Privacy Policy

This Privacy Policy explains how CricoSoft (“we”, “us”, or “our”) collects, uses, and protects your information when you use the CricoScore mobile app, the website at cricoscore.app, and the website at scoreboard.cricosoft.com (collectively, the “Service”).

1. Information we collect

1.1 Account information

• Name, phone number or email, profile photo
• Player handle, bio, cricket role and stats you choose to share
• Authentication credentials (passwords are stored hashed; we never see them in plaintext)

1.2 Cricket activity

• Matches you score, ball-by-ball events, scorecards
• Posts, comments, likes, saved posts, follows
• Hire requests and scorer assignments

1.3 Live streaming

• Stream session history (which match, start/end time, platform)
• If you connect Facebook: your Facebook user ID, name, and a long-lived access token. We use this token only to manage live broadcasts on the Pages you authorize. Tokens are stored on our servers — never on your device.
• If you connect YouTube: your channel reference and stream key.

1.4 Device and technical data

• Push notification tokens (FCM/APNs) so we can deliver match alerts and chat messages
• Device model, OS version, and app version for diagnostics
• IP address and request logs (kept for security and rate limiting)
• Online/offline presence so other users can see when you are available

1.5 On the website

The website stores a small amount of data in your own browser:

• Your sign-in — when you log in, your session key is kept in your browser’s local storage so you stay signed in. Logging out removes it.
• One cookie — crico_has_session, which only records that you are signed in (it holds no personal information) and expires after 7 days.
• An anonymous visitor ID — a random code, not linked to your name or account, which lets us count how many people visit each day.
• Your light or dark mode choice, so the site looks the way you left it.

We do not use advertising cookies, and we do not let advertisers track you on the website.

1.6 Blood bank module (optional)

• Blood group, donation history, and contact preferences — only if you opt in to the blood bank feature

2. How we use your information

• To provide cricket scoring, social, streaming, and blood bank features
• To send notifications you have asked for (match alerts, chat messages, scorer requests)
• To create and manage live video broadcasts on Facebook Pages you authorize
• To prevent abuse, fraud, and unauthorized access
• To improve the Service through anonymous usage statistics and crash diagnostics

3. How we share your information

We do not sell your personal information. We share data only in these cases:

• With other users — public posts, scorecards, and player profiles are visible to other CricoScore users and to visitors of the website by design.
• With Facebook — when you connect your Facebook account, we send your authorization request to Meta. When you start a live broadcast to a Facebook Page, we publish the broadcast on your behalf using the access you granted. Use of your Facebook data by Meta is governed by Meta’s policies.
• With YouTube — when you simulcast to YouTube, your stream is delivered to YouTube under your account.
• With service providers — hosting (DigitalOcean / VPS, and Vercel for the cricoscore.app website), email delivery (Resend), SMS (BD Bulk SMS), and crash diagnostics. These providers process data on our behalf under contract.
• If required by law — we will disclose information when required by a valid legal request from authorities in Bangladesh or other competent jurisdictions.

4. Data retention

• Account data is retained while your account is active.
• Match data, posts, and comments are retained as part of the public cricket record unless you delete them.
• Server access logs are kept for up to 90 days.
• Facebook access tokens expire after ~60 days and are refreshed only when you reconnect.
• If you delete your account, we remove personal information within 30 days, except where retention is required by law.

5. Your rights and choices

• Access & correction — edit your profile in the app or on the website at any time.
• Disconnect Facebook — open Stream Settings → Disconnect Facebook. We delete your stored token and Page list immediately.
• Push notifications — turn off in your device settings.
• Browser data — log out, or clear this site’s data in your browser settings, to remove everything the website stored.
• Account deletion — request deletion via Data deletion or by emailing cricosoft@gmail.com.

6. Security

Passwords are hashed with bcrypt. Data in transit is protected by TLS. Facebook and YouTube access tokens, stream keys and other secrets are kept on our servers and never exposed to client devices. No system is perfectly secure; we encourage you to use a unique, strong password.

7. Children

CricoScore is not directed to children under 13. We do not knowingly collect information from children under 13. If you believe a child has provided us information, contact cricosoft@gmail.com and we will delete it.

8. International transfers

Our servers are located in Bangladesh. By using the Service, you understand that your data is processed there. Where we use service providers in other countries (e.g. Meta, Google, Resend, Vercel), data may be transferred internationally under those providers’ policies.

9. Changes to this policy

We may update this Privacy Policy from time to time. The “Last updated” date at the top of this page reflects the latest version. Continued use of the Service after changes means you accept the updated policy.

10. Contact us

Questions, requests, or complaints?

• Email: cricosoft@gmail.com
• Operator: CricoSoft, Bangladesh