Privacy Policy

• We collect what we need to run cricket clubs, arenas, matches and tournaments: your account details, your cricket profile, the scores you appear in, and the club or arena records you are part of.
• We don't sell your information, and we don't show ads or use advertising or analytics trackers.
• Scorecards, leaderboards and tournament pages are public by design. Your player profile page follows the visibility you choose.
• Club chat is end-to-end encrypted. The chat history lives on members' phones; our server only relays messages and deletes each one once every member's phone has received it, at most 7 days after it was sent.
• You can see and edit your profile, control notifications, sign out of every device, leave a club, and ask us to delete your account.

Information you give us

• Account: name, email address, password (stored only as a one-way hash, never readable), optional phone number, and which kind of account you have (player, club, arena or staff).
• Cricket profile (optional): photo, date of birth, city and country, playing role, batting and bowling style, and your profile visibility choice.
• Preferences: your notification choices, the language of your notifications (English or Urdu), and other settings such as the commentary voice used while scoring.
• Arena and club details: for club and arena owners, the club or arena name, contact email and phone, city, address, logo, photos, description, amenities, rates, and payout details you choose to show your customers (for example a JazzCash or bank account name and number).
• Pictures you upload: profile photos, team and club logos, arena photos, and tournament and match photos. Pictures are resized on your device before they are uploaded. When you replace or remove a picture, the old file is deleted from our storage.
• Club chat: messages are encrypted on your phone before they are sent (see Club chat).
• Things you send us: support emails and feedback.

Information other people add about you

• Clubs can add you to their roster (name, photo, jersey number, role, and a skill level they set), put you in teams and match line-ups, record your fees and payments, and invite you. A club can add a player who has no Manage Cricket account.
• Scorers record every ball of a match, including runs, wickets, catches and dismissals, linked to the players involved.
• Arenas record bookings and loyalty cards with the customer's name, phone number and, if given, email, party size, team name, notes and the amount paid.
• Tournament organisers record team entries, including the captain's name and phone number (not shown publicly), and add photos and videos to the tournament gallery.

Information collected automatically

• Sign-in and security data: when you sign in we store the time, your IP address and your browser or device type for each session. We use this to keep your account secure, let you sign out everywhere, and block password-guessing attacks.
• Email delivery records: the address, subject, type and delivery status of emails we send (not the email body).
• Notification settings: if you turn on phone or browser notifications, we store the technical address your device's push service gives us, your notification preferences, and a daily count used to limit how many notifications you get.
• Audit records: certain administrator actions are logged with the IP address and browser used (for example when our support team opens an account to help its owner).

We don't collect your location, and we don't use analytics, advertising or tracking tools.

Information from sign-in providers

If you sign in with Google or Facebook, we receive your name, email address and profile picture from that provider to create or open your account. We don't receive your password and don't post anything on your behalf.

We use information to:

• provide the service: run clubs, rosters, fees, matches and live scoring, tournaments, arena bookings, loyalty cards and club chat;
• show live scores, scorecards, statistics, leaderboards and share images;
• send the emails and notifications the service needs (sign-in codes, booking and fee updates, match alerts, results) and the optional ones you have turned on, in the language you chose;
• keep the service secure, prevent abuse and fraud, and fix problems;
• answer your questions and provide support;
• meet legal obligations.

We don't sell personal information, and we don't use it for advertising.

• Scorecards, match pages, live scores, leaderboards, match-day and tournament pages are public and can be shared by link. They show players' names, photos and cricket statistics. Ask your club to use a display name or remove a photo if you prefer.
• Your player profile page (managecricket.club/p/<your player ID>) follows the visibility you choose in Settings, Privacy: public, only people in your clubs, or private.
• Arena pages and booking pages show the arena's details, rates, public reviews (reviewer's name, rating and comment) and the payout details the arena chooses to show.
• Tournament galleries show the pictures and videos the organiser added from their own Google Drive (see Google user data).
• Live streams are shown on the match page when a club streams a match to its YouTube channel (see YouTube live streaming).

Club chat is available in clubs where it has been turned on.

