Privacy Policy

1. Who we are

EasySportStream and EasySportScore are provided by Tooming Solutions OÜ (registry code 12074601), Lepa 12, 50705 Tartu, Estonia. EasySportStream provides live and recorded sports streaming services. EasySportScore is the companion scorekeeping app (iOS and Android, and easysportscore.com) for keeping and sharing live match scores. The two use one account and one backend. This policy explains how we handle personal data across both products, their mobile apps and our websites.

2. What data we collect

Data you provide

• Account details: name, email, authentication identifiers (including OAuth providers such as Google or Facebook, or the email address you use to sign in with a one-time code).
• Customer support messages and preferences.

Data we collect automatically

• Device and log information (e.g., IP address, device model, OS version, app version, timestamps) for security and diagnostics.
• Approximate location (EasySportStream): when you start a stream, our server works out your country from the IP address your device connects from, using a database that runs inside our own servers (the IP address is not sent to another company for this), and keeps that country with the stream session record. The IP address itself is not stored with that record, and this is not GPS or your device’s location. Earlier app versions that asked for approximate location sent the coordinates your device reported together with a city name and any venue name; the stream session record no longer stores those values, and older stream session records that still contain them are removed automatically (see Retention). A venue name that an earlier app version pre-filled from your location, or that you typed when editing a match, stays with that match until the match expires (see “Match content you enter”). The records behind the public match pages that earlier versions could publish, which may include a city or venue name, are being deleted as we retire those pages. This product includes GeoLite2 data created by MaxMind, available from https://www.maxmind.com.
• Usage events (e.g., sign-ins, page views, stream status checks) to operate and improve the service.
• Email sign-in codes: if you sign in with an emailed code, we send a six-digit, single-use code to the address you enter, valid for 10 minutes. To check the code and limit abuse we keep, in a temporary record, only keyed hashes of the code, the address and the IP address the request came from, never the code itself or the address in readable form. The record is not linked to your account and is no longer used after at most about 26 hours; the database then deletes it automatically, which can take up to a few days. Once you are signed in, the sign-in session record is the same as for the other sign-in methods (it includes the IP address and the device and app information described above).
• Email tracking: we do not track whether or when you open our emails. Our emails contain no tracking image (pixel), and the sign-in code email and our stream alerts are plain text. Links in our announcement emails are routed through Postmark (our email provider, see section 5) so that it can record clicks: which link was clicked and when, the mail client and device type, and an approximate location worked out from the IP address your device connects from. We use this only to see whether our announcements reach people, so we can improve them; we do not use it to build a profile of you or to follow you across other sites. Links in our other emails, including sign-in codes, are not tracked. To avoid click recording, copy the address of a link instead of clicking it, use the unsubscribe link in the email, or ask us at info@easysportstream.com to stop emailing you.
• How you found us: the website and the app-store links we publish carry a source tag (for example that you arrived from a broadcast description), and, for the current browser session only, the name of the site you came from (never the full address or your search terms). We use it to understand which of our own links bring new users; it is not used to track you across sites.
• In-app purchase flow events: if you open the PRO upgrade screen in the mobile app, we record that the screen was shown and whether a purchase you started succeeded, failed, was cancelled, or is pending, plus which part of the app it was triggered from. We never receive your card details or the price — Apple and Google handle the transaction itself and share only its outcome with us.

Content you stream

• Video and audio captured by your device or by an external camera you manage via the app go straight from your device to the platform you choose (YouTube, Facebook, or the RTMP server you choose with PRO’s Custom RTMP). We do not receive or store them. A recording you save on your device stays in your device’s own gallery.
• Streaming metadata (e.g., match identifiers, start/stop times, channel state).

EasySportScore

• Account (optional): you can keep score without signing in. If you sign in (Sign in with Apple on iOS, Google, Facebook, or an emailed code), we receive the same account details as above, shared with your EasySportStream account.
• Match content you enter: team names, scores, the match clock, the sport, a court name, and the match’s share link. Anyone who has a match’s share link can view that match; it can be changed only with its secret edit token, which only its creator (and, if they were signed in, their account) receives. Matches are removed automatically about 7 days after their last update.
• Technical data: when the app starts it tells us its version, your device model and operating system version (and your account id if you are signed in), and it sends a crash or error report if something fails. The IP address of the device that creates a match is stored with that match until it expires, and our server logs record the IP address and user agent when a score is saved (plus the app version and a device identifier where the app sends them), for security and diagnostics.
• On your device: the apps and easysportscore.com keep the list of your matches and their edit tokens on your device (app storage or your browser’s local storage) so you can keep scoring them.
• What EasySportScore does not do: it does not ask for camera, microphone or location access, contains no advertising, and does not track you across other companies’ apps or websites.

YouTube API Services and Google user data

If you connect your YouTube account, EasySportStream uses YouTube API Services and by connecting you agree to be bound by the YouTube Terms of Service. Google’s handling of your data is described in the Google Privacy Policy.

