necessary, considering the complexity and number of requests.

Right to Lodge a Complaint

You have the right to lodge a complaint with a supervisory authority, in particular in the EU member state of your habitual residence, place of work, or place of the alleged infringement. Our lead supervisory authority is:

Berlin Commissioner for Data Protection and Freedom of Information (Berliner Beauftragte für Datenschutz und Informationsfreiheit)

You may also contact your local data protection authority in your country of residence.

Data Security

We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including:

  • Encryption of data in transit using SSL/TLS protocols
  • Regular security assessments and updates
  • Access controls and authentication mechanisms
  • Monitoring and logging of system activities
  • Regular backups of critical data
  • Use of reputable cloud service providers with strong security practices (AWS, Google Cloud)

While we strive to protect your personal data, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security but continuously work to maintain the security of your data.

Data Breach Notification

In the event of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority without undue delay and, where feasible, within 72 hours of becoming aware of the breach. If the breach is likely to result in a high risk to your rights and freedoms, we will also communicate the breach to you without undue delay, providing information about:

  • The nature of the breach
  • The likely consequences of the breach
  • Measures taken or proposed to address the breach and mitigate its possible adverse effects
  • Contact point where more information can be obtained

Automated Decision-Making and Profiling

We do not engage in automated decision-making that produces legal effects or similarly significantly affects you. We may use automated systems for:

  • Fraud detection and prevention
  • Service optimization and performance monitoring
  • Personalized content recommendations (for optional features only)

These automated processes do not make decisions that legally bind you or significantly affect your rights. You have the right to object to such processing and request human intervention where applicable.

Children's Privacy

Our services are not directed at children under the age of 16. We do not knowingly collect personal data from children under 16. If you are a parent or guardian and believe your child has provided us with personal data, please contact us at [email protected], and we will delete such information from our systems.

In some jurisdictions, parental consent may be required for children under a certain age to use online services. Users are responsible for ensuring they have appropriate parental consent where required.

Policy Updates

This policy may be updated occasionally without prior notice. We recommend regular visits to this page for the latest
information. Any major changes affecting your interests will be communicated through in-app notifications.

Contact Us

For questions or to exercise your rights under European data protection laws,
please contact us.

Our Identity and Address

  • Data Protection Officer: Caspar von Wrede
  • Address: Goethestr 32, 14163 Berlin, Germany
  • Email: [email protected]

Service Domains

Our services are provided through the following official domains:

  • keepthescore.com
  • keepthescore.co
  • leaderboarded.com

This privacy policy applies to all services provided through these domains.

Thank you for using our services. Your privacy is important to us.