Privacy

Who this is from

Tabulata is a board-game scorekeeping app published by Peter Gerard LLC. This policy covers the iOS and Android apps and this website. It is the whole policy; the summary above is the same wording the apps show on their About screen.

What stays on your device

Everything, by default. Your games, the scoresheets you build or import, the player names you type, and every score you enter are stored locally on your phone or tablet. There is no account to create and nothing to sign in to, so none of it is associated with an identity we hold.

Deleting the app deletes that data. We cannot recover it for you, because we never had a copy of it.

What happens when you score together

"Score together" is opt-in, per game. When you turn it on, that one game is copied to our server so the other phones at the table can show the same sheet. While it is on, the following is sent:

• the game's name and its scoresheet — the category names and their scoring rules;
• the player names exactly as they were typed (a nickname works just as well as a real name, and we would rather you used one);
• the scores and the arithmetic entered in each cell;
• the six-character room code, so other players can join;
• a small amount of coordination data: which cell someone is currently editing, who is connected right now, the shared turn timer, and timestamps for when the room was created and last edited.

Games you never share never leave your device. Turning the feature off, or simply letting the room expire, stops anything further being sent.

How your device is identified

To write to a shared game your device signs in anonymously and is given a random identifier. It is not linked to your name, your email, your phone number, or your App Store or Google Play account, and we cannot use it to recognise you anywhere else. Reinstalling the app produces a new one.

The camera

The app asks for the camera only when you choose to scan a QR code to join a game. The camera view reads the code and nothing else: no photo is taken, stored, or transmitted. You can decline the permission and type the six-character room code instead.

How long a shared game lasts

A shared game stops working 24 hours after its last edit — the app will tell you the room has expired — and a scheduled job deletes it from the server within 48 hours. This is automatic and is not something you have to ask for. Your own copy of the game stays on your device and remains in your history.

Who else handles this data

We use Google's Firebase for the parts that need a server: Firebase Realtime Database stores shared games, Firebase Authentication issues the anonymous identifier, and Firebase Hosting serves this website. Data for shared games is held on Google's servers in the United States. Google acts as our service provider and is not permitted to use this data for its own purposes. We use no other third-party services — no advertising networks, no analytics products, no trackers of any kind.

What we don't do

• We don't sell or share personal information, and we don't have advertising.
• We don't build profiles, track you across apps or websites, or use analytics SDKs.
• We don't ask for your contacts, location, photos, or microphone.
• We don't send you marketing, because we have no way to contact you.

Children

Tabulata is a scorekeeping tool for board games and is suitable for family use, but it is not directed at children under 13 and we do not knowingly collect personal information from anyone, children included. The only free-text fields that reach our server are player names, which are typed by whoever sets up the game and need not be real names.

Security

Traffic between the app and the server is encrypted in transit. A shared game can only be read or written by devices that were admitted to it with its room code, which is enforced on the server rather than by the app. Because there are no accounts, there are no passwords to steal.

Anyone you give a room code to can see and change that game's scores while the room is live. Share codes the way you would hand someone the scoresheet.

Your choices

• Play without ever turning on "Score together" — the app is fully functional offline, and nothing is transmitted.
• Use nicknames instead of real names for players.
• Decline the camera permission and type room codes instead.
• Stop sharing at any time; the room expires on its own and is then deleted.
• Delete the app to remove everything stored locally.

If you want a live shared game removed from the server sooner than its automatic expiry, email us the room code and we will delete it.

Changes to this policy

If this policy changes, the date at the top of this page changes with it, and the summary inside the app is updated in the same release. We won't quietly broaden what the app sends.

Contact

Questions about privacy: privacy@tabulata.app.