Last Updated: July 13, 2026
Welcome to Cricace. We are committed to protecting your personal data and your right to privacy. This policy explains what data we collect, why we collect it, and your rights in relation to it. It applies to users in all regions including the European Economic Area (EEA) and United Kingdom (UK) under the General Data Protection Regulation (GDPR).
CricAce is operated from Ireland under the name Auction Ace. We are the data controller for the personal data described in this policy, and the Irish Data Protection Commission is our supervisory authority. If you have any questions about this policy or how we handle your data, contact us at: Email: info@auction-ace.com Phone: +353 89 454 1876
We collect the following types of personal data: • Account Information: Email address, display name, and phone number when you register. • Profile Data: Any profile picture or additional details you choose to provide. • Usage Data: If (and only if) you allow usage analytics, we record which features are used — for example that a match was created or a stream was started — together with basic device and app information. These records contain no names, contact details or match content. See section 12 to turn this on or off. • Match & Tournament Data: Scores, team names, and player names you enter into the app. • Third-party Data: If you enter information about other individuals (e.g. player names), you are responsible for ensuring you have their consent to do so. We use Firebase (Google LLC) to store and process this data. Firebase acts as a data processor on our behalf.
We process your personal data on the following legal grounds under GDPR Article 6: • Contract: Processing necessary to provide the services you signed up for (account management, match scoring, tournaments). • Legitimate Interests: Improving app performance, detecting bugs, and preventing abuse. • Consent: For optional usage analytics. We ask before collecting any of it, nothing is collected unless you choose to allow it, and you can turn it off at any time under Usage Analytics in your Profile — you do not need to contact us.
We use your data to: • Provide and maintain the app and its features • Manage your account and authenticate you • Send important service notifications • Improve app performance and fix issues • Respond to support queries • Comply with legal obligations We do not sell your personal data to third parties.
We keep different data for different periods: • Account and profile data — for as long as your account exists, then deleted when you delete it. • Match, team and tournament records — kept indefinitely as a sporting record. See below for what happens to your name. • Stories — automatically deleted 24 hours after posting. • Scoring audit trail — automatically deleted after 45 days. • Live stream records — kept as an operational record; your account link is removed when you delete your account. • Usage analytics — only collected if you allow it, and retained by Google Analytics under the retention period set on our account. • Notifications, follows and claim requests — deleted with your account. If you delete your account, the following are deleted immediately: your profile (including username, phone number, email and profile photo), your stories and their images, your follower relationships, your claim requests and notifications, your career stats summary, and any connected YouTube credentials (which we also revoke with Google). We may retain a limited record where we are required to for legal or compliance reasons. Scorecards of matches you took part in are not deleted, and your name remains on them. A scorecard is a shared record of a game involving other players — and, in league cricket, of a result the competition depends on — so erasing it would remove other people’s data and damage records their clubs rely on. We rely on our legitimate interest in maintaining accurate sporting records for this, as permitted under Article 17(3). What we do remove is everything that ties those records to you: the link to your account and your photo. Once your account is deleted, nothing on a scorecard can be traced back to it. If you want your name removed from a specific match as well, contact us at info@auction-ace.com and we will deal with it case by case. Please note that completed match scores and scorecards (including player names entered during scoring) are publicly accessible without authentication. This enables score sharing and live scorecard links. If you enter the names of other individuals as players, you are responsible for ensuring you have their permission to do so. If you would like a specific match record removed, please contact us at info@auction-ace.com.
Scorers can broadcast matches live to YouTube from the app, with a score overlay. If you play in a match that is being streamed, you may appear in that broadcast, and it may remain available as a recording on YouTube afterwards. The person operating the camera is responsible for having the ground’s permission and for telling participants — including a parent or guardian for any player under 18 — that the match is being streamed. We require them to confirm this in the app before they can go live, and we record that confirmation against each broadcast. If you appear in a stream and want it removed, or you are the parent or guardian of a player who does, email info@auction-ace.com with the match and approximate date. You do not need a CricAce account to ask, and we can take a broadcast down without the streamer’s agreement. We will also tell you what we hold about that broadcast if you ask.
