Controller and contact
Daniel Sorger, Kiefernweg 27, 56218 Mülheim-Kärlich, Germany. Email: pbs_privacy@danielsorger.de.
License account and online features
The 30-day trial, purchase and restoration do not require an email address. The service uses a technical license account for store verification and device management. You may voluntarily link a verified email address for cross-platform access. Your license account supports restoration on Android and Apple. Player profiles and game data remain local; licensing does not synchronize them.
Data stored on your device
The app stores entered first and last names, optional nicknames, local player identifiers, participant selections, settings, language and appearance. It also stores current game state, game history, results, completion timestamps and derived statistics. This enables scoring, analysis and resuming games. The developer cannot access data kept solely on your devices. Only enter other people’s names if you are entitled to do so.
PDF reports and optional sharing
Score sheets are generated on your device as PDF files. They may contain names, results, game history and entered table or match numbers. Previews and exports are temporarily stored in the app cache. A report is passed to another app or service only when you use sharing and select a destination. Further processing there is governed by that provider’s privacy terms.
Device backups
The app does not automatically back up your games to its own cloud storage. Depending on your operating system and settings, local app data may be included in device backups or device transfers, including through Apple or Google services. You control these features in the provider’s settings. The developer cannot access these backups.
Retention and deletion
Local data remains until deleted or overwritten. You can edit or delete profiles under Players; deleting a profile removes its associated saved statistics and affected two-player games. Other players’ results may remain. Starting a new game does not automatically erase saved game history. To remove all local app data, use Android’s clear storage/data option or fully delete the iOS app (rather than offloading it). Exported files, shared copies and device backups must be deleted separately. Restoring a backup may restore saved data.
Support and privacy requests
If you email me with a support or privacy request, I, Daniel Sorger, handle and answer it myself. I process your sender address, message and any attachments you send. For the technical receipt, transmission and storage of messages, I use the email service provided by united-domains GmbH, Gautinger Straße 10, 82319 Starnberg, Germany. The provider states that mailbox data is stored in German data centres. Your chosen email providers also participate in delivery. I handle the substance of your app request myself.
Sending a message is voluntary; I cannot reply without a way to contact you. The legal basis is Article 6(1)(b) GDPR for contract-related requests, Article 6(1)(c) GDPR for compliance with statutory data protection obligations, and otherwise Article 6(1)(f) GDPR for responding and troubleshooting. Send only information needed for your request and remove unnecessary information about other people from attachments. Messages are deleted when no longer needed to handle the request, unless statutory retention requirements or necessary retention for establishing, exercising or defending legal claims apply. Business and tax records subject to statutory retention are kept for the legally required period under Article 6(1)(c) GDPR.
Your rights
Where personal data is processed by the controller, you have rights under the GDPR to access, rectification, erasure, restriction and data portability, subject to its conditions. You may object to processing based on legitimate interests on grounds relating to your particular situation. You may lodge a complaint with a data protection authority, particularly the State Commissioner for Data Protection and Freedom of Information Rhineland-Palatinate, Germany. Contact pbs_privacy@danielsorger.de for requests. We cannot remotely read or delete data stored only in your app.
Team matchdays and local connections
From version 1.2, you can create team matchdays and connect devices on your local network. Connected devices exchange the matchday, team and player display names, match settings, scores, assignments and device names needed to coordinate scoring. The local connection does not require the online live ticker. QR codes and invitation files contain private connection information; share them only with intended participants. Camera access is optional and is used to scan invitation codes. Images are not sent to the live service for scanning. Matchday archives you export may contain names, results and settings; treat them as personal files and choose sharing destinations carefully.
Optional online live ticker
Publishing requires a PBS account, separate operator approval and activation in the app. Local scoring does not automatically publish anything. When activated, team and player display names, disciplines, targets, rounds and current scores are transmitted over HTTPS to the live service operated by Daniel Sorger on the hosting infrastructure described below. Spectators can access the published scoreboard using its public link. No account is required to watch. Do not publish other people's names unless you are entitled to do so.
The service stores the scoreboard, technical account and publication identifiers, upload permissions, version numbers and timestamps needed to authenticate updates, distribute them and resolve retries. Local Undo histories and private connection credentials are not published. The live service is used to provide the requested publication; temporary technical limits protect availability and prevent unauthorized uploads. The service receives connection IP addresses. Standard HTTPS access logging is disabled; temporary limits and technical error logs follow the technical retention practices below. There is no advertising or cross-app tracking.
