Privacy
In force from 10 September 2026.
This is a darts scoreboard run by the owner of this site on a computer at home. It is not a business, it sells nothing, and there is no analytics, no advertising and no third party being fed your data. The short version of this page is: it keeps the darts you threw and the name you threw them under, and you can delete all of it yourself at any time.
Who is responsible
The person who runs this server decides what it does with your data. You can reach them through the contact page.
What is stored, and why
| Data | Why it exists |
|---|---|
| Username, display name | To sign you in and to put a name next to a score. |
| Password | Stored only as an Argon2id hash. The password itself is never written down anywhere, and cannot be recovered from the hash — which is why a forgotten one is reset rather than looked up. |
| Email address | To confirm the account is yours, to let you reset a forgotten password, and to warn you if the password or the address is changed. Nothing else is ever sent to it. |
| Country (optional) | Only if you choose one, and only to filter the global ranking. It is never guessed from your IP address. |
| Photo (optional) | Shown beside your name. Stored as a file on the server, resized, and deleted with your account. |
| Your darts | Every throw, its score, and which game it belonged to. This is the entire point of the site. |
| Friendships | Who you have agreed to share statistics with. |
| Sign-in records | Time of last sign-in, count of failed attempts, and a lockout time. This is what stops somebody guessing your password. |
| Server log entries | Failed sign-ins, lockouts and errors, each with the IP address they came from. Kept to spot someone attacking the site. |
There is no tracking of any kind: no analytics, no advertising identifiers, no profiling, no third-party scripts. Nothing on the site loads from anywhere but this server.
Who can see your statistics
You decide, on the account page: only you, only accepted friends, or anyone signed in. The default is friends only. The setting is enforced on the server, not by hiding a button.
The global ranking is on by default, and you can opt out at any time from your account page or the ranking itself. Other players see your display name, your country if you set one, and your level. They do not see your statistics unless the setting above already allowed it.
Cameras
If you use the camera scoring, pictures are held in memory for as long as it takes to work out where a dart landed, and are then gone. No image is ever written to disk and none is ever sent anywhere. What is kept is the result: a number, a multiplier and a confidence score. Camera scoring is marked BETA throughout and is off unless you turn it on for a game.
How long it is kept
- Your account and darts — until you delete them. There is no automatic expiry, because a scoreboard that quietly forgot last season would be a poor scoreboard.
- Games nobody finished — deleted automatically after 3 days. A game that was set up and abandoned is almost always a mis-tap, so it is not kept. Games you actually finished are never removed this way.
- Backups — the newest 14 are kept and older ones are deleted automatically. A deleted account can therefore still exist in a backup for a short time afterwards.
- Server logs — 5 files of about a megabyte each, oldest discarded as new ones are written. Typically a few weeks.
- Session cookie — 30 days, or until you sign out.
What you can do
- See it — the site shows you your own statistics in more detail than any export could.
- Take a copy — download everything as a JSON file from the account page.
- Correct it — change your display name, username, country and photo yourself at any time.
- Delete it — the account page deletes your login, email address, friendships and photo permanently. Games you finished with other people stay in their history with your name removed, because those results are theirs as much as yours.
- Object or complain — through the contact page. If you are in the EU or UK you may also complain to your national data protection authority.
Where it lives
On a single computer in a private home, in one SQLite file. It is reached through a Cloudflare tunnel, which means Cloudflare handles the encrypted connection between your browser and this server and can see that a request happened. No database is exposed to the internet, and there is no other hosting provider involved.
Security
Passwords are hashed with Argon2id. Connections are HTTPS. Session cookies are HttpOnly, SameSite and Secure. Forms are protected against cross-site request forgery. Sign-in attempts are rate limited and an account locks after 5 wrong passwords. You are emailed if your password or your email address is changed. None of that makes a home server bulletproof, and it would be dishonest to pretend otherwise — so please do not reuse a password here that guards anything that matters.
Changes
If this page changes in a way that matters, the date at the top changes with it.