Scorro
Privacy policy
Last updated: 21 September 2026
This English text is a translation, provided for convenience. In the event of any discrepancy between this version and the French one, the French version prevails and is the reference text.
Application publisher: Ouider Ismail, private individual (natural person).
Data controller: Ouider Ismail.
Contact: contact.scorro@gmail.com
Scorro is a mobile football-following application: scores, standings, news, predictions between friends and a discussion space (the “Fan Zone”).
1. The principle: the app works without an account
Following football requires no account. Scores, fixtures, standings, club pages, news: everything is available without signing up, and in that case no personal data is sent to our servers.
An account is only needed for the social features: commenting in the Fan Zone, making predictions, creating or joining a private league with friends.
2. The data we collect
2.1 If you create an account
| Data | Why | Legal basis (GDPR) |
|---|---|---|
| Email address | identify your account, sign you in, recover lost access | performance of the service |
| Password | sign you in. It is encrypted (hashed) by our provider: neither we nor they can read it | performance of the service |
| Username | identify you publicly in the Fan Zone and the leaderboards | performance of the service |
| Technical identifier | link your content to your account | performance of the service |
| Account creation date | account management | performance of the service |
2.2 What you post or generate
| Data | Visibility | Why |
|---|---|---|
| Comments (Fan Zone) | public, shown with your username | to keep the discussion alive |
| Predictions (predicted scores) | your pending predictions stay private; once the match has started they become visible on your public profile and in the leaderboards | leaderboards and fairness |
| Private leagues: name, invitation code, join date | visible to the league’s members | how leagues work |
| “Who will win” votes | aggregated | match statistics |
| Reports and blocks | not public | moderation and comfort of use |
| “Likes” on “On this day” memories | only the total count is shown; who liked what is never published | to know which memories interest you |
2.3 Comment moderation
You can report a comment and block a member: their messages then disappear from your view. Reports and moderation decisions are recorded in a moderation log, together with the content concerned, your identifier and the reason, for the purpose of fighting abuse.
Automated analysis before publication. Every comment is submitted to an automated analysis service (OpenAI, United States) that detects objectionable content, when that service is reachable. Only the text of the comment is transmitted — not your email address, not your identifier. A comment flagged by this analysis is not published.
Usernames go through the same analysis. When you choose or change your username, it is sent to the same service, for the same reason: it is shown on every one of your comments. A flagged username is refused, and you can choose another one. Nothing else accompanies that request — not your email address, not your account identifier.
⚠️ No decision is made about your account by this analysis: it applies to a piece of text, not to a person. Blocking an account remains a human decision. If a comment is refused wrongly, write to us — the address is in the legal notice.
Retention: 12 months at most, then automatic deletion. Twelve months correspond to a full sporting season, without keeping objectionable content attributed to a person indefinitely. This log is deleted along with your account if you delete it before that period.
2.4 What stays on your phone and is never sent
This information is stored only in your device’s memory and disappears if you uninstall the application:
followed players · light/dark theme and colour · text size · time zone · country · hidden competitions · created line-ups · home screen sorting.
One exception, and only if you enable notifications: your favourite teams, those whose alerts you have muted and your device’s language are then sent to our servers, because a notification comes from our servers: they need to know what to send you, and which language to write it in. See section 2.7.
2.5 Notifications
If you enable notifications, your phone receives a notification identifier from Apple or Google, and we keep it. It designates a device, not a person: it contains neither your name nor your email address, and it does not allow us to identify you.
You do not need an account to receive notifications. The application can be read entirely without signing up, and so can match alerts.
Notifications are off by default. Until you turn them on yourself, no identifier is requested from Apple or Google, and nothing is sent to our servers.
You can turn them off at any time, in the application: Settings › Notifications. Your device’s identifier and the preferences attached to it are then deleted from our servers, and we stop writing to you.
If you uninstall the application or change device without turning them off, the identifier stops being valid on our first delivery attempt, and we permanently stop writing to you.
2.6 What we do not collect
We do not collect your GPS location, your contacts, your photos, your address book, or any advertising identifier, and we do not build advertising profiles.
2.7 Your favourite teams, when notifications are enabled
So that we only send you the alerts you asked for, our servers keep the list of the teams you follow and those whose alerts you have muted. Without that list, we could only send an identical alert to everyone.
Our servers also keep your device’s language, so that we write to you in that language. The text of a notification is written at sending time, by our servers: the application is closed at that moment and cannot translate it itself.
That list is attached to your device’s notification identifier, not to an account — so it also works without signing up. If you use two devices, each has its own settings.
It is kept for as long as the notification identifier, and no longer. If you turn notifications off in the application, the identifier and the list are deleted from our servers. If you uninstall the application or change device, the identifier stops being valid and we stop writing to you.
That list is used only to decide which notifications to send you. It is neither sold, nor shared, nor used for advertising, and we do not combine it with any other data.
3. Where your data is stored
Your account and all your content are hosted in the European Union, in Ireland.
