Privacy

Last updated 9 November 2026

GaelScór is a match clock and scorer for GAA referees: a Garmin watch app and this website. It's run by an individual developer, not a company, and it's built to collect as little as possible. Nothing is sold, and there are no adverts and no tracking or analytics cookies.

The short version

Scores are public. If you turn on Broadcast Scores on the watch, the match (team names, competition, kit colours, scores and the time of each score) is shown on this website for anyone to see. No player names are ever collected.
Your fitness is private. If you turn on Send Fitness, your distance, speed, heart rate and a map of where you moved during each half go to your account, and only you can see them.
Both are off until you turn them on. With them off, the watch app sends nothing at all.
You can delete matches and fitness data yourself, and ask for your account to be deleted.

What's collected, and why

Match details: team names, competition, grade, kit colours, half length, scores, the clock time and half of each score, throw-in time, the app version

When: Broadcast Scores is on
Why: To show live scores and results
Who sees it: Everyone (you can hide or delete your matches)

A random identifier for your watch (made up by the app, not your Garmin ID or serial number)

When: Broadcast Scores or Send Fitness is on, or you link the watch
Why: So only your watch can add to your matches, and to link them to your account
Who sees it: Nobody (stored only as a scrambled hash)

Fitness for each half: time, distance, top speed, sprints, average and maximum heart rate, time in each heart-rate zone, and your movement as metres from where you started (not your location on a map)

When: Send Fitness is on
Why: To show you your match fitness
Who sees it: Only you. Not other members, and not the site's admin

Account: username, email address, password (stored only as a salted hash), or your Google account ID, name and email if you sign in with Google

When: You register or sign in
Why: To sign you in and show your matches
Who sees it: Only you (your username appears on matches you broadcast)

Your settings on the site: usual role, role per match (referee, linesman and so on), province and county

When: You set them
Why: To file and filter your matches
Who sees it: Only you, except province and county, which show on matches you broadcast

Your IP address, together with the sign-in name tried

When: Signing in, registering or resetting a password
Why: To stop people guessing passwords
Who sees it: Nobody. Deleted after about 15 minutes

The watch app's permissions

Positioning (GPS): to record your activity to Garmin Connect if you choose Save as Activity, and for Send Fitness. Your latitude and longitude never leave the watch: Send Fitness only sends movement in metres from your starting point.
Fit / FitContributor: to save the match as an activity in your own Garmin Connect account, with goals and points per team. That stays between you and Garmin.
Communications: to send scores and fitness to this website through your phone, only when you've turned those on.
UserProfile: to read your heart-rate zones so the fitness view can show time in each zone. Nothing else from your Garmin profile is read or sent.

Legal basis (UK GDPR and EU GDPR)

Your account and match data: to provide the service you asked for (contract).
Fitness data, including heart rate (health data): your explicit consent, given by turning on Send Fitness. You can withdraw it at any time by turning it off and deleting the data.
Sign-in protection by IP address: legitimate interest in keeping accounts safe.

Where it's kept, and who else is involved

The site and its database run on Cloudflare (Workers and D1), which processes the data on our behalf.
If you sign in with Google, Google confirms who you are.
Resend sends the site's emails (confirming your email address, password resets), so it receives your email address and the message.
Pages load the Outfit font from Google Fonts, so Google sees your IP address when a page loads.
Data from the watch goes through the Garmin Connect app on your phone to reach this site.
Some of these services may process data outside the UK and EU, under their own safeguards.

How long it's kept

Matches and fitness: until you delete them or your account is deleted.
Sign-in sessions: 30 days. Link codes: 15 minutes. Password-reset links: 1 hour.
When you delete a match on the site it disappears straight away. Ask, and it'll be erased from the database too.

Children

Accounts are for adults (referees, officials and coaches). Underage matches can be broadcast, but only team-level scores are ever collected: never player names, photos or anything about players.

Your rights

You can see, correct, download or delete your data, and object to or limit how it's used. Most of it you can do yourself: delete a match or its fitness from the match page or My matches, hide matches, change your email or password in your profile, and turn off Broadcast Scores and Send Fitness on the watch. For anything else, including deleting your account, email contact@gaelscor.com.

If you're unhappy with how your data is handled you can complain to the Information Commissioner's Office (ico.org.uk) in the UK, or the Data Protection Commission (dataprotection.ie) in Ireland.

Changes

If this policy changes, the date at the top changes too. Anything that changes what's collected will be explained in the app's release notes.