Privacy Policy

The data controller is the Operator of FIGHTSCORE.APP™. For any privacy request use the contact channel published on the app.

In Guest Mode, your fights, scorecards, notes and preferences are stored only in your browser's localStorage and identified by an anonymous device identifier generated on your device. This data is not transmitted to our servers. Clearing your browser data erases it permanently.

When you optionally sign in (Google or email), we process:

• account identifiers (email address, user ID);
• basic profile data from your OAuth provider (name, avatar) if you use Google;
• fights and scorecards you choose to sync to the cloud;
• technical metadata (timestamps, coarse device info) needed for security.

Legal bases: performance of the Service (Art. 6(1)(b) GDPR), your consent (Art. 6(1)(a) GDPR) and our legitimate interest in operating and securing the Service (Art. 6(1)(f) GDPR).

Cloud storage, authentication and database are provided by:

• Lovable Cloud / Supabase — EU region hosting (database, auth, storage);
• Google — only if you choose Google sign-in (OAuth);
• X / Twitter, WhatsApp — only when you actively click "Share" or "Contact"; content leaves the app to the platform you opened.

We use only strictly necessary storage: an authentication session cookie (when signed in) and localStorage keys for guest fights, UI state and one-time consent (fs.legal.ack.v1). We do not use advertising cookies, cross-site tracking pixels or third-party ad networks.

If analytics are enabled, only aggregated, non-identifying usage counters are collected to improve the Service. No behavioural profiling.

For Official Reports™ orders, payment data is handled by the payment processor named at checkout. We never store full card numbers.

Guest data lives on your device until you delete it. Registered account data is retained until you request deletion. Financial/tax records for paid services are retained for the period required by applicable law.

Data primarily stays in the EU. Where a sub-processor transfers data outside the EEA, it is covered by Standard Contractual Clauses or an adequacy decision.

Subject to conditions in GDPR, you have the right to:

• access your data and receive a copy;
• request correction of inaccurate data;
• request erasure ("right to be forgotten");
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time (without affecting prior lawful processing);
• lodge a complaint with a supervisory authority (in Poland: Prezes UODO).

The Service is not directed to children under 13 (or under the age of digital consent in your country). We do not knowingly collect personal data from children.

We apply reasonable technical and organisational measures (encryption in transit, database row-level security, least-privilege access). No system is 100% secure; we cannot guarantee absolute security.

We may update this Policy. The current version is always available at this URL with the date marked above.

See also our Terms of Use and Disclaimer.