They are stored with Supabase, on Amazon Web Services infrastructure, region eu-west-1 (Ireland): email address, hashed password, username, comments, predictions, leagues, votes, reports and blocks. None of this data leaves the European Union.
| Component | Role | Location | Data concerned |
|---|---|---|---|
| Supabase (AWS) | account + all content | 🇮🇪 Ireland, EU | email, username, comments, predictions… |
| Relay server (Vercel) | protects our access keys to sports data | 🇫🇷 Paris, EU | no account data; the technical IP address of the request |
| News cache (Upstash) | avoids requesting the same news twice | 🇩🇪 Frankfurt, EU | no personal data — public news items, and an anti-abuse counter that identifies nobody (see the note below the table) |
Two exceptions, and they are limited:
- Expo, the technology the application is built on, is a US company. It receives technical operating data — never your content, your email address or your predictions.
- OpenAI, a US company, analyses the text of your comments and the username you choose before publication, to detect objectionable content. Nothing else is transmitted to it: not your email address, not your account identifier. See section 2.3.
4. Third-party services
| Service | Role | Where | What it receives from you |
|---|---|---|---|
| Supabase | accounts and content | 🇮🇪 Ireland, EU | email, hashed password, username, your content |
| Vercel | relay server | 🇫🇷 Paris, EU | no account data; the IP address of the request |
| Upstash | news cache and anti-abuse counter | 🇩🇪 Frankfurt, EU | nothing that identifies you — see the note below |
| Sportmonks | sports data | 🇳🇱 Netherlands, EU | nothing |
| football-data.org | sports data | EU | nothing |
| Press publishers (RSS feeds) | news headlines | varies | nothing — unless you open an article (see below) |
| GNews | fallback news source | varies | nothing |
| Expo | application technology | 🇺🇸 United States | technical operating data |
| Sentry | application error reports | 🇩🇪 Frankfurt, EU | the technical detail of an error: application version, device model, and the place in the code where it occurred — never your content, your email address or your identifier |
| OpenAI | automated moderation of comments and usernames | 🇺🇸 United States | the text of the comment and the chosen username — nothing else: no email, no account identifier |
Error reports, and what they do not contain
When the application hits an error, it sends a technical report to Sentry, a service hosted in Germany. That report serves to fix the problem, and nothing else.
It is cleaned before it leaves. Identifiers, email addresses and session tokens are removed from it automatically, including inside any web addresses it might contain. If that cleaning fails for any reason, the report is not sent at all — we would rather lose a piece of diagnostic information than let through something that concerns you.
We enable neither performance monitoring nor session tracking: Sentry receives no information about what you do in the application, only about what broke.
The anti-abuse counter, and why it does not identify you
To prevent a single device from saturating the service and making it unavailable for everyone, our relay server counts requests. That counting needs to tell devices apart, but not to know who you are.
The address of your request is therefore never recorded. It is transformed, at the very moment it arrives, into an irreversible fingerprint — a string of characters from which the original address cannot be recovered. It is that fingerprint, and only that, which is kept: for less than one hour, then automatically erased.
A direct consequence: we cannot know which pages a device has consulted, nor link this counting to your account, nor recover your address from what is kept — and we could not do so any more if we were asked to.
An important point: the sports providers never see you
Scorro never queries data providers from your phone: everything goes through our relay server. Sportmonks, football-data.org and the news feeds therefore receive neither your IP address nor any information about you — they only see our server.
The exception: if you open an article, you are taken to the publisher’s website, which then sees you like any other visitor. Their own privacy policy applies.
5. How long we keep your data
- Account and content: as long as your account exists.
- After account deletion: your personal data is deleted (see section 6).
- Notification identifier, favourite teams and language attached to it: kept as long as your device uses them. Turning notifications off in the application deletes them from our servers, with no procedure and no delay. If you uninstall the application without turning them off, the identifier becomes invalid on our first delivery attempt and it is marked out of service: we permanently stop using it. It is then deleted after 30 days. And a device that has not opened the application for 180 days has its identifier and its favourite teams deleted as well.
- Moderation log: 12 months at most, then automatic deletion — and deleted along with your account if that happens sooner.
- Private leagues: if you delete your account while you own a league, the league continues to exist and its ownership is transferred automatically to its longest-standing member, so as not to penalise the other participants. Your personal data is removed from it. If you were the only member, the league is deleted.
6. Your rights
Under the GDPR, you have a right of access, rectification, erasure, restriction, objection and portability regarding your data.
Deletion is directly available in the application: Settings → Delete my account. It erases your account and your personal data.
If you do not have an account, the only data we hold about you relates to notifications. To erase it: open Settings › Notifications and turn the main switch off. Your device’s identifier and the teams you follow are then deleted from our servers. No procedure, no delay, no account required.
For any other request, write to contact.scorro@gmail.com. You may also lodge a complaint with the CNIL, the French data protection authority (cnil.fr).
7. Minors
Scorro is not intended for children under 13. We do not knowingly collect data concerning them. If you are a legal guardian and believe your child has sent us data, write to us: we will delete it.
8. Security
Exchanges with our servers are encrypted (HTTPS). Passwords are hashed by our provider. Access to data is restricted at database level: each account can only read and modify what concerns it.
9. Changes
This policy may change along with the application. The date of the last update appears at the top of this page. In the event of a significant change, we will inform users in the application.