Privacy Policy

Effective: February 9, 2025

TallyPally ("we", "us") is a darts scoring app operated from Finland. We take your privacy seriously and handle your data in accordance with the EU General Data Protection Regulation (GDPR) and Finnish data protection law.

This policy explains what data we collect, why, and what your rights are. We've kept it in plain language.

1. Data Controller

The data controller is TallyPally, operated by Aku Nikkola.

Contact: aku@tallypally.app

2. What We Collect

Account data

  • Email address
  • Password (stored as a secure hash — we never see or store your actual password)
  • Display name

Player profile (optional)

  • Player name
  • Profile picture
  • Club affiliation, entrance song, favorite player, darts model

Game data

  • Match results, scores, and throw history
  • ELO ratings (overall, 301, 501)
  • Win/loss records and statistics (averages, 180s, checkouts, etc.)
  • Tournament participation and results
  • Live match state during gameplay

Club data

  • Club name, description, and logo
  • Your role within clubs (owner, admin, or member)

Technical data

  • Authentication tokens (stored in your browser)
  • Language preference
  • Currently selected club

3. What We Don't Collect

We do not use any analytics, tracking, or advertising services. We do not track your location, your device fingerprint, or your browsing habits. There are no third-party trackers on TallyPally.

4. Why We Process Your Data

PurposeLegal basis
Providing the service (accounts, matches, clubs)Contract performance
Sending transactional emails (verification, password reset, club invitations)Contract performance
Calculating rankings and statisticsLegitimate interest
Improving and maintaining the serviceLegitimate interest

5. Third-Party Services

We use a small number of trusted services to run TallyPally:

Supabase

Our backend infrastructure — handles the database, authentication, real-time features, and file storage (profile pictures). Data is stored on Supabase's servers within the EU.

Resend

Email delivery service used for sending account verification, password reset, and club invitation emails. Receives email addresses for delivery purposes only.

We do not sell, rent, or share your personal data with anyone else.

6. Browser Storage

TallyPally uses your browser's local storage (not cookies) to keep you logged in and to remember your preferences. Specifically:

  • talli-auth-tokenYour login session
  • talli-remember-meWhether to stay logged in
  • talli-current-clubYour selected club
  • talli-languageLanguage preference (fi/en)

If you choose not to stay logged in, session data is stored in sessionStorage instead and is cleared when you close your browser. As a PWA, the app also caches static files for faster loading.

7. Data Visibility

TallyPally is a social scoring app. Some of your data is visible to other members of your clubs:

  • Your player name, profile picture, and player profile details
  • Match results, statistics, and ELO ratings
  • Tournament participation
  • Live matches in progress (visible to spectators in your club)

Your email address is not visible to other users.

8. Data Retention

We keep your data for as long as your account exists. During the closed beta, data may also be reset or migrated as part of development (see our Terms of Service).

If you request account deletion, we will delete your personal data within 30 days. Some anonymized, aggregated data (such as match results where your identity is removed) may be retained.

9. Your Rights

Under the GDPR, you have the right to:

  • AccessRequest a copy of the personal data we hold about you.
  • CorrectionAsk us to correct inaccurate data. You can also update most information directly in the app.
  • DeletionRequest that we delete your account and personal data.
  • Data portabilityReceive your data in a portable format.
  • RestrictionAsk us to limit how we process your data.
  • ObjectionObject to processing based on legitimate interest.

To exercise any of these rights, email us at aku@tallypally.app. We will respond within 30 days.

You also have the right to lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi) if you believe your data has been mishandled.

10. Children's Privacy

TallyPally is not intended for children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has created an account, please contact us and we will delete it promptly.

11. International Transfers

Your data is stored within the EU (Supabase EU region). Email delivery through Resend may involve servers outside the EU, but only your email address is shared for the purpose of delivering transactional emails, covered by standard contractual clauses.

12. Changes to This Policy

We may update this privacy policy from time to time. If we make material changes, we'll notify you through the app or by email. The "Effective" date at the top will always reflect the latest version.

13. Contact

For any privacy-related questions or requests, contact us at aku@tallypally.app