Privacy Policy

1. Data We Collect

1.1 Account Information

When you use Sign in with Apple or Sign in with Google, we receive the following information from Apple or Google:

• Email address (Apple provides a relay email if you select "Hide My Email")
• First name and last name (Apple provides this only on first sign-in; Google provides it on every sign-in)
• Provider User ID — a unique identifier used to recognize your account

1.2 Profile Information

Information you provide directly in the App:

• Username (display name — visible in leaderboards)
• Country
• Favorite football team
• Date of birth
• Gender (optional — "prefer not to say" option available)
• Pro subscription status — whether you have an active Pro membership and its expiration date

1.3 Usage Data

Data generated while using the App:

• Prediction lists (matches selected and predictions made for Score Hunt and mini games)
• Leagues you join
• Trophies and achievements earned
• Weekly and seasonal ranking scores

1.4 Device and App Information

• Device ID (for anonymous session management)
• Operating system (iOS/Android version)
• App version and platform (version code, version name, and whether you are on iOS or Android) — used to provide version-specific support and identify compatibility issues
• Push notification token — a unique token issued by Apple Push Notification service (APNs) or Firebase Cloud Messaging (FCM) so we can deliver match reminders, prize notifications, and important announcements. You can disable push notifications at any time from your device settings.

1.5 Advertising Identifier

The App may collect your Advertising Identifier (IDFA on iOS, GAID/Advertising ID on Android) only with your explicit consent:

• On iOS, you will see an App Tracking Transparency (ATT) prompt the first time you launch the App. If you choose "Ask App Not to Track," the IDFA is not collected and our advertising partners receive only privacy-preserving information via Apple's SKAdNetwork.
• On Android, the GAID is collected unless you opt out via Settings → Google → Ads → Delete advertising ID.
• When collected, the Advertising Identifier is shared with our advertising partners listed in section 3.4 for ad attribution and frequency capping.

1.6 Automatically Collected Data

• IP address — used for security purposes, including rate limiting on authentication endpoints (e.g. up to 15 sign-in attempts per minute per IP) and abuse prevention. We do not use IP addresses to build advertising profiles.
• Error and crash reports — used to monitor app stability. Reports are filtered to exclude personally identifiable information.

2. How We Use Your Data

We use the collected data for the following purposes:

• Account creation and management: To let you sign in and use the App
• Game experience: To save your prediction lists, calculate your scores, and build leaderboards
• Personalization: To display your favorite team and country in leaderboards
• Pro subscription management: To verify your subscription status and grant access to Pro features
• Communication: To send important updates, announcements, prize notifications, and push notifications about the App
• Prize delivery: To send physical or digital prizes to contest winners (requires name and email)
• Account security: To prevent fraudulent accounts, verify user identity, and rate-limit suspicious activity
• Advertising: To display advertisements within the App and measure their performance — see section 8 for details
• Analytics and improvement: To analyze usage statistics anonymously and improve the App

3. Who We Share Your Data With

ScoreHunter does not sell or rent your personal data to third parties. We share data only with the trusted service providers and advertising partners listed below, and only to the extent necessary to operate the App.

3.1 Service Providers

• Amazon Web Services (AWS) — Server and database hosting (Frankfurt, Germany)
• API-Football (api-football.com) — Third-party service that provides match data, team and league information, and associated visual assets (logos and images). No personal data is shared with API-Football. ScoreHunter does not own the rights to logos or trademarks delivered through this service; see Section 11 for details.
• Apple — Apple Sign-In authentication
• Google — Google Sign-In authentication and Firebase Cloud Messaging (push notifications on Android)
• Apple StoreKit — Processes Pro subscription purchases and renewals on iOS
• Google Play Billing — Processes Pro subscription purchases and renewals on Android
• Sentry — Backend error and exception monitoring. Personally identifiable information filtering is enabled (no email, name, or user content is sent to Sentry).

These service providers only process data on our behalf and under our instructions.

3.2 Legal Requirements

Your data may be shared with authorities in response to a court order, legal investigation, or legal obligation.

3.3 Information Visible to Other Users

The following information is visible to other users in leaderboards and profile pages:

• Your username (display name)
• Your country flag
• Your favorite team
• Trophies you've earned
• Your prediction scores and statistics
• A Pro membership badge if you have an active subscription

The following information is never shown in the App:

• Your email address
• Your real first and last name
• Your date of birth
• Your gender
• Your device information
• Your advertising identifier
• Your subscription expiration date

3.4 Advertising Partners

The App displays advertisements through several advertising networks (sometimes called mediation). When you have consented to tracking, your Advertising Identifier and limited technical data may be shared with the partners below for ad delivery, attribution, and frequency capping. Each partner has its own privacy policy:

• Google AdMob & Google User Messaging Platform — policies.google.com/privacy
• AppLovin — applovin.com/privacy
• Liftoff (Vungle) — liftoff.io/privacy-policy
• IronSource — developers.is.com/ironsource-mobile/general/privacy-information
• Unity Ads — unity.com/legal/game-player-and-app-user-privacy-policy
• Meta Audience Network — facebook.com/about/privacy
• InMobi — inmobi.com/privacy-policy

4. Where and How Long We Store Your Data

4.1 Data Storage Location

All user data is stored in Amazon Web Services (AWS) Frankfurt (eu-central-1) data centers. We use Amazon RDS PostgreSQL as our database service.