• What we access: only the channel you connect, using the youtube and youtube.force-ssl permissions. We use it to create the live stream and broadcast on your channel, set a thumbnail, read viewer count and stream health while you are live, end the broadcast, and add match chapters to the video description.
• What we store: the OAuth access and refresh tokens Google issues for your account, and your channel name and identifier. While you are connected we read your channel again at least every 30 days and, if we cannot, remove the stored name and identifier. For each stream we also keep, from YouTube, the stream’s health and its peak number of concurrent viewers, and the identifiers of its YouTube stream and broadcast; these are removed 29 days after the stream starts. We do not store your YouTube videos, watch history, or subscriber lists, and we do not sell or share this data or use it for advertising.
• Disconnecting and deleting: when you disconnect YouTube in the app, or delete your account, we delete the stored tokens and ask Google to revoke our access. If you remove our access in your Google Account instead, we find out the next time we refresh your channel (at the latest within about 30 days) and then delete the stored tokens. You can also remove our access at any time at myaccount.google.com/permissions. To ask us to delete your data, contact info@easysportstream.com.
• EasySportStream’s use of information received from Google APIs adheres to the YouTube API Services Terms of Service, including the Limited Use requirements.

Cookies, local storage and similar technologies

We store information on your device, and read it back, in our apps and on our websites (easysportstream.com and easysportscore.com), including by placing and reading cookies and similar technology. We do not use any of it for advertising, we do not sell it, and we do not use it to track you across other companies’ apps or websites. You can sign out, clear it, or block it as described at the end of this section; the sign-in will not work without the first two items below.

• Websites, needed to sign in: when you sign in, your browser’s local storage and session storage hold your session token (so you stay signed in; removed when you sign out) and a cached copy of your account details (name and email) so pages need not ask our server on every click, plus a temporary flag that stops a sign-in from redirecting in a loop. Signing out also clears a session cookie, if your browser has one.
• Websites, preferences: your light or dark theme, and, if you close the “get the Android app” banner, the time until which it stays hidden (7 days), both in local storage. For the current browser tab only (session storage) we remember the source tag of the link you arrived from, such as a broadcast description or an app-store link, so we can see which links bring people to the app.
• Websites, analytics (Google Analytics): the pages of easysportstream.com can load Google Analytics 4 from Google LLC, but only if you press Accept in the cookie banner. Until then nothing is sent to Google and no analytics cookie is set (Google’s consent mode is set to “denied”). If you accept, it sets first-party cookies (_ga and _ga_ZH3DHM6TQS) that tell visitors apart so visits and page views can be counted, and Google receives the page address, your IP address and browser details. Your choice (Accept or Decline) is kept in your browser’s local storage under the name ess_analytics_consent; Decline works the same as not answering. You can change it at any time with “Cookie settings” in the footer of every page, and declining there also removes the analytics cookies. The apps do not use Google Analytics. You can also block these cookies in your browser or use Google’s opt-out browser add-on.
• Apps: EasySportStream and EasySportScore keep on your device your sign-in session token and account details (on Android in encrypted app storage; on iPhone in the Keychain and app storage), your settings (for example stream quality and scoreboard layout), the in-app messages you dismissed, and, in EasySportStream, a short-lived copy of whether YouTube is connected and the channel name, so the screen can show it. EasySportScore also keeps your list of matches and their edit tokens (see “EasySportScore” above). The apps contain no advertising or analytics software from third parties and do not read your device’s advertising identifier.
• Email: our emails carry no tracking image and we do not record opens (see “Email tracking” above).
• Your choices: signing out removes the session token and account details from the browser or app; you can clear cookies and site data in your browser settings, block cookies (parts of the website that need you to be signed in will then not work), or clear the app’s storage or uninstall the app.

Permissions

• Camera and Microphone (EasySportStream): used only while you are streaming or recording with the app, and only after you start it yourself. Nothing is captured when no stream or recording is running. iPhone: the app does not use them in the background; video pauses when you leave the app. Android (newer versions): a stream or recording you started keeps running if you press Home, switch to another app or lock your phone, so the camera and microphone stay in use until you stop it or it ends. Android shows a persistent notification the whole time, and its Stop action takes you back to the app to end the stream.
• Notifications (EasySportStream, optional): used while you stream, to tell you that the stream has stopped reaching YouTube or Facebook and, on iPhone, that the video paused because you left the app. The app creates these notifications on your own phone; our servers do not send push notifications to the apps. If you say no, the app shows the same warnings on the screen instead. On Android the system also shows the persistent notification described above.
• Photo library (iPhone): used only to save a copy of your stream to your photo library when you turn on “Also save to device”. The app adds your recording to your library; it does not upload anything from your library.
• Storage (Android 9 and older only): used only to save that recording to your phone. Newer Android versions need no storage permission for it.
• Vibration and staying awake (Android): a short vibration when a stalled-stream warning starts, and keeping the phone processing while a stream you started runs in the background with the screen off. Neither reads any of your data.
• Location: not requested by newer versions of the apps (earlier versions of EasySportStream asked for approximate location); see “Approximate location” above.
• Network: internet access to deliver your stream, keep score and check status. This is the only permission EasySportScore needs.

