Privacy Policy

1. Who We Are

CricFight is a free cricket scoring and team management platform built for gully cricket players, local clubs, and tournament organisers across India. The platform is operated by the CricFight team, contactable at admin@cricfight.in.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration: Your name, email address, and mobile number when you create an account. You may also sign in via Google, in which case we receive your name and email from Google.
• Player & team data: Player profiles, batting/bowling statistics, team names, rosters, and squad details you enter while using the app.
• Match data: Ball-by-ball scoring, scorecards, match results, extras, overs, and other in-match information you record.
• Tournament data: Tournament names, fixtures, points tables, and results you create or manage.
• Team chat messages: Messages sent within team group chats on the platform.
• Contact & support requests: Information you send us through the contact form or by email.
• Profile picture or media: Any images or files you choose to upload.

2.2 Information Collected Automatically

• Log & device data: IP address, browser type, operating system, referring URL, and pages visited, collected automatically when you access our Services.
• Usage data: Features you use, matches you score, challenges you send or accept, leaderboard positions, and XP points earned.
• Local storage: We store your theme preference (light/dark mode) in your browser’s local storage. This data stays on your device and is not sent to our servers.
• Push notification tokens: A device token used to send you optional in-app and browser push notifications (only if you opt in).

2.3 Information from Third Parties

• Google Sign-In: If you use Google to register or log in, we receive your name and email address from Google as permitted by your Google account settings.
• Analytics providers: We use Microsoft Clarity and Ahrefs Analytics on our landing page (cricfight.in) to understand how visitors interact with the site. These tools may collect click patterns, scroll behaviour, and session recordings. See Section 5 for more detail.

3. How We Use Your Information

We use the information we collect to:

• Create and manage your account and authenticate your identity.
• Provide the core features of the platform — match scoring, player statistics, tournament management, challenges, leaderboards, and team chat.
• Generate shareable scorecards and match summaries.
• Send transactional emails (account verification, password reset).
• Send push notifications about match invites, challenge requests, and platform updates — only if you have opted in.
• Monitor and improve the performance, security, and reliability of our Services.
• Respond to your support requests and feedback.
• Detect and prevent fraud, abuse, or violations of our Terms of Service.
• Conduct analytics to understand usage patterns and improve product features.
• Comply with applicable legal obligations.

4. Legal Basis for Processing

We process your personal data under the following legal bases, as applicable under the Digital Personal Data Protection Act, 2023 (DPDPA) and other applicable Indian law:

• Consent: Where you have given us clear consent (e.g., push notifications, optional data uploads).
• Contract performance: Where processing is necessary to provide the Services you have requested (e.g., account creation, match scoring).
• Legitimate interests: Where processing is in our legitimate interests and not overridden by your rights (e.g., security monitoring, fraud prevention, analytics to improve the platform).
• Legal obligation: Where we are required to process data to comply with a law or court order.

5. Cookies and Analytics

5.1 Cookies

Our website uses essential session cookies to keep you logged in. We do not use advertising or cross-site tracking cookies.

5.2 Microsoft Clarity

We use Microsoft Clarity on our landing page to capture anonymised session recordings and heatmaps. Clarity may use cookies and collect information about how you use the site. This data is used solely to improve our website. You can learn more at Microsoft’s Privacy Statement.

5.3 Ahrefs Analytics

We use Ahrefs Analytics to measure traffic and search performance on our landing page. Ahrefs may process anonymised visitor data. You can review the Ahrefs Privacy Policy for details.

6. How We Share Your Information

We do not sell your personal information. We may share it only in the following circumstances:

• With other users, by design: Public scorecards, player profiles, leaderboard rankings, team names, and challenge results are visible to other CricFight users as part of the core product functionality.
• Service providers: We work with third-party vendors who help operate our Services (e.g., cloud hosting, email delivery, push notification infrastructure). These providers access data only to perform services on our behalf and are bound by appropriate confidentiality obligations.
• Legal requirements: We may disclose information if required by law, court order, or government authority, or where necessary to protect our rights, property, or the safety of our users or the public.
• Business transfers: If CricFight is involved in a merger, acquisition, or sale of assets, user data may be transferred. We will notify you before your data is transferred and becomes subject to a different privacy policy.

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Services. You may delete your account at any time (see Section 8). Upon account deletion, we will delete or anonymise your personal data within a reasonable period, except where we are required to retain it by law or for legitimate business purposes such as fraud prevention.

Match data, scorecards, and player statistics associated with your account may be retained in anonymised or aggregated form after account deletion to preserve the integrity of historical match records for other players involved in those matches.

8. Your Rights

Subject to applicable law, you have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete data.
• Deletion: Request that we delete your account and personal data.
• Data portability: Export your match and player data using the in-app data export feature.
• Withdraw consent: Withdraw consent at any time where processing is based on consent (e.g., disable push notifications in your device or browser settings).
• Grievance redressal: Raise a grievance with us as the data fiduciary under the DPDPA, 2023.

To exercise any of these rights, contact us at support@cricfight.in. We will respond within 30 days.

9. Data Security

We implement industry-standard security measures to protect your data, including:

• Passwords are stored using bcrypt hashing — we never store plain-text passwords.
• JWT-based authentication with short-lived tokens.
• HTTPS encryption for all data in transit.
• HTTP security headers (via Helmet.js) and rate limiting to prevent abuse.
• CORS policies restricting access to authorised origins only.

No method of transmission or storage is 100% secure. We cannot guarantee absolute security, but we continually work to improve our protections. If you discover a security vulnerability, please report it to admin@cricfight.in.

10. Children’s Privacy

CricFight is not directed at children under the age of 13. We do not knowingly collect personal data from children under 13. If you believe a child has provided us with personal data, please contact us and we will promptly delete it.

11. Third-Party Links

Our platform may contain links to third-party websites or services (such as tournament sponsors or social media). We are not responsible for the privacy practices of these third parties. We encourage you to review their privacy policies before providing any personal information.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, notify you via email or an in-app notice. Continued use of the Services after changes take effect constitutes your acceptance of the revised policy.

13. Contact Us

If you have any questions, concerns, or grievances about this Privacy Policy or our data practices, please contact us:

• Email: support@cricfight.in
• General: admin@cricfight.in
• Website: cricfight.in/contact