Privacy Policy

Last updated: 2026-08-28. This document has been prepared for self-review. Formal legal review is planned before public launch (Phase 7).

1. Data controller

Scorence ("we", "us") operates the Scorencewebsite and related services. For privacy inquiries, contact privacy@scorence.app.

2. What data we collect

  • Waitlist email — when you submit the waitlist form.
  • Attribution metadata — optional UTM parameters and referrer URL submitted with the waitlist form.
  • Analytics data — if you consent to analytics cookies, we collect usage events via PostHog (EU region).
  • Technical logs — IP address (hashed for rate limiting), browser type, and error reports via Sentry (EU region) when errors occur.
  • Cookies — see Section 8 and our cookie banner.

3. Legal bases (GDPR Art. 6)

  • Consent (Art. 6(1)(a)) — waitlist signup: by submitting your email you consent to receive waitlist-related communications (including a confirmation email and, later, early-access notifications). You may withdraw consent at any time by contacting privacy@scorence.app.
  • Legitimate interest (Art. 6(1)(f)) — security and abuse prevention (rate limiting, hashed IP), service reliability (error monitoring), and aggregated analytics where permitted — balanced against your rights.
  • Contract / pre-contractual steps (Art. 6(1)(b)) — when you create an account or subscribe (future phases).

4. Waitlist communications

Current flow (Phase 0): single opt-in. When you submit the waitlist form, your email is stored immediately and we send a transactional confirmation email via Resend.

We do not send marketing broadcasts to the waitlist until we implement double opt-in confirmation (planned Phase 7). Until then, emails are limited to signup confirmation and direct replies to your inquiries.

To unsubscribe or exercise your rights, email privacy@scorence.app.

5. Subprocessors

We use the following service providers to operate Scorence:

  • Supabase — database and authentication (EU)
  • Resend — transactional email
  • PostHog — product analytics (EU region, consent-gated)
  • Sentry — error monitoring (EU region)
  • Vercel — hosting
  • OpenAI — AI analysis (server-side only)
  • LemonSqueezy — subscription billing (future)
  • Upstash — rate limiting (Redis)

Data Processing Agreements are maintained with subprocessors as required by GDPR.

6. Retention

  • Waitlist emails are retained until you withdraw consent or we delete your entry upon request.
  • Analytics events are retained per PostHog project settings (typically up to 12 months).
  • Account data (when available) is deleted upon self-service account deletion.

7. Your rights

If you are in the EEA/UK, you have the right to access, rectify, erase, restrict, port, and object to processing of your personal data, and to lodge a complaint with your supervisory authority. Contact privacy@scorence.app to exercise these rights.

8. Cookies

We use necessary cookies for session and security. Analytics cookies (PostHog) are set only after you opt in via our cookie banner. Marketing cookies are not used in the MVP. You can change preferences anytime via the cookie settings link in the footer.

9. Related documents

See our Terms of Service for service terms and disclaimers.

Scorence predictions are AI-generated statistical estimates based on historical and live football data. They are not guaranteed outcomes and should be treated as analytical insights. Football, like life, has surprises.