Last updated: 5 August 2026
EURL NGP (SIREN 911 197 366), represented by Nichita Godagarean.
Email: contact@smashscore.fr
We only collect the following data:
We never resell your data. Audience and advertising measurement only start after you accept, and can be stopped at any time.
Until you click "Accept" in the cookie banner, nothing is stored on your device and no event is sent: Google Analytics 4 starts in Consent Mode v2 with analytics_storage:'denied', the Meta pixel is in consent revoke mode and its script is not even downloaded, and our server relays no event.
Once you accept, the following trackers are used:
_ga, _ga_* — Google Analytics 4: audience measurement (pageviews, session duration, country). Duration: 14 months. Data kept for 14 months at Google._fbp, _fbc — Meta: browser identifier and ad-click identifier, used to attribute a visit or a purchase to the ad that generated it. Duration: 90 days.ss_vid — a random visitor identifier we generate, stored in your browser's local storage (it is not a cookie). It is used to match your events between the browser and our server. Duration: until you erase it.Your choice itself (accepted / declined) is stored in your browser's local storage, under the cookie_consent key.
We run ads on Facebook and Instagram. To measure how they perform, and only if you have accepted, certain events (page view, product page view, checkout started, purchase) are sent to Meta Platforms Ireland Ltd (4 Grand Canal Square, Dublin 2, Ireland) through two complementary channels: the pixel loaded in your browser and the Conversions API, sent from our server. Both channels carry the same event identifier, so Meta counts the event only once.
Sent along with these events: your IP address, your browser (user agent), the page URL, the _fbp / _fbc and ss_vid identifiers, and — for purchases only — the following data from your order: email, phone, first name, last name, city, postal code, country. That order data is hashed with SHA-256 before being sent: Meta never receives the plaintext values, they only allow it to recognise an existing account without us disclosing your identity.
For this processing Meta acts as an independent controller, for its own advertising purposes. The data may be processed outside the European Union, on the basis of the European Commission's standard contractual clauses. See Meta's privacy policy.
You can change your mind at any time through the "Manage cookies" link at the bottom of every page: your choice is erased, the cookies and identifiers already stored (_ga, _ga_*, _fbp, _fbc, ss_vid) are deleted, and the banner reappears so you can choose again. Declining is as easy as accepting and has no effect on your use of the site.
Everything above describes the smashscore.fr website. This policy is also the one declared to the App Store and to Google Play: the two sections that follow describe the mobile app, which obeys different rules. The app sets no cookie and shows no consent banner — the banner and the "Manage cookies" link described above apply to the website only, including when you open it from the app.
Your matches never leave your device. The names you type in, the scores, your match history, the statistics and the match in progress are stored in a local SQLite database, inside the app: we receive no copy of them and have no way of consulting them. The same goes for the connected bracelets, whose link is purely Bluetooth, from device to device, and for the Apple Watch: the app reads your heart rate from Apple's Health app to show it during the match, and writes the workout session back to it; that data stays on your devices and is never transmitted to us. Uninstalling the app erases this data — so we cannot restore it.
The app has no consumer user account. Apart from the measurement described in the next section, the data it transmits is the following:
smashscore_premium_monthly. Our server then queries Apple or Google to check that the subscription is active and to find out its expiry date. Neither your name, nor your email, nor any device identifier accompanies that request; the payment itself is carried out by Apple or Google, and we have no access to it. Legal basis: performance of a contract.The links to the shop and to the legal documents open our website in your browser: from there, the cookie banner and everything described above applies again. As with any connection to a server, the requests above make your IP address and the technical identification of your device (user agent) appear in our server logs, kept for 14 days and then erased by rotation; we do not match them against any profile and do not use them for audience measurement. To request the deletion of the voice recording associated with a first name, or to exercise one of the rights listed in the "Your rights" section, write to us at contact@smashscore.fr.
Clubs and tournaments (professional offering): on a tablet installed on a court, or on the device of a manager logged into SmashScore Club, the app additionally exchanges the following with our server: the club account credentials at the time of login, in exchange for a session token; the token belonging to the tablet; the score of the match in progress, sent after every point to feed the referee's dashboard and the TV display — figures alone, with no name at all; and the final result. The names of the players in a tournament are typed in by the referee on the dashboard and come down to the tablet; as on a consumer device, the tablet then sends each player's first name back to our server to obtain the voice announcement (see "Players' first names" above). These exchanges only exist on a device paired with a club or logged into a club account; on a consumer device, none of these requests is issued. Legal basis: performance of the contract entered into with the club.
We run ads for the app on Facebook and Instagram. Attributing an install to a campaign is handled by SKAdNetwork, Apple's attribution mechanism: it is the operating system that reports an aggregated install count to the ad network, without the app transmitting or keeping any data for that purpose — at first launch it merely signals to the operating system that it takes part in the mechanism. The app contains no advertising kit — neither Meta's nor anyone else's —, displays no advertising, collects no advertising identifier, and therefore shows no tracking authorisation request (App Tracking Transparency). The counts the ad network receives are aggregated and delayed: they allow neither it nor us to know who installed the app.
Your data is shared with the following recipients, each for the stated purpose only:
We never sell or rent your data to anyone.
Under the GDPR, you have the following rights:
To exercise these rights, contact us at contact@smashscore.fr. We respond within 30 days at the latest.
In case of dispute, you can file a complaint with the CNIL (French data protection authority).
EURL NGP — contact@smashscore.fr — +33 7 62 47 85 51