Privacy policy
Last updated May 26, 2026
scoremy.games is a free game scorekeeper. We don't require an account to play. If you do create one, we only use your email to send you sign-in links — we don't sell it, share it with advertisers, market to you, or pass it to any third party for their own use. We collect the minimum we need to make the app work.
What we collect
- Game data. The name of the game, the names of players you enter, the score events, and any rounds. This is needed to show the scoreboard. Games are kept indefinitely so you can revisit them by PIN later.
- Anonymous session cookie. When you join a game, we set a per-game cookie (
score_session_*) so we know which player you are on that game. It is not linked to anything outside that game. - Email address — only if you sign in. Optional. Used solely to send you a one-time magic-link to sign in. Used for nothing else. Stored in the
userstable, hashed for sign-in tokens. - Passkey credentials — only if you set one up. Optional. Public key material stored locally to let you sign in without a password. We never see your biometric data — that stays on your device.
- Telegram user id and chat id — only if you use the bot. Needed so the bot can find you across messages and so we can edit your scoreboard message in place. If you link your Telegram account to a scoremy.games account, the two are joined in our database.
What we do NOT do
- We do not sell your data to anyone, ever.
- We do not market to you. No newsletters, no promotional emails, no "we miss you" nudges.
- We do not run third-party advertising.
- We do not track you across other websites.
- We do not build a profile of you to share or rent out.
Third parties we use
To run the service we use a small number of third parties. Each one is named here so you know what's involved:
- Resend — sends magic-link sign-in emails. They process your email address only to deliver the message.
- Google Gemini — generates the post-game recap and the rotating "fun fact" card. Game stats (player names + scores) and the fun-fact prompt are sent to Google's API. No email addresses or personal identifiers are sent.
- Telegram — required if you use the bot or the in-Telegram mini app. Telegram's own privacy policy applies to anything that happens inside Telegram.
- Google Analytics 4 and Microsoft Clarity — production-only, anonymous usage analytics (page views, click heatmaps, session replays). Both honor Do Not Track and standard browser privacy controls. We do not link analytics events to your email or user id.
- DigitalOcean — hosts the MySQL database. Laravel Forge manages the web server.
Data retention
- Games and score events are kept indefinitely so you can find them again by PIN.
- Magic-link tokens are single-use and expire after 15 minutes. The row is consumed when you click the link.
- If you want your account or any specific game deleted, email scoremygames@akicreative.net and we'll handle it.
Your rights
You can request a copy of your data, ask us to delete it, or correct anything we have wrong — just email scoremygames@akicreative.net. We'll respond within a few days.
Changes
If we change this policy in a way that meaningfully affects how your data is handled, we'll update the "last updated" date at the top and, if you have an account, send you a note.
Contact
Run by AKI Creative. Questions? scoremygames@akicreative.net.