Privacy

Pinball Scene is owned and operated by Travis Provick personally. This page explains what it stores about league players and what it shows publicly.

What is shown publicly

For each league: its seasons and sessions, the names players play under, their scores and points, and their standings. Where a player has given the league their IFPA number, it may be shown with a link to their IFPA profile. These pages, and the matching public data feed, can be read by anyone.

What is never shown publicly

Pinball Scene shows no player contact details. A league may give Pinball Scene a player's email address so it can run the league; that address is kept with the league's records and is never published on a page or in the data feed.

Signing in

League organisers and invited players can sign in to Pinball Scene to run their league. There are no public sign-ups: an account exists only because a league organiser invited that email address. For each account Pinball Scene stores the email address, when it was confirmed, and the sign-in sessions in use (a session lasts up to 30 days, or until you sign out). Sign-in links are sent by email and expire after 15 minutes. To limit abuse, Pinball Scene counts sign-in attempts per email address and per network address for a short time.

Signing in with Google

If you choose "Sign in with Google", Pinball Scene asks Google only for your basic sign-in information (the openid and email permissions). From Google it receives your email address, whether Google has verified that address, and Google's identifier for your Google account. It does not ask for, or receive, your contacts, files, calendar or any other Google data.

Pinball Scene uses this only to sign you in: it checks that the address is verified and belongs to an invited Pinball Scene account, then stores Google's account identifier with that account so later Google sign-ins match the same Google account. It keeps no Google passwords or Google access tokens. Nothing received from Google is published, sold, shared with or transferred to anyone else, used for advertising, or used for any purpose other than signing in.

You can stop Pinball Scene's access at any time from your Google Account's third-party connections page (myaccount.google.com/connections); you can still sign in by email link. To have the stored Google identifier, or your whole account, deleted, ask your league organiser or Pinball Scene (see Removal below).

Where data is kept

Pinball Scene runs on Cloudflare, which hosts the site and its database and sends its sign-in emails. The sign-in page loads Google's font for the Google button from Google Fonts, so Google receives that page's font request. Data is sent over encrypted connections, and sign-in links and session cookies are stored only as one-way hashes.

Where results come from

Leagues that keep score on Match Play have their results imported from Match Play as they are. The league organiser decides who is on a league's roster.

Removal and corrections

To have your name or results removed or corrected, or your account (including its email address and any linked Google identifier) deleted, contact the league organiser or Pinball Scene. A removal applies to Pinball Scene; results held on Match Play or elsewhere are managed there.

Contact

Pinball Scene is run by Travis Provick. Until a dedicated privacy contact is published here, reach him through your league organiser.