Privacy Policy
Last updated: 26 July 2026
This policy explains what personal data the 8Score mobile application and the website 8score.fr (together, the “Service”) process, why, and what your rights are. The data controller is the publisher identified in the Legal Mentions.
1. Data we collect
Account data: when you sign in with Apple or Google, we receive your name (or the pseudonym you choose to share), your email address (or Apple’s private relay address), and a technical account identifier. We never receive your Apple or Google password.
Game data: the games you create or join, meaning game and player names, scores, timestamps, and the edit history needed to sync and undo. Game data is shared with the other participants of the same game, which is the purpose of the Service.
Technical data: server logs (IP address, request metadata, error traces) generated when your device talks to our servers, kept for security and debugging.
Purchase data: if you buy 8Score Premium, Apple sends us the identifiers of your purchase — transaction identifiers, the product bought, the purchase date, and whether it was made in Apple’s test environment — so we can unlock the feature on your account and restore it on your other devices. We never receive your payment details: no card number, no billing address. Payment is handled entirely by Apple.
We do not collect your precise location, contacts, photos, or health data. The website 8score.fr sets no analytics or advertising cookies.
2. Why we process it (legal bases)
| Data | Purpose | Legal basis (GDPR) |
|---|---|---|
| Account data | Authenticate you, operate your account | Contract (art. 6(1)(b)) |
| Game data | Store and sync games between participants | Contract (art. 6(1)(b)) |
| Technical data | Security, abuse prevention, debugging | Legitimate interest (art. 6(1)(f)) |
| Purchase data | Unlock the premium features you bought and restore them on your devices | Contract (art. 6(1)(b)) |
3. No advertising, no tracking
The Service shows no advertising and performs no cross-app tracking. It contains no advertising or analytics SDK, and it never asks for App Tracking Transparency permission because it has nothing to track. This is a design decision, not a temporary state: 8Score is funded by a one-time purchase (see the Terms), not by advertising.
4. Who processes the data
We use the following processors to operate the Service:
- Railway Corp. (USA): hosts the backend servers and database (account and game data).
- Cloudflare, Inc. (USA): serves the website and fronts web traffic.
- Apple Inc. and Google LLC: sign-in providers (they process your authentication; see their own privacy policies).
- Apple Inc.: payment processor for App Store purchases. Apple handles the payment itself and sends us only the purchase identifiers described in section 1.
Transfers outside the EU rely on the EU–US Data Privacy Framework and/or Standard Contractual Clauses, as applicable to each provider. We do not sell personal data, and we share it with no one else except when legally required.
5. Retention
- Account data: kept while your account exists; deleted when you delete your account.
- Purchase data: kept while your account exists, so your purchase can be restored; deleted with your account.
- Game data: kept while the game exists; deleted when the game is deleted, or with the account of its last remaining participant.
- Technical logs: kept up to 12 months, then deleted.
Backups may persist for a limited additional period before being rotated out.
6. Your rights
Under the GDPR you have the right to access, rectify, erase, and receive a portable copy of your data, to restrict or object to certain processing, and to withdraw consent where processing is based on it. Exercise these rights via the contact in the Legal Mentions. Most of them are also available directly in the app (edit profile, delete games, delete account).
You may lodge a complaint with the French supervisory authority, the CNIL, or with the authority of your country of residence.
7. Children
The Service is not directed at children under 15. We do not knowingly collect personal data from children below the age of digital consent applicable in their country.
8. Changes to this policy
We will update this policy as the Service evolves. The “updated” date above always reflects the current version, and material changes will be announced in the app or on the website.