CricAce uses Google OAuth 2.0 to allow users to connect their YouTube account for the purpose of creating and managing live broadcasts of cricket matches directly from the app. When you connect your YouTube account, we request the following Google OAuth scopes: • https://www.googleapis.com/auth/youtube — to create and manage YouTube Live broadcasts and streams on your behalf. Data obtained through Google APIs (including your YouTube account credentials and broadcast data) is used solely to: • Create live broadcast sessions on your YouTube channel • Bind and manage RTMP streams for live match scoring • End/transition broadcasts when a match is completed How we store these credentials: connecting your account gives us an access token and a refresh token. We store both for as long as the integration remains connected — a refresh token is required to keep the connection working between sessions, so it necessarily outlives any single session. They are held in a restricted area of our database that only your own account can read, and are never shown to other users or to our staff through the app. How to disconnect: use Disconnect Google Account on the YouTube integration screen. This revokes the authorisation with Google and deletes the stored tokens. Deleting your CricAce account does the same. You can also remove CricAce's access at any time from your Google Account at myaccount.google.com/permissions. We do NOT: • Share, sell, or disclose your Google account data or YouTube data to any third parties • Use Google user data for advertising or tracking purposes • Retain your Google OAuth tokens after you disconnect the integration or delete your account • Transfer Google user data to any other service or partner Your use of Google services through our app is also subject to Google's Terms of Service and Privacy Policy: policies.google.com/privacy. CricAce's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
We use the following third parties, who receive your data only to perform a service connected with the app: • Firebase / Google LLC — cloud database, authentication, file storage and push notifications. Acts as our processor. policies.google.com/privacy • YouTube / Google LLC — live broadcast creation and streaming, only if you connect your YouTube account or a scorer streams a match you play in. policies.google.com/privacy • CricketStatz — the league scoring platform some clubs use. Data moves in both directions, and only for league matches: – Sent to them: if a scorer uploads a league match, that scorecard (player names and match statistics) goes to your league’s CricketStatz records. The scorer signs in with their own CricketStatz credentials to do this; we never store those credentials. CricketStatz is an independent controller of the league’s records under its own terms, not a supplier acting on our behalf. – Received from them: when a club connects its league, we import squad lists, player names, career statistics and player photos so that scorecards and overlays show the right details. This means we may hold data about a league player who has never used CricAce. If that is you and you want to see, correct or remove what we hold, email info@auction-ace.com — you do not need an account to ask. Neither direction happens for ordinary matches scored in the app. • Google Analytics for Firebase — usage analytics, only if you have chosen to allow it (see sections 3 and 12). We do not share, sell, rent, or trade your personal data with anyone else for their commercial purposes. We do not use any third party for advertising or profiling.
CricAce is operated from Ireland, and your data is stored and processed in Google’s europe-west2 (London) region — not in the United States. Google acts as our processor. Where Google needs to access data from outside the European Economic Area, for example for support or maintenance, that transfer is covered by the Standard Contractual Clauses Google incorporates into its data processing terms. Transfers between the EEA and the United Kingdom are covered by the UK’s adequacy decision. If you connect your YouTube account, data you send to YouTube is handled by Google under its own terms and may be processed outside the EEA.
If you are located in the European Economic Area (EEA) or UK, you have the following rights: • Right to Access: Request a copy of the personal data we hold about you — or get it instantly with Download my data in your Profile. • Right to Rectification: Request correction of inaccurate or incomplete data. • Right to Erasure: Request deletion of your personal data ("right to be forgotten"). • Right to Restrict Processing: Request that we limit how we use your data. • Right to Data Portability: Receive your data in a structured, machine-readable format. You can do this yourself at any time — open your Profile and tap Download my data to get a JSON file containing your account, profile, matches, teams, stats and activity. • Right to Object: Object to processing based on legitimate interests. • Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing. To exercise any of these rights, contact us at info@auction-ace.com. We will respond within 30 days.
If you believe we have not handled your data in accordance with applicable law, you have the right to lodge a complaint with a data protection authority. Because CricAce is operated from Ireland, our supervisory authority is the Irish Data Protection Commission (dataprotection.ie). You can complain to them directly. You may also complain to the authority in your own country of residence — in the UK, the Information Commissioner’s Office (ico.org.uk); elsewhere in the EEA, your national supervisory authority. We would appreciate the chance to resolve it with you first at info@auction-ace.com, but you are not required to contact us before complaining.
We use essential cookies and similar local storage required for authentication, session management and remembering your preferences. These are necessary for the app to work and cannot be switched off. Separately, if you choose to allow usage analytics, Google Analytics for Firebase sets an analytics identifier on your device so we can count how often features are used. This is optional and is never set unless you have chosen to allow it — we ask on first use, and you can withdraw at any time under Usage Analytics in your Profile. Withdrawing stops further collection on that device. We do not use advertising cookies, and we do not track you across other websites or apps.
Cricket is played by children, and CricAce is used by junior players — so rather than claiming the service is not for them, we ask everyone for their date of birth when they sign up and apply extra protections to younger accounts. The age at which a person can consent to their own data being processed varies by country: it is 16 in Ireland and much of the EEA, 13 in the UK, and 18 in India. We apply whichever applies to you. If you are below that age, you can still use CricAce to score, play and appear on scorecards. What we switch off by default are the features that would need a parent or guardian’s permission: live streaming, posting stories, and appearing in public name searches (people who already know your username or player ID can still add you to a team). These protections lift automatically once you reach the relevant age. If you are a parent or guardian and want to review, restrict or delete your child’s data, or you believe a child has given us information they should not have, contact us at info@auction-ace.com and we will act promptly.
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. However, no method of electronic transmission or storage is 100% secure, and we cannot guarantee absolute security.
We may update this Privacy Policy from time to time. When we do, we will update the "Last Updated" date at the top of this page and, where appropriate, notify you via email or in-app notification. We encourage you to review this policy periodically.
For any privacy-related questions, requests, or complaints — including a request to access, correct, export or delete your data, or to have a live stream taken down: Email: info@auction-ace.com Phone: +353 89 454 1876 We aim to respond within 30 days, as required by the GDPR.
Questions? Contact us at info@auction-ace.com