3. How we use data

• Provide, secure, and maintain streaming services (including authentication, channel management, overlays, and monitoring).
• Process your requests (e.g., start/stop streams, retrieve credentials, list cameras).
• Use the approximate country of a stream start to choose the language of the emails we send you about your first stream and your free PRO trial (when your device language does not decide it), and to see which countries the service is used from.
• Detect, prevent, and investigate fraud, abuse, and technical issues.
• Comply with legal obligations and enforce our terms.

4. Legal bases (EEA/UK)

• Contract: to provide the services you request (e.g., streaming, account access).
• Legitimate interests: service safety, troubleshooting, usage analytics, and service improvement.
• Consent: where required (e.g., website analytics cookies, which are loaded only after you accept them; certain marketing).
• Legal obligation: when necessary to comply with law.

5. Sharing and processors

We do not sell personal data. We share data with service providers acting on our behalf, such as:

• AWS (e.g., S3, CloudFront, Lambda, DynamoDB) – website, backend, storage, and delivery. Live video streaming itself goes directly from your device to YouTube/Facebook (or to the RTMP server you choose with PRO’s Custom RTMP), not through AWS.
• Postmark – delivers our emails, including sign-in codes; it keeps delivery logs of the emails we send, including their content, for up to 45 days, and a suppression list of addresses that bounced or reported an email as spam, which it keeps indefinitely so that it does not email them again.
• Logging, monitoring, and security tools as needed.

The PRO subscription is bought only inside the iOS or Android app; our website has no checkout. The purchase itself is handled by Apple (App Store) or Google (Google Play) under their own terms and privacy policies; we store only the result (e.g., that it succeeded, and when the subscription renews or ends) so we can activate your subscription, never your card details or the price.

6. International transfers

We primarily process data in the EU (eu-west-1). Where data is transferred outside your region, we use appropriate safeguards (e.g., standard contractual clauses).

7. Retention

• Account data: kept while you maintain an account and for a reasonable period thereafter as required by law or to resolve disputes.
• Logs and diagnostics: typically retained for up to 12 months unless needed longer for security or legal reasons.
• Website request logs (the log our content delivery network keeps of requests to our website: IP address, browser and device information, the page requested and the referring page): removed automatically after 30 days.
• Email sign-in code records: no longer used after at most about 26 hours and then removed automatically (the database can take up to a few days to delete an expired record). They are not linked to your account, so deleting your account has nothing to remove from them.
• Administrative access records (which staff account accessed an admin tool, and when): kept for up to 400 days as a security measure, longer than general logs above, so we can review who accessed administrative tools over a longer window if needed.
• Streaming metadata (we do not hold the video itself): retained according to your account settings, operational needs, and legal requirements.
• Data we read from YouTube (see “YouTube API Services and Google user data” in section 2): a stream’s health, peak viewer count and YouTube stream and broadcast identifiers are removed 29 days after the stream starts, even though the rest of the stream session record below is kept longer. Your channel name and identifier are refreshed at least every 30 days while you are connected, or removed. The OAuth tokens are kept until you disconnect, delete your account or remove our access.
• Stream session records (for example team names, start and end times and the approximate country; records of streams started before we stopped storing device location may also hold a city or venue name and coordinates): removed automatically about 90 days after the stream starts. Deleting your account does not remove stream session records earlier.
• EasySportScore matches (including the creating device’s IP address stored with the match): removed automatically about 7 days after their last update.

8. Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You can also withdraw consent where processing is based on consent.

To exercise rights, contact info@easysportstream.com. We may need to verify your identity before fulfilling requests.

If somebody typed your email address into our email sign-in and you reported the code email as spam, Postmark may keep your address on its suppression list so that it does not email you again. We store no copy of that address. Write to the same contact and we will ask Postmark to remove the entry where Postmark allows it; Postmark does not let us remove a spam-complaint entry ourselves, and we will tell you plainly if it cannot be removed.

9. Children

Our services are not directed to children under 13. If you believe a child provided personal data to us, contact us to request deletion.

10. Security

We use industry-standard measures to protect data in transit and at rest and limit access to authorized personnel. No method of transmission or storage is 100% secure.

11. Contact

Tooming Solutions OÜ, Lepa 12, 50705 Tartu, Estonia
Email: info@easysportstream.com

12. Changes to this policy

We may update this policy from time to time. We will post the updated version here and revise the “Last updated” date above. Significant changes may also be communicated through the app or email.