• Encrypted on your phone. Messages, photos, videos and voice notes are encrypted on the sender's phone and can only be decrypted on the phones of the club's members. We can't read them.
• History stays on members' phones. The chat history is stored on members' phones, not on our server. Our server only relays messages: it holds each encrypted message and its media until every member's phone has received it, then deletes it, and in any case deletes it at most 7 days after it was sent.
• Custom stickers are not encrypted. Stickers a member makes (up to 5 each) are stored on our storage and can be seen by everyone in that member's club chats.
• What our server can see. To deliver chat we store limited information that isn't encrypted: who sent a message and when; the type of message (text, photo, video, voice note, GIF, sticker or poll); replies and reactions; who has read up to which message; mute settings; each device's public key and browser type; which members a message mentions (not the text around the mention); for polls, how many options there are and who voted for which option number (not the question or the option text); availability answers for a match (In, Out or Maybe); which messages are pinned, and which ones a member hid with "delete for me". Match update cards posted by the system contain only public match facts.
• Optional backup PIN: if you set one, your chat keys are stored encrypted with a key made from your PIN, which we can't open.
• Optional automatic backup to your own Google Drive: if you turn it on, your phone decrypts the chat and saves it directly into a folder called "Manage Cricket Chat Backups" in your own Google Drive (see Google user data). Our server never receives the backup or your Google access; it is told only the time of the newest message that has been backed up.
• GIF search sends your search words to our GIF provider (GIPHY or Klipy), and GIFs load directly from that provider.

Manage Cricket's use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements.

• Google Sign-In (openid, email, profile): we use your name, email address and picture only to create and sign in to your Manage Cricket account.
• Google Drive (drive.file, which only reaches the files this app creates): used only when you choose one of the two things below. Your Google Drive access stays on your device; our servers never receive it, and the app can't see any other files in your Drive.
  • Chat backup. When you turn on chat backup, your phone decrypts the chat and saves it directly into a folder in your own Google Drive called "Manage Cricket Chat Backups". Our servers never receive the backup.
  • Tournament gallery. When a tournament organiser connects Google Drive on a tournament's gallery page and adds pictures or videos, they are uploaded from the organiser's browser directly into a folder the app creates in the organiser's own Google Drive, and each file is shared by link ("Anyone with the link can view") so it can be shown on the public tournament page. Our servers never receive the files: we store only each file's Google Drive ID and name, with its type, picture size or video length, and who added it. Visitors' browsers load the pictures and videos from Google. An organiser can remove an item at any time: our record of it is deleted at once, and when the person removing it uploaded it and has Google Drive connected, the app also deletes the file from their Drive. Otherwise the file stays in the organiser's Drive, where they can delete it or stop sharing it.
• YouTube (youtube.force-ssl): see YouTube live streaming.

We don't use Google user data for advertising, we don't sell it, we don't let people read it except as described here or when you ask us to help, and we don't use it to train AI models.

Clubs can connect their own YouTube channel so matches can be streamed live to it. Manage Cricket uses YouTube API Services. By connecting a channel you also agree to the YouTube Terms of Service, and Google's use of data is covered by the Google Privacy Policy.

What we access and why. When a club admin connects a channel, we use the YouTube Data API to:

• read the channel's name, ID and picture, to show which channel is connected;
• create the channel's live stream connection and read its stream address and key, so the club's streamer can send video to it;
• create a live broadcast for each match the club streams, with the match title and description, and link it to that stream connection;
• check the broadcast's status, and end it when the match is over;
• revoke our access when the club disconnects the channel.

We never delete, edit or download the channel's other videos, and we don't read viewers' data or comments.

What we store. The channel's name, ID and picture; an encrypted access token that lets us do the actions above; the encrypted stream key; and the IDs of the broadcasts we created for matches. The stream key is only given to the person the club assigns to stream a match.

Going live from the Android app. A streamer can go live from the Manage Cricket Android app. The app uses the phone's camera and microphone only while the streamer is live. The video goes from the phone directly to the club's YouTube channel; we never receive or store the video.

How to disconnect. A club admin can disconnect the channel in Club settings, YouTube, at any time. You can also remove Manage Cricket's access in your Google account at myaccount.google.com/permissions. When a channel is disconnected, we delete the access token at once and the other YouTube data we stored within 7 days. Videos already streamed stay on the club's channel, where the club controls them.

Watching streams. Match pages embed the YouTube player. YouTube may collect data from viewers under the Google Privacy Policy.

We share information only as needed to run Manage Cricket, with these service providers acting on our instructions:

ProviderWhat for, and what they receive

Vercel

Hosting the website and app pages. Receives requests to our website, including your IP address.

Oracle Cloud

Our servers and database. Holds the data we store.

Cloudflare

File storage (photos, logos, custom stickers and encrypted chat media) and bot protection on sign-in forms. Receives uploaded files; for bot checks, your IP address and browser signals.

