Who we are
CRIC-SCORE (the “site”) is run by CRIC-SCORE (“we”, “us”, “our”).
We are the controller of the personal information described in this policy, which means we decide how and why it is used. We process it in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
This policy covers the public site: live scores, scorecards, series, teams, player profiles, rankings, search and the contact form. It also covers the accounts we give to association administrators, scorers and officials who sign in to manage fixtures and score matches.
The information we collect
When you visit the site
You can follow scores and browse statistics without an account. Our servers record technical information about each request, such as your IP address, browser type, the pages you view and the time of your visit. We use it to keep the site running, secure and free from abuse. We do not use advertising or analytics trackers, and we do not build profiles of visitors.
When you contact us
If you send an enquiry through the contact form, we collect your name, email address, the topic you choose, any match or page link you add, your message and the IP address it was sent from. If you email us directly, we receive your email address and whatever your message contains.
To keep spam out, the contact form runs a security check provided by Cloudflare Turnstile. While you are on the Contact page, Turnstile looks at technical signals from your browser and device, such as your IP address and browser characteristics, to tell people from automated bots. It usually runs without you doing anything, and only occasionally asks you to tick a box. We also count how often each IP address and email address sends the form, to limit abuse.
Players, officials and match information
Cricket associations, clubs and their scorers give us information about the players and officials taking part in their competitions. This can include names, photos, dates of birth, nationality, contact details, registration numbers, team and squad membership, and everything recorded during a match: runs, wickets, catches, dismissals and awards.
Only the information needed to present the sport is published on the site: names, photos, teams, match records, statistics, rankings and awards. Dates of birth, contact details and registration or identity numbers are used only to manage competitions and are never shown publicly.
If you have an account
Accounts are created for association administrators, scorers and officials. We hold your name, email address, a securely hashed password, your role, two-factor authentication and passkey details if you turn them on, and a record of what you do in the scoring and management tools (for example which balls you scored and when). This lets us attribute changes and keep match records accurate.
How we use it and why
We only use personal information where the law allows it. Our purposes and lawful bases are:
| Purpose | Lawful basis |
|---|---|
| Publishing live scores, scorecards, statistics, rankings and player profiles | Legitimate interests: reporting and recording community cricket for players, clubs and supporters |
| Organising competitions, squads and fixtures on behalf of associations | Legitimate interests of us and the associations we work with |
| Replying to your enquiry and keeping a record of it | Legitimate interests: responding to people who contact us |
| Running the contact form’s security check and limiting how often it can be sent, to keep out spam and abuse | Legitimate interests: protecting the site and our inbox from automated abuse |
| Providing and securing accounts for administrators, scorers and officials | Performance of a contract, or steps taken at your request before one |
| Keeping the site secure, preventing spam and abuse, and fixing faults | Legitimate interests: running a safe and reliable service |
| Meeting legal obligations, and establishing or defending legal claims | Legal obligation, or legitimate interests |
Where we rely on legitimate interests, we have balanced them against your rights. Match records are the kind of information players reasonably expect to be shared when they take part in organised cricket, and we publish no more than is needed. You can object at any time (see your rights).
We do not sell personal information, use it for marketing or make decisions about you by automated means.
Cookies and local storage
We use only the cookies and browser storage that the site needs to work. Because they are strictly necessary, the law does not require your consent for them, and we do not show a cookie banner. We do not use advertising, analytics or social media tracking cookies.
| Name | Type | Purpose | Lasts |
|---|---|---|---|
cric-score-session |
Cookie | Keeps your session working and, if you have an account, keeps you signed in | 120 minutes of inactivity |
XSRF-TOKEN |
Cookie | Protects forms against cross-site request forgery | As the session |
remember_web_… |
Cookie | Keeps an account holder signed in, only when they tick “Remember me” | Until you sign out |
flux.appearance |
Local storage | Remembers whether you chose the light, dark or system appearance | Until you clear it |
site-search-recents |
Local storage | Your last five searches, kept in your browser only and never sent to us | Until you clear it |
You can block or delete cookies and local storage in your browser settings. If you block the session cookies, signing in and sending the contact form will not work.
