Privacy Policy

Who we are

BantaScores is a free, points-only football prediction game for groups of friends. We never handle money, take bets or show betting odds.

BantaScores is operated by Kris Buddle, an individual based in Guernsey, Channel Islands. Kris Buddle is the controller responsible for your personal information. In this policy, “we”, “us” and “BantaScores” mean Kris Buddle as the operator of the service. Contact us at support@bantascores.com.

We handle personal information in line with the Data Protection (Bailiwick of Guernsey) Law, 2017. Where you live in the UK or the European Union, you also have the rights those laws give you.

Information you give us

• Account details: your email address, a password and your display name. Your password is stored securely by our sign-in provider; we never see it in plain text. If you use “Forgot password?”, we email a one-time reset link to your address.
• Game activity: the groups you create or join, your daily picks and selections, points, group table positions and group settings if you are an admin.
• Group chat: messages you post in group chats. Other members of that group can read them.
• Preferences: favourite teams and leagues, and which alerts you have switched on (goals, red cards, chat).
• Support messages: anything you send us by email.

Your display name, picks (normally after kick-off) and points are visible to other members of groups you join.

Information collected automatically

• Sign-in session: a sign-in token is kept on your device so you stay signed in. We do not use advertising or tracking cookies.
• Notification address: if you allow alerts, your browser or phone gives us a push address so we can send them. We store it against your account until you turn alerts off or sign out of that device.
• Club game progress: the Club board game saves its progress only on your device; it is not sent to us.
• Technical logs: our hosting keeps short-lived server logs (such as request times and errors) to keep the service secure and working.

Website visitor analytics

On our website we use Lovable’s visitor analytics to understand how the site is used. It uses no cookies, stores nothing on your device, does not keep IP addresses and does not identify you. It records the pages visited, where visitors came from, their country, browser, operating system and device type, how long they stay, how fast pages load, errors, and which buttons and links are clicked. Detailed data is kept for 90 days and daily summaries for a year. These are recorded for every visitor, without cookies and without identifying anyone.

Lovable collects this data for us. Lovable’s privacy policy explains how it handles it.

Live sports data

Fixtures, live scores, line-ups, tables and player statistics come from our sports data provider, Sportmonks. Our servers request this data directly; none of your personal information is sent to Sportmonks. Football news headlines come from public feeds published by BBC Sport, The Guardian and Sky Sports. Opening a headline takes you to that publisher’s own site, where their privacy policy applies.

How we use your information

• To create and run your account and sign you in.
• To run the game: record picks, lock them at kick-off, score them and show group tables and chat.
• To send the alerts you have chosen.
• To keep the service secure, prevent abuse and fix problems.
• To reply to support requests.

We rely on providing the service you asked for (contract) for account and game data, your consent for notifications (and, when introduced, personalised ads), and our legitimate interests for security and service improvement. We do not sell your personal information.

Who we share it with

We only share information with providers that help us run BantaScores, under their own security and privacy terms:

• Lovable (Lovable Cloud): hosting, database, sign-in and website analytics.
• Push services: alerts are delivered through your browser’s or phone’s notification service (for example Apple, Google or Mozilla). They receive the alert content and push address, not your account details.
• Google Fonts: our typefaces load from Google, which receives your device’s IP address when fonts are downloaded.
• Authorities, where the law requires it.

Planned features

The following are being prepared for our phone apps and are not active yet. We will update this policy and ask for any permission needed before they go live.

• Native phone notifications: alerts in the iPhone and Android apps will use Apple Push Notification service and Google Firebase Cloud Messaging. Each phone’s notification token will be stored against your account.
• Advertising: we plan to show banner ads through Google AdMob. AdMob may use your device’s advertising identifier, IP address and general location to serve and measure ads. On iPhone we will ask permission before any tracking (App Tracking Transparency), and in the UK and EU we will ask for consent before personalised ads; you can refuse and still use the app with non-personalised ads. Gambling ads will be blocked.
• Additional sign-in options: we may add Sign in with Google or Sign in with Apple, which would share your name and email address with us from that provider.

How long we keep it

We keep your account and game information while your account is open. When you delete your account in the app or on the website (Profile → Delete account), we immediately and permanently delete your sign-in details, email address, display name, picks, points, group memberships, chat messages, favourites, alert settings and notification addresses. If you ask us by email instead, we do the same within 30 days.

Groups you were in carry on for their other members. If you were a group’s only admin, admin passes to the longest-standing member; groups with no other members are deleted. Short-lived server logs and routine backups may hold copies for a limited time until they expire.

Your rights and choices

• Access, correct or download a copy of your information.
• Delete your account and its data at any time from Profile → Delete account.
• Object to or restrict some uses, and withdraw consent at any time.
• Turn alerts off in your profile or your device settings.
• Complain to the Office of the Data Protection Authority in Guernsey (odpa.gg), or to your local data protection authority, such as the Information Commissioner’s Office (ico.org.uk) in the UK.

You can delete your account yourself in the app. For any other request, email support@bantascores.com from the email address on your account. See Support for how to delete your account.

Security

Information is sent over encrypted connections, and database access rules make sure players only see what the game allows, such as hiding picks until kick-off unless your group admin allows earlier viewing. No system is perfectly secure, so please use a unique password.

Children

BantaScores is not intended for children under 13 and we do not knowingly collect their information. If you believe a child has an account, contact us and we will delete it.

International transfers

BantaScores is run from Guernsey, and our providers may process information outside the Bailiwick of Guernsey, including in the UK, the European Union and the United States. Where information goes to a country without equivalent protection, we rely on safeguards recognised under Guernsey data protection law, such as standard contractual clauses.

Changes to this policy

We will update this page when our practices change, and tell you in the app about significant changes.