Brevo

Sending email. Receives your email address and the email content.

Google

Google Sign-In; Google Drive (your own chat backups and tournament galleries); YouTube (live streams); AI image generation for arena posts, which receives only the text prompt written by arena staff.

Meta

Facebook Login.

Push services (Google, Apple, Mozilla, Microsoft)

Delivering notifications to your device. Receives the encrypted notification.

GIPHY or Klipy

GIF search in chat. Receives your search words, and your IP address when a GIF loads.

Pages that show embedded YouTube or Facebook videos, or Google Drive galleries, load content from those companies, and they may set their own cookies under their own privacy policies.

We may also share information:

• within your club or arena, as the service is designed (for example your fees are visible to your club's managers and to you);
• when required by law, or to protect the safety and rights of our users or others;
• if the business is transferred, in which case this policy continues to apply to your information.

Support access: our support team only opens an account to help with a problem. This access is limited and logged.

InformationHow long

Your account and profile

While your account exists. See Your choices and rights for deletion.

Match scores, scorecards and statistics

Kept as part of the match record, because they are shared records of matches that involved other players and clubs.

Club records (rosters, fees, payments, kit and expenses)

While the club uses Manage Cricket, or until the club removes them.

Arena bookings, customers, loyalty cards and reviews

While the arena uses Manage Cricket, or until the arena removes them.

Club chat messages and media

Deleted from our server once every member's phone has received them, and at most 7 days after sending.

Custom chat stickers

Until the member who made them removes them.

Tournament gallery records

Until the organiser removes the item or the tournament is deleted. The files themselves stay in the organiser's Google Drive.

Sign-in codes

Deleted shortly after they expire.

Daily notification counts

14 days.

Sign-in sessions, email delivery records, notifications and audit records

As long as needed to run the service and keep accounts secure.

YouTube connection data

Until the channel is disconnected. Then the access token is deleted at once and the rest within 7 days.

• See and edit your information: in Settings you can see and change your profile, photo, contact details and preferences.
• Profile visibility: choose public, my clubs only, or private in Settings, Privacy.
• Notifications: turn email and phone notifications on or off by type and choose English or Urdu in Settings, Notifications, and turn phone notifications off on any device.
• Sign out everywhere: in Settings, Password, end every session on every device.
• Leave a club at any time.
• Delete your account: email hello@managecricket.club from the email address on your account. We delete or anonymise your account within 7 days. Some records are kept where they are shared with other people (for example past scorecards, and fee payments a club recorded). See Delete your data.
• Remove sign-in access: for Google, at myaccount.google.com/permissions; for Facebook, in Facebook Settings, Apps and websites.
• Other requests: you can ask for a copy of your information or ask us to correct it by emailing hello@managecricket.club. Depending on where you live, you may have further rights under local law, including the right to complain to a data protection authority.

Many cricketers are young, so we take extra care:

• You must be 13 or older to use a Manage Cricket account. If you are under 18, use Manage Cricket only with a parent's or guardian's permission.
• Clubs may add younger players to their roster, match line-ups and scorecards. The club is responsible for getting a parent's or guardian's permission first, including for photos and for appearing in live streams.
• A parent or guardian can ask us to remove a child's information at hello@managecricket.club.

We protect information with encrypted connections (HTTPS) everywhere, passwords stored as a strong one-way hash, end-to-end encryption for club chat, strong encryption for YouTube access and stream keys, sign-ins that can be ended from any device, access controls that keep each club's and arena's data separate, and protection against password guessing. No system is perfectly secure; if we learn of a breach that affects your information, we will tell you as the law requires.

We don't use advertising or analytics cookies. We use:

• one small cookie that remembers which part of the app you use (player, club or arena), and your browser's storage to keep you signed in, remember your settings, and save scoring offline until it syncs;
• on devices that use club chat, your device's secure storage for your chat keys and the encrypted chat history;
• a local copy of pages you've visited, so the app opens faster and works offline.

Google Sign-In, Facebook Login, Cloudflare's bot check and embedded YouTube, Facebook or Google Drive content may set their own cookies.

Our servers and database run on Oracle Cloud, our website on Vercel, and files on Cloudflare, so your information may be processed outside your country. We use these providers under their data protection terms.

If we make important changes, we'll tell you in the app or by email before they take effect. The date at the top shows the latest version.

Manage Cricket, Lahore, Pakistan. Email hello@managecricket.club.