The contact form’s Cloudflare Turnstile security check runs only on the Contact page. Cloudflare states that Turnstile does not use advertising or tracking cookies, and it does not use the information to follow you across other sites. If your browser blocks it, the form cannot be sent, but you can still email us.
Who we share it with
We share personal information only when we need to, and only with:
- Service providers who host the site, store its data and deliver its emails, and Cloudflare, which runs the contact form’s Turnstile security check. They act on our instructions under written contracts and may not use the information for their own purposes.
- Cricket associations and clubs whose competitions you take part in, so they can run them. Your enquiry may also be passed to the association it is about, if that is the best way to answer it.
- Professional advisers, such as lawyers, accountants and insurers, where needed.
- Authorities and regulators, where the law requires it, or to protect the rights, property or safety of us, our users or others.
- A buyer or successor, if the site or our business is sold or reorganised. They would have to respect this policy.
Match information and published statistics are, by their nature, visible to anyone who visits the site.
International transfers
Some of our service providers, and some of the associations we work with, may be outside the UK. When personal information is transferred outside the UK, we make sure it is protected: either the destination has been found by the UK government to provide adequate protection, or we use the safeguards the law provides, such as the ICO’s International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses. You can ask us for details of these safeguards.
How long we keep it
- Enquiries: for as long as we need to deal with them, and then for up to 24 months, unless they relate to a dispute or legal claim.
- Server and security logs: for up to 90 days, unless needed to investigate an incident.
- Accounts: while the account is open, and for up to 12 months after it is closed. The record of who scored or changed a match stays with that match.
- Match records and statistics: for as long as the site runs, because they form the permanent record of the competition. We will remove or hide a player’s photo and personal details on request where the law requires it, while keeping the anonymous scoring record.
Keeping it secure
We use appropriate technical and organisational measures to protect personal information. These include encrypted connections (HTTPS), hashed passwords, two-factor authentication and passkeys for accounts, role-based access, rate limits on forms and restricted access to our systems. No system is completely secure, but if a breach puts your rights at risk we will tell you and the ICO as the law requires.
Your rights
Under UK data protection law you have the right to:
- Access: ask for a copy of the personal information we hold about you.
- Rectification: ask us to correct information that is wrong or incomplete, including a scorecard entry or a profile detail.
- Erasure: ask us to delete your information where there is no good reason to keep it.
- Restriction: ask us to limit how we use your information while a concern is looked into.
- Objection: object to our use of your information based on legitimate interests, for example to your profile photo being published.
- Portability: receive information you gave us in a structured, machine-readable format, where the law allows.
To use any of these rights, contact us using the details below. We may need to confirm your identity first. We will reply within one month, or tell you within that time if we need longer. There is usually no charge. If your request is about match information supplied by an association, we may work with that association to deal with it.
Children and junior players
Junior players take part in some of the competitions shown on the site. Their information is supplied by their association or club, which is responsible for getting any permission needed from a parent or guardian. For players under 18 we publish only what is needed to report the match, and we will remove a junior player’s photo or other details promptly at the request of the player, a parent or guardian, or their club.
The contact form and accounts are not intended for children under 13. If you are under 13, please ask a parent or guardian to contact us for you.
Complaints
If you have a concern about how we use your information, please contact us first so we can try to put it right. You also have the right to complain to the UK’s data protection regulator, the Information Commissioner’s Office, at ico.org.uk/make-a-complaint or by calling 0303 123 1113.
Changes to this policy
We may update this policy from time to time. The date at the top shows when it last changed. If we make a significant change, we will make it clear on the site.
Contact us
For questions about this policy or your personal information, contact CRIC-SCORE through our contact page.