Privacy Policy

PoolStat Scoreboard Control — Last updated: May 2026

1. Overview

PoolStat Scoreboard Control is a web-based control panel used by licensed operators to manage live pool match streaming for OBS Studio streaming. This policy explains what data is collected, how it is used, and how it is protected.

2. Data We Collect

YouTube OAuth tokens — when you authorise the app to access your YouTube account, Google provides a short-lived access token and a refresh token. These tokens are stored only in your server-side session for the duration of your browser session and are never written to a database or shared with third parties.
Facebook OAuth token — when you authorise the app to access your Facebook account, Facebook provides a short-lived user access token which is immediately exchanged for a long-lived (~60 day) user token. This token is stored only in your server-side session and is never written to a database or shared with third parties.
Facebook Page access token and Page ID — once you select a Facebook Page to post to, the Page's permanent access token and Page ID are stored in a private MongoDB database solely to allow automated posting on that Page without requiring you to re-authenticate each session. No personal Facebook profile data is stored.
Match and rig configuration — table names, rig identifiers, event names, and OBS scene settings entered by the operator are stored in a private MongoDB database solely to allow configuration to persist across sessions. No personally identifiable information is stored in these records.
Server logs — standard web server logs (IP address, request path, timestamp) may be retained by the hosting provider (Render) for operational and security purposes in accordance with their own privacy policy.

3. How We Use Your Data

YouTube tokens are used exclusively to create and manage YouTube Live broadcasts on your behalf when you initiate a stream from within the app.
Facebook tokens are used exclusively to publish match-day posts to the Facebook Page you configure. No data is read from Facebook beyond confirming the list of Pages you manage during initial setup.
Configuration data is used solely to pre-populate the operator control panel.
We do not use any data for advertising, analytics, or profiling.

4. Google API Services

This application uses the YouTube Data API v3. Use of YouTube features is subject to the YouTube Terms of Service and Google Privacy Policy.

You can revoke the app's access to your Google account at any time via Google Account Permissions.

5. Facebook API Services

This application uses the Facebook Graph API v21.0 to publish posts to a Facebook Page on behalf of the operator. Use of Facebook features is subject to the Facebook Terms of Service, Facebook Platform Terms, and Facebook Data Policy.

The app requests only the minimum permissions required: pages_manage_posts and pages_read_engagement. No data from your personal Facebook profile is accessed or stored.

You can revoke the app's access to your Facebook account at any time via Facebook App Settings. Revoking access invalidates the session token immediately. The stored Page access token can also be removed from within the app's Settings panel.

To request deletion of any Facebook-related data (Page ID and Page access token) held by this service, use the Settings panel to clear the configured Page, or contact brent.wesley11@gmail.com.

6. Data Sharing

We do not sell, trade, or otherwise transfer your data to third parties. Configuration data is stored on MongoDB Atlas infrastructure. Session data is held in server memory on Render hosting. Neither provider has access to your YouTube credentials beyond what is required to operate the service.

7. Data Retention

YouTube and Facebook user OAuth tokens are session-scoped and are discarded when your browser session ends or when you sign out. The Facebook Page access token stored in the database is retained until you remove it via the Settings panel or request deletion. Operator configuration records are retained until explicitly deleted via the admin panel.

8. Security

All communications with this application are encrypted via HTTPS. Sensitive credentials are stored as environment secrets on the hosting platform and are never exposed in source code or API responses.

9. Access and Deletion

Operators may delete any configuration data at any time via the admin panel, including the stored Facebook Page access token. To request complete deletion of any data held by this service, contact the administrator of your PoolStat deployment by emailing brent.wesley11@gmail.com or secretaryportcitycuesports@gmail.com.

10. Changes to This Policy

This policy may be updated from time to time. The date at the top of this page reflects the most recent revision.

11. Contact

For privacy-related enquiries, contact the operator of this PoolStat Scoreboard deployment via emailing brent.wesley11@gmail.com.