Privacy Policy

1. What we collect

When you use Check Scoreboard, we collect:

• Account information — your name and email address from Google when you sign in with Google OAuth.
• Group and session data — the group names, player names, session dates, buy-in amounts, and cash-out amounts you enter.
• Phone numbers — only if a player voluntarily provides their phone number and gives explicit SMS consent.
• Photos — session photos you upload, stored in Cloudflare R2.
• Usage data — anonymous analytics via Vercel Analytics to understand which features are used.
• Error data — error reports via Sentry, with phone numbers automatically scrubbed before transmission.

2. SMS and TCPA compliance

Check Scoreboard sends SMS messages to notify players of their session results. We comply with the Telephone Consumer Protection Act (TCPA):

• SMS consent is always explicit and separate — never bundled with other agreements.
• Players must actively check a consent checkbox before providing their phone number.
• Players can opt out at any time by contacting their group administrator.
• We record the consent timestamp and IP address for each consent.
• Phone numbers are never displayed on public pages.
• Phone numbers are automatically redacted from all server logs and error reports.
• We do not share or sell phone numbers to third parties.
• Messages are sent only on session settlement (typically once per game night) and only to players with an active consent record.

3. How we use your data

We use your data to:

• Provide the session tracking and leaderboard features.
• Send SMS results to players who have opted in.
• Generate analytics and charts within your group.
• Improve the product via anonymous usage analytics.

We do not sell your data. We do not show ads.

4. Public group pages

If you make your group public, a read-only leaderboard page becomes accessible to anyone with the link. Public pages display:

• Player first names only (last names are never shown)
• Session results (net profit/loss) and leaderboard statistics

Public pages never display phone numbers, email addresses, last names, or any other personally identifying information beyond a player's chosen display name.

5. Data retention and deletion

Your data is retained as long as your account exists. You can export all your group data at any time from group settings. To request deletion of your account and all associated data, contact us at the email below.

6. Third-party services

We use the following third-party services:

• Convex — database and backend (convex.dev)
• Vercel — hosting and edge network
• Google OAuth — authentication
• Twilio — SMS delivery
• Cloudflare R2 — photo storage
• Sentry — error tracking (PII scrubbed)
• Vercel Analytics — anonymous usage analytics

7. Contact

For privacy questions, data deletion requests, or TCPA opt-out requests, contact us at: privacy@checkscoreboard.com