ScoreKeep Privacy Policy

Last updated: 15 October 2026

ScoreKeep is a score-keeping app run by AI Eh By Solutions, a Canadian company ("we", "us"). This policy explains what personal information ScoreKeep collects, why, who it is shared with, how long it is kept, the risks, and your choices, in line with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). Our privacy contact is accountable for it (see Contact below).

What we collect

  • Account information: when you sign in with Google, with Apple (when offered) or with email and password, we receive your email address, your name (if your Google or Apple account provides one), the sign-in methods on your account and a unique account ID. If you use Apple's "Hide My Email", we receive Apple's relay address, not your real one. We never receive your Google or Apple password. An email password is checked and stored by Google's Firebase Authentication service in hashed form; ScoreKeep's own servers pass it through when you sign in or change it and never store it.
  • Account status: your role (user or admin), whether your account is approved, when it was created and when you last used ScoreKeep.
  • Game data: player names, games, scores and payment checklists that you or others at your table enter.
  • Notifications (only if you turn them on): the push address your browser gives us for this device (a web address at your browser's push service and two encryption keys), which notification types you chose, your quiet hours and time zone, and when you turned notifications on.
  • Contact and support forms (on our website): if you write to us through the contact or support form at scorekeep.ai-eh-by.ca, we receive the name, email address, topic and message you enter. The website itself does not store them: they are emailed to our support inbox (Google Workspace) so we can answer you. The website uses no cookies and no analytics.
  • Technical data: our hosting provider records request logs, which include your IP address, browser type and the time of each request. ScoreKeep's own server logs also record the IP address of a client it slows down for too many sign-in attempts. To slow down password guessing, our server counts recent sign-in attempts by IP address (an IPv6 address by its network, the first half of the address) and by email address. It keeps only a keyed hash of each (HMAC-SHA256 with a secret key), never the address itself, and keeps each attempt for at most one hour. So that a server restart does not reset the counts, a copy is saved to our storage at most once a minute, replacing the previous copy; storage keeps each replaced copy for 7 days for recovery and then deletes it. These copies are not part of our backups.

We only ask Google for your basic profile and email address (the openid, email and profile permissions), and Apple for your name and email. We do not use advertising or tracking cookies or analytics. ScoreKeep uses only the cookies it needs to keep you signed in and to protect against cross-site request forgery.

Notifications

Notifications are off until you turn them on in ScoreKeep; turning them on is a separate choice from signing in or agreeing to these terms. ScoreKeep only sends notifications about your account: that your account was approved and, for administrators, that someone is waiting for approval. They never contain scores, money or names, because they can show on a locked screen. To deliver them, ScoreKeep sends the encrypted notification to your browser's push service, which passes it to your device: Apple (Safari, iPhone and iPad), Google (Chrome, Android), Mozilla (Firefox) or Microsoft (Edge). You can turn each type off, set quiet hours, or turn notifications off in your browser at any time. Signing out of a device removes its push address; signing out everywhere or deleting your account removes them all, and a push address not used for 60 days is deleted.

Why we collect it

  • To sign you in, keep you signed in, send account emails (verification, password reset, email change) and let an administrator approve who can use ScoreKeep.
  • To store and show your games and scores across your devices.
  • To answer what you send us through the contact and support forms.
  • To keep the service secure, prevent abuse and fix problems.

We do not sell your information and do not use it for marketing. If we ever add optional analytics or marketing, it will be a separate choice that is off unless you turn it on.

Who we share it with

  • Google: Google Cloud hosts ScoreKeep in Montréal, Canada (region northamerica-northeast1), where game data and account records are stored. Google's Firebase Authentication service handles sign-in and account emails and processes account information outside Canada, including in the United States. Messages from our website's forms are kept in Google Workspace email, which may also store them outside Canada.
  • Apple: if you sign in with Apple, Apple confirms your identity to us.
  • People at your table: game data, including player names and scores, is visible to other approved users of the same ScoreKeep service. Administrators can see account email addresses and names to approve accounts.
  • We may disclose information if the law requires it.

How long we keep it

  • Account information: while your account exists. When you delete your account, we delete your account record and your Firebase sign-in account straight away.
  • Backups: ScoreKeep backs up its data once a day. A deleted account record can remain in those backups, and in Google Cloud's recovery copies of them, for up to 90 days, after which it is gone.
  • Game data that others at your table share (such as games you played in) stays for their records after you leave. Ask us and we will rename your player.
  • Messages from the contact and support forms: in our support inbox for as long as we need them to help you and keep a record of the conversation; ask us and we will delete them.
  • Hosting request logs and ScoreKeep's server logs: 30 days.
  • Sign-in attempt counts (keyed hashes only): up to one hour; replaced saved copies of them up to 7 more days.

Risks

Information processed outside Canada (by Firebase Authentication) is subject to the laws of the countries where it is processed, and may be accessible to courts and authorities there. Any online service can be breached; we limit what we collect to reduce the harm if that happens.

Your choices and rights

  • Delete your account: in ScoreKeep, open Account and choose Delete account, or use /delete-account, which also works if you can't sign in.
  • Sign-in methods and email: the Account screen lets you add or remove Google, Apple or a password, change your password and change your email address. Changes sign you out on your other devices.
  • Sign out everywhere: the Account screen ends every signed-in session at once.
  • Access, export and correction: ask us for a copy of the personal information we hold about you (we send it in a common, machine-readable format), or ask us to correct it. We answer within 30 days.
  • You can withdraw consent at any time by deleting your account; ScoreKeep cannot be used without signing in.

Security

Sign-in sessions use secure, HTTP-only cookies that last at most 14 days, every change is protected against cross-site requests, and data is sent over encrypted connections. New accounts need an administrator's approval. If a breach creates a real risk of significant harm to you, we will tell you and the Office of the Privacy Commissioner of Canada as the law requires.

Children

ScoreKeep is not meant for children under 13, and we do not knowingly collect their information.

Contact

Questions, requests or complaints: AI Eh By Solutions, darryl.jackman@ai-eh-by.ca. If you are not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada (priv.gc.ca).

Changes

We will update this page when our practices change, show the new date at the top and, for significant changes, tell signed-in users in the app.