Privacy notice

The short version

You can read every score on this site without telling us anything. If you make an account we hold your email address and the username you picked. If you agreed to analytics, we also count page views and record how pages are used, and you can take that back at any time. The app does the same thing without asking first, and has a switch to turn it off. We do not run ads, we do not sell data, and we are not building a profile of you.

Who we are

Aon Scór is a small independent GAA site, not a company with a legal department. For anything in this notice, including any of the requests below, the contact is [email protected].

What we hold

• Your account, if you make one: your email address, the username you chose, and the date you signed up. If you sign in with Google or with Apple, they tell us your email address so we can match you to an account. If you asked Apple to hide it, what we get is the relay address Apple gives us, not your own.
• Your favourites: which teams, players and competitions you starred. Signed in, they are stored against your account. Signed out, they live in a cookie on your device and are read when a page loads.
• Notifications, if you turn them on in the app: your phone's push token (an address Apple or Google issues so a notification can reach the app), what you turned notifications on for, and your alert choices. If you're signed in, the token is linked to your account.
• Your match predictions: which side you picked. Signed out, that is tied to an anonymous ID in a cookie and to nothing else about you.
• Your achievements, if you're signed in: which ones you've unlocked and when, worked out from your predictions, your accepted suggestions and the hidden things you find. If you find one while signed out, a cookie holds it until you sign in on that browser.
• Your comments, if you post any: what you wrote and any GIF you added, when, and on which match, along with your votes on other comments, any reports you send, and when you agreed to the terms and community guidelines. Comments are public, shown with your username, county and badge. If we remove one or ban an account, we keep a record of that too.
• Analytics, only if you agreed: page views, rough location by country or county, device type, and how you arrived.
• Session recordings, only if you agreed: a reconstruction of on-screen actions like scrolling and taps. Anything typed into a form is masked before it leaves your browser, and the sign-in, account and admin pages are never recorded.
• Ordinary server logs: our host records requests to the site, including the IP address they came from, as part of serving and protecting it.

The cookies behind some of that are listed one by one in the cookie policy.

The Aon Scór app

The iPhone and Android app reads the same scores as this site and has no cookies. What it keeps on your device instead:

• Your sign-in session, if you sign in: the tokens Supabase issues, held in your device's secure storage. Signing out deletes them.
• Your favourites, if you starred any without signing in, in that same secure storage. Signed in, they are stored against your account instead, as on the site.
• An anonymous prediction ID, made the first time you vote on a match, so the same device can't vote twice. Signed out, it is tied to nothing else about you; signed in, your vote is stored against your account, as on the site.
• Your recent searches, the last few results you tapped. These never leave your device.
• Your analytics choice, and, while analytics is on, the anonymous ID PostHog uses to tell one visit from the next. Turning analytics off clears that ID and stops a new one being made.

The app talks to our servers on Vercel and to Supabase, which handles sign-in and pushes live score updates, so both see the requests it makes, including your IP address. If you turn notifications on, it also registers a push token with us and with Expo, which delivers the notifications through Apple or Google. It does not ask for your location, contacts or photos. Signing out clears your session, and deleting the app clears its storage, although iOS can keep items in the Keychain after an app is deleted. Anything stored against your account stays until you ask us to delete it.

The app does send us analytics, and unlike the site it does not ask first — it is on when you install it, and the switch to turn it off is under Profile, Privacy, cookies and about. What it sends is which screens you opened and a handful of taps: changing code, starring a team, voting on a match, tapping a search result, turning notifications on or off. It also records how screens get used, the same way the site does and with the same limits: anything typed is masked before it leaves your phone, images are replaced with grey boxes, and the account, sign-in and suggestion screens are never recorded at all. Signed in, this is linked to your account; signed out it is linked to nothing but the device. Turning the switch off stops both immediately and for good — the app sends nothing at all the next time you open it, not even to ask PostHog for its settings.

Why, and on what basis

Your account, your favourites, your predictions and your comments exist because you asked for them: the legal basis is the agreement between us to run the account you signed up for. On this site, analytics and session recording run on your consent and nothing else. In the app they run on our legitimate interest in knowing which screens are worth keeping, with the switch described above to stop them; nothing in the app is used to build a profile or shown to anyone outside us. Server logs and the anti-double-voting ID rest on the same narrow legitimate interest in keeping the site working and honest, which does not extend to tracking you.

Who else sees it

Seven companies process data on our instructions, and nobody else:

• Supabase holds the database and runs sign-in, on servers in Ireland.
• Vercel hosts the site and serves every page.
• Google runs Google Analytics, if you agreed to it, and handles sign-in if you chose to sign in with Google.
• Apple handles sign-in if you chose Sign in with Apple, and passes on a relay email address if you asked it to hide yours.
• Expo sends notifications to the app, through Apple's or Google's notification service for your phone.
• KLIPY runs the GIF search in the comment box. Your browser asks KLIPY directly, so it sees what you search for and your IP address, along with a scrambled ID that can't be turned back into your account.
• PostHog holds the session recordings and the app's analytics, on servers in Frankfurt.

We do not sell data, share it with advertisers, or hand it to anyone else unless the law actually requires it.

How long we keep it

Session recordings are deleted automatically after 30 days. Your account, and the favourites and predictions attached to it, are kept until you ask us to delete them, and so are a phone's push token and notification choices. A comment stays up until you delete it or we remove it. If you delete your account, your comments stay but show as Anonymous, with nothing linking them to you, and your votes go. The cookies have their own expiry dates, listed in the cookie policy.

What you can ask for

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to us processing it, or ask for it in a portable form. You can delete your account yourself from the account page, on the site or in the app; anything else is an email.

Turning analytics and recording off needs no email at all: click Cookie settings in the footer of any page, or, in the app, the Analytics switch under Profile, Privacy, cookies and about. Either takes effect immediately.

If you are unhappy

Tell us first and we will try to sort it. You also have the right to complain to the Irish Data Protection Commission at dataprotection.ie, without going through us first.

Changes

If what we collect changes, this page is updated before the change goes live, and the date at the top changes with it.