This is the whole of it. If something you find on the site is not described here, that is a defect, and the support address at the bottom is where to report it.
The data controller is RUGSME LIMITED (company no. 12888300), 568 Green Lanes, Haringey, London, England. Questions and requests go to info@scorefio.com.
Nothing about you. Pages are served without an account. Our server logs hold the request line and a hashed form of your IP address for a short time, for the rate limit and for finding faults. The hash cannot be turned back into the address.
One functional cookie called sf_anon: a random id, signed so it cannot be forged, that ties your saved scenarios to your browser. It holds no personal data and it is not used for advertising or tracking. Without it, the scenario you are building could not be continued on the next screen, so it is set the moment you start one. It lasts a year or until you clear it.
Your scenarios: the amount, the venue, the horizon, the tokens you ticked, the split, and which screen you reached, saved step by step so you can come back to an unfinished one. The database stores a hash of your cookie's id, never the id itself. A shared card shows the scenario and nothing about you.
The file and the report built from it, kept so the report's address keeps working. Reports are never indexed by search engines.
Your email address, and your scenarios attached to it. No name, no card details, no exchange keys, no wallet. Sign-in is by a link sent to your email; there is no password to store.
No advertising, no advertising cookies, no third-party trackers, no selling or sharing of data. Analytics, when enabled, count page views without a cookie and without a personal identifier.
Server logs: 30 days. Scenarios: until you delete them, or two years after they were last opened. Reports: as long as the site runs, unless you ask for one to be removed.
You can ask for a copy of what we hold about you, ask for it to be corrected, or ask for it to be deleted, by writing to the support address. When accounts exist, the account page does both without asking. We answer within a month. You can also complain to the Information Commissioner's Office at ico.org.uk.
The lawful basis for the cookie and the scenarios is that they are necessary to provide the service you asked for; for the hashed log line it is our legitimate interest in keeping the site up. Nothing is transferred outside the United Kingdom and the European Economic Area except to the transactional email provider named on this page once accounts exist.
Email from us, if you asked for it. On the sign-in screen there is a box, unticked, to receive the odd email about Scorefio — what changed, what pricing will be, what we found. A few a year, never daily. The lawful basis is your consent, given by ticking the box; we record when and where you gave it. It is separate from the sign-in link, which you get either way. Stop it any time from your account page; stopping is as easy as starting, and keeps the date you said yes so the record stays honest.