Hide scores to avoid spoilers
Switch between light and dark themes
Last updated: 10 August 2026
This policy applies to the KorfScores mobile app and the Korf Scores website at korfscores.com. Both are operated by Nick Wilkins Limited in the United Kingdom. In this policy, “we”, “us” and “Korf Scores” refer to Nick Wilkins Limited.
You can use KorfScores without creating an account. The app collects only the information needed to provide its features:
App-generated device ID: a random, pseudonymous identifier stored on your device. We use it to remember community contributions and help enforce one vote per device. It is not an advertising identifier and is normally regenerated if you clear the app’s data or reinstall it.
Push notification data: a Firebase Cloud Messaging token, your platform (iOS or Android), the teams and leagues you follow, and your notification-category preferences. We use these details only to send the notifications you choose. Firebase and the device push service also process limited technical details, such as the app and operating-system version, device model, language, and time zone, to issue and deliver tokens and maintain the service.
Community contributions: match-winner votes, community score reports, the match state or minute you report, and YouTube links you suggest for games. If you submit a community score, we also collect your email address so you can confirm the report.
Technical request data: our servers and security providers may process your IP address, request time, app or browser information, and related logs when the app connects to the Korf Scores API. We use this to deliver the service, prevent abuse, diagnose faults, and protect the platform.
The mobile app does not contain advertising, audience-analytics, or product-analytics SDKs. The push-notification service processes limited operational telemetry, but we do not use it for audience profiling or cross-app tracking. We do not collect advertising identifiers. The app does not ask for access to your contacts, precise location, photos, microphone, or camera.
The Korf Scores website may use essential session and security cookies, an anonymous community-device cookie, and local preferences such as theme or spoiler settings. You can remove these through your browser settings, although some preferences and interactive features may then reset.
We use Fathom Analytics on the website to understand aggregate page visits and referrals. Fathom does not set analytics cookies. Its servers briefly process information such as the requested page, referrer, IP address, and browser details to produce privacy-focused, aggregated statistics and protect the service from abuse. Fathom is not included in the mobile app.
If you submit information through the website, we process the details you provide. Depending on the feature, this can include an email address, name, score report, prediction, video link, or other message.
We use information described in this policy to:
provide match information, follows, preferences, and other requested features;
register devices and deliver the push notifications users enable;
record, confirm, moderate, and display community contributions;
prevent duplicate voting, spam, fraud, and other misuse;
operate, secure, troubleshoot, and improve the app, website, and API; and
respond to privacy requests and comply with legal obligations.
We do not sell personal information. We do not share it for third-party advertising or use it to build advertising profiles.
We use a limited number of service providers to operate Korf Scores:
Laravel Cloud and Cloudflare host, deliver, and protect the website and API.
Google Firebase Cloud Messaging, Apple Push Notification service, and Google Play services issue and deliver mobile push notifications.
Fathom Analytics provides cookieless, aggregate analytics for the website only.
Our transactional email provider delivers confirmation and service emails when a feature requires them.
YouTube provides embedded match videos. When you choose to load or play a video, Google or YouTube may receive device, network, and usage information under Google’s own privacy policy.
These providers process information only where needed to supply their services. We select providers that offer contractual, organisational, and technical safeguards intended to provide the same or equivalent protection described in this policy. Links to other websites and services are governed by their own privacy policies.
Where UK data-protection law applies, we rely on your consent for optional permissions such as push notifications; our legitimate interests in operating, securing, and improving Korf Scores; taking steps you request when you use an interactive feature; and compliance with legal obligations. You can withdraw notification permission at any time in the app or your device settings.
App preferences and the app-generated device ID remain on your device until you clear the app’s data or uninstall it.
We keep a push token and its associated follows and preferences until it is replaced, reported invalid by the push service, no longer needed, or you ask us to delete it. Uninstalling the app may not notify us immediately.
We retain community contributions, including any confirmation email attached to a score report, while they are needed to verify, moderate, and maintain the integrity of match information. We delete or anonymise them when they are no longer needed or following a valid deletion request, unless we must retain limited information for security or legal reasons.
Security, request, and service logs are kept only for the limited periods needed for diagnostics, abuse prevention, and legal compliance.
KorfScores does not offer user accounts, so there is no account to close. To request access to or deletion of information linked to your device or email address, contact [email protected]. We may ask for enough information to locate the relevant records and verify the request.
KorfScores does not offer user accounts. You can still ask us to delete information collected through the app:
Email [email protected] with the subject “KorfScores data deletion request”.
Include the device reference shown on the app’s Privacy & Support screen and, if you submitted a community score, the email address used for that report. Do not send us your push-notification token.
We will use those details only to locate and verify the relevant records, then confirm when the request has been completed.
A verified request deletes the push token, followed teams and leagues, notification preferences, and app-generated device identifier we can locate. We also delete the email address attached to community score reports and delete or anonymise associated predictions and contributions where possible.
We may retain a minimal record where needed to protect the service, prevent fraud, establish or defend legal claims, or meet a legal obligation. Published match facts that no longer identify you may remain. Security and service-provider logs expire under their normal limited retention schedules. We respond without undue delay and within any time limit required by applicable law.
We use access controls, encryption in transit, restricted production access, and other proportionate technical and organisational safeguards. No internet service can guarantee absolute security.
Some service providers may process information outside the United Kingdom. Where required, we rely on recognised transfer safeguards or another lawful transfer mechanism.
Depending on the law that applies, you may have rights to access, correct, delete, restrict, or object to our processing of your personal information, and to receive a portable copy. Where processing relies on consent, you may withdraw that consent at any time.
Change notification categories from the app’s Notifications screen.
Disable all app notifications in your iOS or Android settings.
Clear local app or browser data to reset identifiers and preferences stored on your device.
Email [email protected] to make a privacy request.
You may also complain to the UK Information Commissioner’s Office at ico.org.uk.
Korf Scores is a general-audience sports service and is not directed to children under 13. We do not knowingly collect personal information from a child under 13. A parent or guardian who believes a child has submitted personal information can contact us to request its deletion.
We may update this policy when the app, website, or legal requirements change. We will publish the revised policy on this page and change the “Last updated” date. Material changes will receive additional notice where appropriate.
Nick Wilkins Limited is responsible for the information described in this policy. For questions, privacy requests, or deletion requests, email [email protected].