# Privacy Policy — Cornhole League

**Last updated: 4 August 2026**

Cornhole League is an app for running a private, invite-only cornhole league.
This policy explains what it collects, why, and what you can do about it.

It is deliberately short, because the app does very little with your data: it
stores what you put in so your league can see it, and nothing else. There is no
advertising, no analytics, and nothing is sold or shared with third parties.

---

## Who is responsible

The app is operated by the league administrator who invited you. For questions
about your data, contact them, or email **tendybros@gmail.com**.

## What is collected

**Account details** — your name and email address, provided when you sign up
(or supplied by Google if you sign in with Google). Used to identify you to
other members of your league and to let you sign back in.

**Gameplay data** — match scores, ratings, RSVPs and, if your league scores
games live, the points you threw each round. This is the point of the app.

**Photos you post** — images you choose to upload to the Memories section,
along with any caption. Only members of your league can see them.

**Notification token** — if you turn on notifications, a device token from
Firebase Cloud Messaging so reminders can reach your phone. It identifies the
installation, not you personally.

**Appearance preference** — whether you chose light or dark mode. Stored only
on your device, never uploaded.

The app does **not** collect location, contacts, your device's photo library
beyond the specific images you pick, advertising identifiers, or any usage
analytics.

## Who can see it

**Only your league.** Data is scoped by league: members see their own league's
players, matches, events and photos, and nothing from any other league. This is
enforced on the server, not just in the app.

**Service providers.** The app runs on Google Firebase (Authentication,
Firestore, Storage, Cloud Messaging), which stores the data on Google's
infrastructure. Google acts as a processor. See Google's privacy policy at
<https://policies.google.com/privacy>.

Nothing is sold, rented, or shared with advertisers. There are no third-party
trackers in the app.

## How long it is kept

Gameplay data is kept for as long as your league exists, because league history
is the product — old seasons, records and awards are all computed from it.

Your account and photos are kept until you ask for them to be deleted.

## Your choices

**Notifications** can be turned off at any time in Profile, or in your device's
system settings. The app keeps working without them.

**Photos** you posted can be deleted by you, from the Memories screen.

**Your account and personal data** can be deleted on request. Email
**tendybros@gmail.com** and it will be removed within 30 days. Note that match
results you took part in may remain in your league's history, since deleting
them would change other players' records and ratings; on request your name can
be anonymised in those records instead.

**Your data can be exported** on request in a machine-readable format.

If you are in the UK or EU, you have rights of access, correction, erasure,
restriction and portability under the UK GDPR / GDPR, and the right to complain
to your data protection authority. If you are in California, you have rights of
access and deletion under the CCPA. The paragraphs above are how to exercise
them.

## Children

The app is not directed at children under 13 and does not knowingly collect
their data. Leagues are invite-only. If a child has been added to a league and
you want their data removed, email the address above.

## Security

Data is transmitted over HTTPS and stored by Firebase with encryption at rest.
Access is controlled by server-side security rules that scope every record to a
single league. No system is perfectly secure, but the app collects little enough
that the exposure is small.

## Changes

If this policy changes materially, the date at the top will change and league
administrators will be notified. Continuing to use the app after a change means
you accept the updated policy.

## Contact

**tendybros@gmail.com**