Privacy Policy

TallyPally ("we", "us") is a darts scoring app operated from Finland. We take your privacy seriously and handle your data in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection law.

This policy explains what data we collect, why, and what your rights are. We've kept it in plain language.

1. Data Controller

The data controller is TallyPally, operated by Aku Nikkola.

Contact: aku@tallypally.app

2. What We Collect

Account data

• Email address
• Password (stored as a secure hash — we never see or store your actual password)
• Display name

Player profile (optional)

• Player name
• Profile picture
• Club affiliation, entrance song, favorite player, darts model

Game data

• Match results, scores, and throw history
• ELO ratings (overall, 301, 501)
• Win/loss records and statistics (averages, 180s, checkouts, etc.)
• Tournament participation and results
• Live match state during gameplay

Club data

• Club name, description, and logo
• Your role within clubs (owner, admin, or member)

Remote matches (camera and voice)

• Your dartboard camera picture and microphone audio, but only while you have switched the camera or microphone on yourself. They are passed on in real time to your opponent and to members of your club who watch the match. Video and audio are never recorded or stored.
• Connection details during the match: connection state and quality, device and browser type, and errors. We use them to find out why a connection failed. They contain no video or audio and are deleted after 30 days.
• The camera phone's pairing code and a random device identifier, so the camera phone connects to the right match. The code expires, and the records are deleted within two days.

Technical data

• Authentication tokens (stored in your browser)
• Language preference
• Currently selected club

3. What We Don't Collect

We do not use any analytics, tracking, or advertising services. We do not track your location, your device fingerprint, or your browsing habits. There are no third-party trackers on TallyPally.

4. Why We Process Your Data

5. Third-Party Services

We use a small number of trusted services to run TallyPally:

We do not sell, rent, or share your personal data with anyone else.

6. Browser Storage

TallyPally uses your browser's local storage (not cookies) to keep you logged in and to remember your preferences. Specifically:

• talli-auth-token — Your login session
• talli-remember-me — Whether to stay logged in
• talli-current-club — Your selected club
• talli-language — Language preference (fi/en)
• tp-device-id, tp-camera-code — Pairing the camera phone for a remote match
• pendingRemoteInvite — A remote match invite you opened, until you log in

If you choose not to stay logged in, session data is stored in sessionStorage instead and is cleared when you close your browser. As a PWA, the app also caches static files for faster loading.

7. Data Visibility

TallyPally is a social scoring app. Some of your data is visible to other members of your clubs:

• Your player name, profile picture, and player profile details
• Match results, statistics, and ELO ratings
• Tournament participation
• Live matches in progress (visible to spectators in your club)
• In a remote match, your dartboard camera and microphone while they are on: your opponent and club members watching the match (spectators see the video but do not hear the audio)
• Remote matches ended without a result are shown in both players' profiles

Your email address is not visible to other users.

8. Data Retention

We keep your data for as long as your account exists. During the closed beta, data may also be reset or migrated as part of development (see our Terms of Service).

If you request account deletion, we will delete your personal data within 30 days. Some anonymized, aggregated data (such as match results where your identity is removed) may be retained.

9. Your Rights

Under the GDPR, you have the right to:

• Access — Request a copy of the personal data we hold about you.
• Correction — Ask us to correct inaccurate data. You can also update most information directly in the app.
• Deletion — Request that we delete your account and personal data.
• Data portability — Receive your data in a portable format.
• Restriction — Ask us to limit how we process your data.
• Objection — Object to processing based on legitimate interest.

To exercise any of these rights, email us at aku@tallypally.app. We will respond within 30 days.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) if you believe your data has been mishandled.

10. Children's Privacy

TallyPally is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, please contact us and we will delete it promptly.

11. International Transfers

Your data is stored within the EU (Supabase EU region). Email delivery through Resend may involve servers outside the EU, but only your email address is shared for the purpose of delivering transactional emails, covered by standard contractual clauses.

12. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we'll notify you through the app or by email. The "Effective" date at the top will always reflect the latest version.

13. Contact

For any privacy-related questions or requests, contact us at aku@tallypally.app