Privacy notice

The short version

You can read every score on this site without telling us anything. If you make an account we hold your email address and the username you picked. If you agreed to analytics, we also count page views and record how pages are used, and you can take that back at any time. We do not run ads, we do not sell data, and we are not building a profile of you.

Who we are

Aon Scór is a small independent GAA site, not a company with a legal department. For anything in this notice, including any of the requests below, the contact is [email protected].

What we hold

• Your account, if you make one: your email address, the username you chose, and the date you signed up. If you sign in with Google, Google tells us your email address so we can match you to an account.
• Your favourites: which teams, players and competitions you starred. Signed in, they are stored against your account. Signed out, they live in a cookie on your device and are read when a page loads.
• Your match predictions: which side you picked. Signed out, that is tied to an anonymous ID in a cookie and to nothing else about you.
• Analytics, only if you agreed: page views, rough location by country or county, device type, and how you arrived.
• Session recordings, only if you agreed: a reconstruction of on-screen actions like scrolling and taps. Anything typed into a form is masked before it leaves your browser, and the sign-in, account and admin pages are never recorded.
• Ordinary server logs: our host records requests to the site, including the IP address they came from, as part of serving and protecting it.

The cookies behind some of that are listed one by one in the cookie policy.

Why, and on what basis

Your account, your favourites and your predictions exist because you asked for them: the legal basis is the agreement between us to run the account you signed up for. Analytics and session recording run on your consent, and nothing else. Server logs and the anti-double-voting ID rest on our legitimate interest in keeping the site working and honest, which is a narrow interest and does not extend to tracking you.

Who else sees it

Four companies process data on our instructions, and nobody else:

• Supabase holds the database and runs sign-in, on servers in Ireland.
• Vercel hosts the site and serves every page.
• Google runs Google Analytics, if you agreed to it, and handles sign-in if you chose to sign in with Google.
• PostHog holds the session recordings, if you agreed to them, on servers in Frankfurt.

We do not sell data, share it with advertisers, or hand it to anyone else unless the law actually requires it.

How long we keep it

Session recordings are deleted automatically after 30 days. Your account, and the favourites and predictions attached to it, are kept until you ask us to delete them. The cookies have their own expiry dates, listed in the cookie policy.

What you can ask for

You can ask for a copy of what we hold about you, ask us to correct it, ask us to delete it, object to us processing it, or ask for it in a portable form. There is no delete button on the account page yet, so account deletion is an email for now, and we will confirm when it is done.

Withdrawing consent to analytics and recording needs no email at all: click Cookie settings in the footer of any page. It takes effect immediately.

If you are unhappy

Tell us first and we will try to sort it. You also have the right to complain to the Irish Data Protection Commission at dataprotection.ie, without going through us first.

Changes

If what we collect changes, this page is updated before the change goes live, and the date at the top changes with it.