Server matchdays expire after 14 days without a score update. Ending publication withdraws the public link. Deleting a matchday on its managing device also schedules deletion of its server publication; if offline, that request is sent when the service becomes reachable. Local archived results and statistics are retained. Connected offline devices receive the matchday deletion when they next contact the managing devices. Live database backups normally rotate within seven days and are subject to an overall storage budget; deleted data can remain in recovery copies until rotation. A failed backup can require retaining the last valid recovery copy longer. Device archives, shared copies and operating-system backups must be managed separately.
Scope and changes
The online licensing sections apply to iPhone/iPad versions from 1.1 and the native Mac version from 1.2 (30), when licensing is enabled. Earlier desktop versions without licensing do not send device-license or purchase data; optional account sign-in processes the account, email and connection data needed for that feature. The local storage, export and support sections also apply to earlier versions. Android store purchases are available only when the corresponding Android store release is published.
This policy is available offline in the app. Visiting the public website additionally involves the connection data described in the website privacy notice. There is no profiling or automated decision-making with legal or similarly significant effects. Changes to data processing will be reflected in an updated policy.
License information processed
In versions with online licensing, the license service processes a technical account identifier, an optional verified email address, trial dates, sign-in sessions, up to three device activations including device name, platform and a randomly generated public device key, license-check timestamps, and purchase references and purchase status verified with Apple or Google. The device name may contain a name you assigned yourself. Private device keys remain on the device. The service receives your IP address to deliver requests and applies temporary request limits using hashed identifiers. It does not use advertising identifiers or a hardware fingerprint.
Licensing data is required to provide the trial, purchased access, restoration and device limits under Article 6(1)(b) GDPR. Email is optional and is used only if you request cross-platform account linking or account management. Request limits, fraud prevention and technical security are based on Article 6(1)(f) GDPR, our legitimate interest in protecting the service and purchase rights. No advertising, tracking across other companies’ apps or websites, or behavioral analytics is used. The app does not receive your store payment details.
Recipients and offline use
Daniel Sorger operates the license service on Akamai Cloud/Linode. The hosting provider is Akamai Technologies International AG, Grafenauweg 8, 6300 Zug, Switzerland; the server is in Frankfurt am Main, Germany. Switzerland benefits from an EU adequacy decision. Infrastructure maintenance and support may involve subprocessors outside the EEA; Akamai’s data processing terms provide transfer safeguards including EU Standard Contractual Clauses where applicable. Details and a way to request applicable safeguards are provided in the linked website privacy notice.
Sign-in emails are sent through united-domains from pbs@danielsorger.de to the address you enter. Your email provider also processes their delivery. Apple or Google handles store purchases, redemption codes and payment information under its own privacy terms. Purchase references are sent to the respective store for verification. The full version requires an online license check at least every 90 days. A removed device can continue offline until its existing proof expires.
Changing and deleting your account
Account and license provides account deletion. For an account linked to email, sign in again with that email before changing it or deleting the account; restoring a purchase alone does not grant access to these account-management actions. Without the app, contact pbs_privacy@danielsorger.de; we verify account access before acting. Deletion removes email, sessions, trial data and device assignments. The retained purchase references allow restoration through the same store account. Cross-platform restoration after deletion may require support. Local games, exports and store-side purchase records are not deleted by this action. License emails are not used for advertising.
License retention
License accounts and device assignments are retained while the account exists and the license is administered, until deletion is requested. Purchase references and status are retained for as long as needed to verify permanent purchase rights, restore purchases, process refunds and prevent duplicate assignment. After account deletion they are retained without the deleted email or device assignment; they remain pseudonymous purchase references, not anonymous data.
Sign-in links expire after 10 minutes, device challenges after 2 minutes and sessions after 90 days. Expired entries and request-limit hashes older than 24 hours are removed by hourly cleanup. Regular HTTPS access logging is disabled; technical error logs may contain connection data and are rotated daily, retaining up to 14 rotated files. The service retains its last 14 daily database backups. Deleted records may therefore remain in those backups until rotation; backups are used for recovery, not ordinary account access.
Wi-Fi names in matchdays
When choosing a matchday network, PBS can display the connected Wi-Fi name next to its IP address. The operating system may require location permission for this. PBS does not request location coordinates or use background location. The Wi-Fi name is displayed only on this device; PBS does not store it or send it to other devices or a server. If permission is denied or the name is unavailable, local synchronization still works using network labels and IP addresses.