Privacy Policy
Effective Date: September 11, 2026 Product: BuffScore (buffscore.us)
BuffScore is a live sports score app covering the NFL, NBA, Premier League, UEFA Champions League and LaLiga. This policy describes exactly what the app collects, why, and what it does not collect.
1. You do not need an account
BuffScore works fully without signing in. Scores, tables, headlines and match detail are all available to anyone who opens the app, with no sign-up and no email address.
An account is optional and exists for two things: keeping the teams you follow when you change phone, and sending you a notification when those teams play.
2. What we collect
If you do not sign in:
- A local identifier. A random id generated on your phone on first launch, used to group your settings. It is not derived from any hardware identifier and identifies an install, not a person.
- Cached scores. A copy of the last scores you viewed, stored on your device so the app opens instantly.
Both stay on your device. Nothing else leaves it except the request for the scores themselves.
If you choose to sign in:
- Your email address, or the Google account identifier if you use Google Sign-In. This is how we recognise your account on a new device.
- The teams you follow, so they appear on any phone you sign in to.
- A push notification token, issued by Google's Firebase Cloud Messaging, used only to deliver match alerts to your device.
If you enable notifications:
- Your notification settings, including your timezone, which is used solely to work out when your quiet hours fall.
3. What we do not collect
- No analytics. There is no PostHog, Google Analytics, Firebase Analytics, or any other product telemetry in the app.
- No advertising. There are no ads and no advertising identifiers.
- No tracking across apps or websites. We do not build a profile of you.
- No location, contacts, photos, or device storage.
- No passwords. Signing in by email uses a one-time code, so there is no password to store or to lose.
- We do not sell or share personal data, with data brokers or anyone else.
4. Third parties
BuffScore sends data to three services, and only what each needs to do its job:
| Service | What it receives | Why | |---|---|---| | ESPN | Nothing about you — only the request for a scoreboard | Scores, tables, headlines | | Google Firebase Cloud Messaging | Your push token and the alert text | Delivering notifications | | Resend | Your email address and the sign-in code | Sending your sign-in code |
We are not affiliated with ESPN, the NFL, the NBA, the Premier League, LaLiga, UEFA, or any club or competition.
5. Retention and deletion
- Sign-in codes are stored as one-way hashes and are deleted or expired within ten minutes.
- Sign-in sessions are stored as one-way hashes and expire after 30 days.
- Cached scores expire automatically and can be cleared at any time from Settings → Clear cached data.
- Turning off notifications in Settings deletes the push token for that device immediately.
- To delete your account and everything attached to it, email
privacy@buffscore.usfrom the address you signed in with. We will delete your account, followed teams, notification settings and push tokens within 30 days.
6. Children
BuffScore is not directed at children under 13 and we do not knowingly collect personal information from them.
7. Your rights
Depending on where you live, you may have the right to access, correct, export or delete your personal data, and to object to its processing. Because the only personal data we hold is an email address, a list of teams, and notification settings, these requests are straightforward — email privacy@buffscore.us.
We do not sell or share personal information as those terms are defined under the CCPA/CPRA, so there is no opt-out to offer.
8. Changes
If this policy changes materially, the effective date above changes and the updated policy is published at the same address before the change takes effect.