Last updated 2 November 2026

Privacy policy

Iron Scores is run by [Company name] (trading as Iron Scores), [Registered address] ("we"). We are the data controller for the personal data described here, under UK GDPR and the Data Protection Act 2018. Questions or requests: privacy@ironscores.app.

What we collect

Accounts (gym owners, scorers and athletes): your name, email address and a scrambled (hashed) version of your password. We never see or store your actual password.
Athlete profiles: the name, gym, country, category, bio and photo you choose to add, and your date of birth (only your age is ever shown, and only if you add it).
Competition entries: your name, email, team or gym, optional phone number, any note you leave for the organiser, the category you entered, whether you've paid, and when you accepted the organiser's disclaimer.
On the day: lot number, flight, whether you checked in, your weigh-in bodyweight (if the organiser records it) and your results.
Gyms: the gym's name, location, logo and competition details.
Technical data: a login cookie (see below) and standard server logs (such as IP address and browser type) kept briefly for security.

We don't collect card numbers. Card payments go straight to Stripe (see below).

Why we use it

To run your account and the service you asked for: logging in, setting up competitions, taking entries and showing results. (Lawful basis: contract.)
To publish competition results. Results are public by nature: athletes' names, gyms and scores appear on competition pages, the big screen and gyms' own websites. (Lawful basis: legitimate interests of organisers, athletes and spectators in fair, open results.)
To send emails you need: password resets, entry confirmations, scorer invites and messages from a competition's organiser about that competition. We don't send marketing emails.
To keep the service secure and fix problems. (Lawful basis: legitimate interests.)

Bodyweight is only shown publicly when the organiser uses it as a tiebreak, and only in that competition's results.

What's public

Competition results (name, team, category, scores and any records) are public once the organiser publishes the competition. Athlete profiles are public and searchable. Your profile is only linked to a result after you claim it and the organiser approves. Your email address, phone number, date of birth and entry notes are never public.

Who we share it with

Competition organisers see the details on entries to their competitions (including email and phone) so they can run the event. Each gym is responsible for how it uses entry details once it has them.
Stripe processes entry fees on the organiser's own Stripe account, and our subscription payments. Stripe's privacy policy applies to card details.
Our suppliers, who process data only on our instructions: Cloudflare (hosting), Neon (database), Resend (sending email). Some of them may process data outside the UK under approved safeguards such as the UK International Data Transfer Addendum.

We never sell personal data.

Cookies

We only use one strictly necessary cookie, which keeps you logged in. There are no advertising or tracking cookies, so we don't need to ask for cookie consent. Score entry may keep unsent scores on the scorer's own device until there's signal to send them.

Young athletes (13 to 17)

You must be at least 13 to make an account. If you're under 18, please check with a parent or guardian before creating a profile or entering a competition. We only show an athlete's age, never their date of birth. A parent or guardian can ask us to change or remove a young athlete's profile at any time.

How long we keep it

Accounts and profiles: until you ask us to delete them.
Competition results: kept as the permanent record of the competition. If you delete your account we unlink your profile, and can remove your name on request.
Entry details (email, phone, notes): for as long as the competition stays on Iron Scores, or until the gym deletes it.
Password reset links expire after an hour. Login sessions expire after 30 days.

Your rights

You can ask to see, correct, download or delete your personal data, or object to how we use it. Email privacy@ironscores.app and we'll reply within one month. You can also complain to the Information Commissioner's Office at ico.org.uk.