Privacy Policy

This Privacy Policy explains how ScoreSheet ("we," "us," "our") collects, uses, and protects your personal information when you use our website and purchase our products.

1. Information we collect

1.1 Information you provide directly

• Email address — collected at checkout by our payment processor so they can send your receipt and so we can identify your purchase if you contact us about it.
• Name (optional) — if you provide it at checkout for your receipt.
• Messages — if you contact us through the contact page or by email, we keep that correspondence.

1.2 Payment information

Payments are processed by Stripe. When you enter your card details at checkout, that information is collected and stored directly by Stripe — we do not see, store, or have access to your full card number, CVC, or expiry date. We receive only metadata from Stripe (such as the last 4 digits of the card, country, transaction ID, and success status) so we can identify your purchase.

1.3 Information collected automatically

• Usage data — pages visited, approximate location (country/region), device type, browser, and referral source. We collect this via standard web analytics tools.
• Cookies — small text files used to keep the site working and to measure traffic. See section 5.

2. How we use your information

We use the information we collect to:

• Process your payment and deliver your PDF through our Discord ticket system;
• Send you the receipt for your purchase;
• Notify you when an updated version of the Pack is available;
• Respond to customer support requests;
• Detect and prevent fraudulent transactions;
• Comply with legal obligations (e.g., tax and accounting records);
• Improve the website and the product based on aggregated usage data.

3. Legal bases for processing (GDPR)

If you are in the EU or EEA (including Ireland), we process your personal data under the following legal bases:

• Contract — to deliver the product you purchased;
• Legitimate interests — for analytics, fraud prevention, and improving our service;
• Legal obligation — to keep transaction records as required by tax law;
• Consent — for any optional marketing communications, which you can withdraw at any time.

4. Sharing your information

We do not sell your personal data. We share it only with the following categories of third parties, and only to the extent necessary:

• Stripe — to process payments (see Stripe's Privacy Policy);
• Discord — for our community-based delivery and support (see Discord's Privacy Policy);
• Hosting and analytics providers — to keep the site running and understand traffic;
• Legal authorities — if required by law, court order, or to protect our rights.

5. Cookies

We use cookies to keep the site functional and to measure visitor traffic. You can control cookies through your browser settings. Blocking cookies may affect some features of the site but will not prevent you from purchasing the Pack.

6. Data retention

We retain your purchase records (including your email and transaction metadata) for as long as is necessary to provide you with updates, to respond to refund requests, and to comply with our legal obligations — typically no longer than seven years. Support emails are kept for up to two years unless you request earlier deletion.

7. Data security

We use industry-standard safeguards to protect your data. Payment processing is handled by Stripe, which is PCI-DSS Level 1 certified. However, no method of transmission or storage on the internet is 100% secure, and we cannot guarantee absolute security.

8. International transfers

ScoreSheet is based in Ireland (an EU member state). Your data may be transferred to and processed in countries other than Ireland — including the United Kingdom and the United States — where our hosting, payment, and other service providers operate. Where such transfers occur outside the EU/EEA, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses or the service provider's certified data-transfer mechanisms (for example, the EU-US Data Privacy Framework).

9. Your rights

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you;
• Request that we correct inaccurate data;
• Request that we delete your data (subject to legal retention requirements);
• Object to or restrict certain processing;
• Request a portable copy of your data;
• Withdraw consent for any processing based on consent;
• Lodge a complaint with your local data protection authority (for Ireland, this is the Data Protection Commission (DPC)).

To exercise any of these rights, contact us through the contact page.

10. Children's privacy

Our Service is not directed to children under 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy occasionally. The "Last updated" date will reflect the most recent revision. Material changes will be communicated on this page. Your continued use of the Service after changes are posted constitutes acceptance of the revised policy.

12. Contact us

For questions, access requests, or privacy concerns, please reach out through our contact page.