Privacy Policy

Last updated 16 August 2026

The short version: we collect what we need to run your account and your darts record, and nothing else. We do not sell your data, we do not run advertising, and we do not track you across other websites.

1. Who is responsible

The data controller is Sodasoft LLC, a limited liability company registered in Wyoming, USA, registered address 30 N Gould St, Sheridan, WY 82801, United States. For any privacy question or request, write to [email protected].

OPEN ITEM - do not publish without resolving. Sodasoft LLC is established outside the EEA and offers this service to people in it, so GDPR Art. 27 (and the UK equivalent) most likely requires a designated EU and UK representative, whose name and address must be stated here. Confirm with a lawyer and fill this in, or record why the exemption applies.

2. What we collect

Data	Examples	Why
Account	Email address, display name, username, password (stored only as an argon2id hash), optional nickname, country and profile photo	To create and secure your account and show you to other players
Gameplay	Matches, scores, legs, averages, checkouts, club and team membership, competition entries and results	To provide scoring, standings, rankings and analytics - this is the product
Subscription	Your Stripe customer and subscription identifiers, plan, status and renewal date, billing country	To give you the access you paid for and to charge the correct tax
Technical	IP address, device and browser type, timestamps, error logs, security events	To keep the service running, prevent abuse and investigate problems
Support	What you write to us, and our replies	To answer you and keep a record of the issue

Card details never reach us. Payments are handled entirely by Stripe on their own pages. We receive only the identifiers and status listed above.

Optionally, some accounts hold a date of birth for age-restricted competitions. It is private and never shown in public profiles or listings.

3. Why we may use it, and on what legal basis

To perform our contract with you (GDPR Art. 6(1)(b)) - running your account, saving your matches, providing Pro if you pay for it, and handling billing.
Our legitimate interests (Art. 6(1)(f)) - keeping the service secure, preventing fraud and abuse, fixing faults, and understanding in aggregate which features are used. We balance this against your rights and keep the data minimal.
Legal obligation (Art. 6(1)(c)) - tax and accounting records for payments we take.
Consent (Art. 6(1)(a)) - for anything optional, such as non-essential emails. You can withdraw consent at any time.

4. What is visible to other people

Dart Deck is a competition platform, so some information is public by design: your display name, username, country, profile photo, results in leagues and tournaments you enter, your position in public rankings, and your club and organisation memberships.

Your email address, password, date of birth and billing details are never public. Your personal career analytics are visible only to you.

5. Who we share it with

We use a small number of processors, each only for the purpose named:

Processor	Purpose	Where
Stripe	Payments, subscriptions and tax calculation	USA / EU
Vercel	Hosting the app and API	USA / EU
Neon	Database hosting	[REGION]
Resend	Transactional email (verification, password reset)	USA / EU

We may also disclose data where the law requires it, or to establish or defend legal claims. We do not sell personal data and we do not share it with advertisers.

6. International transfers

Some processors are based in, or store data in, the United States. Where personal data of people in the EEA or UK is transferred outside those areas, it is done under the European Commission's Standard Contractual Clauses or another lawful transfer mechanism, together with appropriate safeguards.

7. How long we keep it

Account data - while your account exists, then deleted within 30 days of deletion.
Competition results - retained as part of the sporting record even after account deletion, because other players' standings depend on them. On request we will disassociate them from your name and profile.
Payment and tax records - for as long as tax law requires, typically 7-10 years.
Security and error logs - normally up to 12 months.

8. Your rights

If you are in the EEA or UK you have the right to access your data, correct it, have it erased, restrict or object to how we use it, receive a portable copy, and withdraw consent where we rely on it. You also have the right to complain to your local data protection authority.

Write to [email protected] and we will respond within one month. We will not charge you or treat you differently for exercising these rights.

Depending on where you live in the United States, you may have comparable rights to know, delete, correct and opt out of “sharing”. We do not sell or share personal information as those terms are defined in US state privacy laws.

9. Cookies and local storage

Dart Deck uses browser storage only for things that make the app work: your login session and your preferences. We run no advertising cookies and no cross-site tracking, which is why you are not asked to accept a cookie banner. Stripe may set cookies on its own checkout pages for fraud prevention, governed by Stripe's privacy policy.

10. Security

Passwords are hashed with argon2id and are never stored or transmitted in a readable form. Traffic is encrypted in transit. Access to production data is limited to those who need it. No system is perfectly secure, but if a breach ever affects your data and poses a risk to you, we will notify you and the relevant authority as the law requires.

11. Children

Dart Deck is not intended for children under 16 (or the local age of digital consent, if higher). We do not knowingly collect their data. If you believe a child has created an account, tell us and we will remove it.

12. Changes

If we change this policy materially we will notify you by email or in the app before the change takes effect. The “last updated” date above always reflects the current version.