4.2 Retention Period

• Active accounts: Your data is retained as long as your account remains active
• Inactive accounts: Accounts that have not signed in for 2 years are automatically deleted
• Deleted accounts: When you delete your account, your personal data is permanently deleted within 30 days (including backups)
• Anonymous statistics: Anonymous aggregate statistics may be retained after deletion (contains no personal information)

5. Your Rights

Under GDPR (Europe) and KVKK (Turkey), you have the following rights:

• Right of access: Learn what data we process about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure ("right to be forgotten"): Request deletion of your data
• Right to restriction of processing: Limit how your data is processed
• Right to data portability: Receive your data in a machine-readable format
• Right to object: Object to data processing
• Right to withdraw consent (advertising tracking): You may revoke ATT permission on iOS via Settings → Privacy & Security → Tracking, or reset/delete your advertising ID on Android at any time

How to Delete Your Account

You can delete your account in three ways:

1. In-app: Profile page → Account Settings → Delete Account
2. Web: https://scorehunter.app/delete-account
3. Email: Send a request to the contact address below

6. Children's Privacy

ScoreHunter is not intended for users under the age of 13. We do not knowingly collect personal data from children under 13. If we become aware that we have collected personal data from a child under 13, we will delete that data as soon as possible.

For users between 13 and 18, we recommend reviewing this Privacy Policy together with a parent or guardian. Advertising shown in the App is configured with non-personalized / family-safe settings for users who appear to be minors based on the date of birth provided.

Parents or guardians who believe their child is using the App can contact us.

7. Data Security

We take industry-standard security measures to protect your data:

• HTTPS encryption: All network traffic is encrypted using SSL/TLS
• Passwordless authentication: We do not store passwords; all sign-ins are handled via Apple and Google
• JWT-based session management: Sessions are managed with secure, temporary tokens
• Rate limiting: Authentication and sensitive endpoints are rate-limited per IP to prevent brute-force and abuse
• Access control: Database access is limited to authorized system accounts only
• Regular security updates: Our systems are kept up to date

However, please note that no method of transmission over the internet is 100% secure.

8. Advertising and Tracking

8.1 Advertising in the App

ScoreHunter is supported in part by advertising. The App displays ads through Google AdMob and additional networks via mediation (AppLovin, Liftoff/Vungle, IronSource, Unity Ads, Meta Audience Network, InMobi). See section 3.4 for the full partner list.

Ads may include banner, interstitial, and rewarded formats. Pro members may experience a reduced-ad or ad-free experience depending on the subscription tier.

8.2 App Tracking Transparency (iOS)

On iOS 14.5 and later, Apple requires us to ask for your permission before tracking you across apps and websites. The first time you launch the App you will see an App Tracking Transparency prompt:

• If you select "Allow", your IDFA may be shared with our advertising partners for personalized ads, attribution, and frequency capping.
• If you select "Ask App Not to Track", your IDFA is not collected. We use Apple's privacy-preserving SKAdNetwork framework for attribution, and ads you see will be non-personalized.

You can change your decision at any time in Settings → Privacy & Security → Tracking.

8.3 Android Advertising ID

On Android, your Google Advertising ID (GAID) may be used by our advertising partners. You can reset or delete your advertising ID at any time via Settings → Google → Ads. When deleted, ads will be non-personalized.

8.4 Cookies

The ScoreHunter mobile application does not use browser cookies. Tracking on mobile is governed by the platform-level mechanisms described above, not cookies.

9. International Data Transfers

Your data may be processed outside of your home country (AWS Frankfurt — European Union, and the data centers of our advertising partners listed in section 3.4, which may be located outside the EU). These transfers comply with the security standards required by GDPR and KVKK.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Changes take effect once published on this page, and the "Last updated" date at the top will be refreshed. Significant changes will be announced via in-app notification.

11. Third-Party Content and Trademarks

ScoreHunter displays football match data, team names, league names, player names, and visual assets (such as team and league logos) sourced from our data provider, API-Football. These names, logos, and trademarks are the property of their respective owners — including football clubs, leagues, federations, and other rights holders.

ScoreHunter is not affiliated with, endorsed by, sponsored by, or in any way officially connected to any sports league, federation, club, organization, or competition featured in the App. All third-party names, logos, and trademarks are used solely for identification and descriptive purposes (nominative fair use), to help users recognize the matches and teams they wish to follow.

If you are a rights holder and believe that your trademark or copyrighted material is being used incorrectly within the App, please contact us at support@scorehunter.app. We will review the request and respond promptly, removing or replacing the content where appropriate.

12. Contact

For questions about this Privacy Policy or data processing requests:

Requests under GDPR or KVKK can be sent to the email address above or by mail. We will respond within 30 days.