Privacy Policy

How we collect, use, and protect your personal information.

Your Privacy

At Scored ("Platform"), the privacy of our users is a genuine priority, not a formality. This Privacy Policy describes what information we collect, how we use it, and the limits we place on ourselves. If you have questions, contact us at [email protected].

By using the Platform, you consent to the practices described in this Privacy Policy. This Policy is incorporated into and subject to our Terms of Service.

What We Collect

We collect as little as possible. A full breakdown is available in Data we store about you. In summary:

At registration: a username, a bcrypt hash of your password, and a hash of your IP address. We do not collect your legal name, phone number, or any government-issued identifier.
Email address: optional. If provided, we store a hash of it - not the address itself. We do not verify email addresses. Because we store only the hash, we cannot email you unless you provide your address directly (for example, during a password reset). See Why password resets require your email address.
During use: a hash of your current IP address, overwritten each time it changes. Media uploads may result in an additional IP hash being stored.
Guests: we do not log any identifying information about users who are not logged in.
We do not collect: access logs, legal names, SMS data, or health information. Payment processing is handled entirely by our third-party payment processor. We do not store your credit card number, bank account details, or other financial credentials. We may retain limited transaction metadata such as subscription tier, billing date, and transaction identifiers for account management and dispute resolution purposes.

We may enable additional logging temporarily for debugging or security purposes. Such logging may include IP addresses and will be limited in scope and duration.

We store as little as possible because we do not want it.

How We Use It

We use the information we collect solely to operate and improve the Platform. We do not sell your data. We do not share it with third parties for marketing purposes. We do not use it to build advertising profiles.

Hashed IP addresses are used for spam prevention, abuse detection, and to assist community moderators with enforcement. Moderators cannot see your IP address. See IP bans.

Cookies

The Platform uses cookies to store user preferences such as theme selection. Cookies are not used to track you across third-party websites or to serve targeted advertising. You may disable cookies through your browser settings, though doing so may affect Platform functionality.

Payment Information

Subscription payments are processed by a third-party payment processor. We do not receive or store your full credit card number, CVV, or bank account details. Your payment information is subject to the privacy policy of the applicable payment processor, which we encourage you to review.

We may retain limited transaction metadata - such as subscription tier, renewal dates, transaction identifiers, and billing status - for account management, support, and dispute resolution purposes. This information is not shared with third parties except as necessary to process payments or comply with valid legal requests.

If you have a billing dispute, see How to request a subscription refund. Initiating a chargeback without contacting us first may result in account suspension.

Third Parties

Our Privacy Policy does not govern third-party websites, including sites linked to from the Platform. Third-party services we use - such as payment processors and infrastructure providers - operate under their own privacy policies. We do not control their data practices. You should review the privacy policies of any third-party service you interact with.

Our servers are primarily located in North America, with some located in Europe. See Server locations and infrastructure.

Data Retention and Deletion

When you delete your account, we delete your posts, comments, messages, email hash, password hash, and IP address hashes from our production systems. This deletion is permanent with respect to live data.

However, we cannot guarantee removal from encrypted backups. Backups are typically retained for up to 30 days, after which they are destroyed. See What happens to deleted content.

To request a copy of your data, email [email protected] or see How to request a copy of your account data.

Children's Information

The Platform does not knowingly collect personal information from children under the age of 13. Because we store hashed IP addresses and optionally hashed email addresses, and because hashed data may constitute personal information under applicable law, we treat all data collection with the same standard of minimization regardless of user age.

If you believe a child under 13 has created an account on the Platform, contact us immediately at [email protected] and we will make reasonable efforts to delete the associated data promptly.

Legal Requests

We comply with valid legal requests for information from law enforcement. For requests from U.S. authorities, we require valid legal process (such as a subpoena, court order, or warrant) appropriate to the information sought. For requests from non-U.S. authorities, we require use of established international legal frameworks such as a Mutual Legal Assistance Treaty (MLAT) or applicable CLOUD Act agreement.

We will notify affected users of legal requests where we are legally permitted to do so. We will push back on requests we believe to be overbroad, procedurally defective, or otherwise improper.

Legal requests should be directed to PATRIOTS, LLC (1144304) and served to our legal contact at [email protected]. See How we handle legal requests.

Our warrant canary status is published at Warrant canary.

Scope of This Policy

This Privacy Policy applies only to information collected through the Platform's online services. It does not apply to information collected offline or through channels other than the Platform.

California Residents

If you are a California resident, you may have rights under the California Consumer Privacy Act (CCPA), including the right to know what personal information we collect, the right to request deletion, and the right to opt out of the sale of personal information. We do not sell personal information. To exercise your rights, contact us at [email protected].

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page. Your continued use of the Platform following any update constitutes acceptance of the revised Policy. It is your responsibility to review this Policy periodically. If you do not agree to the revised Policy, your sole remedy is to discontinue use of the Platform.