TopScore for Android

Privacy Policy - TopScore

Effective date: August 30, 2026; last updated: September 2, 2026

TopScore ("TopScore", "we", "us", or "our") is an unofficial football scores and statistics app. It provides fixtures, live scores, match details, standings, player and team information, comparisons, search, favorites, and a home-screen widget. This Privacy Policy explains what information is processed when you use the TopScore Android app and the choices available to you.

TopScore is not affiliated with, endorsed by, or sponsored by any football league, club, federation, or governing body.

1. Information you provide

Search terms

When you use search, the words you enter are sent to the TopScore API so it can return matching clubs, players, and competitions. Search begins after at least two characters and a short pause in typing. Search terms are not used to create a user account or advertising profile by us. Please do not enter personal or sensitive information into the football search field.

Feedback email

If you choose Send Feedback, TopScore opens your email app with a draft addressed to us. The draft includes the TopScore version, Android version, Android SDK version, and device manufacturer and model to help us troubleshoot. You may review, edit, or delete this information before sending. Nothing is sent unless you choose to send the email. If you contact us, we receive your email address, message, attachments you choose to add, and the diagnostic details left in the draft.

2. Information stored on your device

TopScore stores the following app data locally:

• IDs of leagues, teams, and players you follow;
• theme mode and selected color palette;
• a developer-server address in debug/development builds, if configured;
• cached football responses and images used to improve loading and limited offline availability; and
• advertising consent status and choices stored on the device by Google's User Messaging Platform, together with temporary in-memory advertising state.

TopScore does not upload a standalone favorites list to our backend. However, when the app retrieves details for followed items, the relevant football IDs are necessarily included in those content requests.

Android backup is enabled for the app. Depending on your device, Android version, account, and backup settings, app preferences may be included in an encrypted Google backup or copied during device transfer. This process is controlled by Android and your backup provider, not by the TopScore backend. See Google's Android backup information.

3. Information processed automatically

TopScore API requests

The app connects to https://topscore.tofalabs.com/api/ to obtain public football content. Requests can include dates, page and filter choices, and football identifiers such as a fixture, league, season, team, or player ID. Our server and hosting infrastructure may also automatically receive standard network metadata such as IP address, request time, requested URL, response status, and user-agent or similar device/network information. We use this information to deliver content, maintain availability, prevent abuse, secure the service, and diagnose technical problems.

Images and flags

Team crests, competition logos, player images, and country flags can be loaded directly from third-party asset hosts, including API-Sports media servers and FlagCDN. Those hosts receive the network information ordinarily needed to deliver a file, including your IP address, the requested image, and request metadata. Their handling of that information is governed by their own terms and privacy practices.

Google AdMob and User Messaging Platform

TopScore uses the Google Mobile Ads SDK (AdMob) to display banner and native advertisements. Google and its advertising partners may collect or process information such as:

• IP address and approximate location inferred from it;
• advertising identifiers, app-set identifiers, and other device identifiers where available;
• device, operating system, language, network, and app information;
• ad impressions, ad exposure, clicks, interactions, and advertising performance; and
• diagnostic, fraud-prevention, and security information.

Where required by applicable privacy rules, TopScore uses Google's User Messaging Platform (UMP) to determine whether a privacy message is required, present advertising choices, and remember the user's selection. UMP may process consent status, app and device information, and regional applicability signals for these purposes. Ads are not requested until UMP indicates that ad requests are permitted under the configured message.

Google uses this information to deliver and measure ads, limit repetition, detect fraud and abuse, and, where permitted, personalize advertising. Even non-personalized ads can use identifiers or local storage for frequency capping and aggregated reporting. Learn more in the Google Privacy Policy, How Google uses information from apps that use its services, and Google's Advertising information.

Firebase Analytics and Crashlytics

TopScore uses Google Analytics for Firebase to understand app usage in aggregate and Firebase Crashlytics to detect, diagnose, and fix crashes and non-fatal technical errors. Depending on device settings and availability, these services may automatically process:

• an app-instance identifier, Firebase installation identifier, Crashlytics installation UUID, and Advertising ID where available;
• approximate location inferred from a masked IP address;
• device model, operating system, app version, language, network, and other app or device metadata;
• app lifecycle, session, screen-view, and interaction events;
• crash stack traces, relevant app and device state, crash counts, and diagnostic information; and
• developer-supplied diagnostic details, currently limited to the TopScore version and non-fatal UMP consent-flow error messages.

Crashlytics may also use Analytics breadcrumb events showing app actions that occurred shortly before a crash. TopScore does not set a Firebase user ID or intentionally attach your name, email address, football search terms, or favorites to Firebase reports. Firebase information is used for aggregate usage measurement, crash reporting, troubleshooting, and improving app stability. Learn more in Google's Privacy and Security in Firebase documentation and the Google Privacy Policy.

Where the published Google privacy message includes consent for Analytics, the user's UMP selection is also interpreted through Google Consent Mode for Analytics storage. Available choices can be reviewed through TopScore Settings → Manage ad privacy when that entry is required.

4. How information is used

Information described in this policy is used to:

• provide live scores, fixtures, standings, football statistics, search results, and followed-item views;
• remember app settings and customize the app on your device;
• load, measure, and secure advertising;
• measure aggregate app usage and diagnose crashes and non-fatal errors;
• operate, protect, troubleshoot, and improve the app and API;
• respond when you choose to contact us; and
• comply with law and enforce applicable terms.

5. When information is shared

Information may be shared or made available in these circumstances:

• Google and advertising partners: through the Google Mobile Ads SDK and User Messaging Platform for the advertising and consent-management purposes described above.
• Google Firebase: through Analytics, Crashlytics, Firebase Installations, and Firebase Sessions for aggregate usage measurement, crash reporting, diagnostics, and app-stability purposes.
• Infrastructure and content providers: providers that host the TopScore API or deliver football images and flags.
• Your chosen apps: when you intentionally use Android's share sheet or send a feedback email. The selected app's privacy policy applies.
• Legal and safety reasons: if reasonably necessary to comply with law, protect rights or safety, investigate abuse, or secure the service.
• Business changes: in connection with a merger, acquisition, financing, reorganization, or sale of relevant assets, subject to applicable law.

We do not sell your personal information for money. Google's processing for personalized or targeted advertising may be considered "sharing," "sale," or "targeted advertising" under some privacy laws even when no money is exchanged.

6. Permissions and device access

The app or its included advertising SDK uses these Android capabilities:

• INTERNET: fetch football data and images, load ads, and open online content.
• ACCESS_NETWORK_STATE: detect network availability.
• AD_ID and Android Privacy Sandbox advertising capabilities: advertising, measurement, attribution, and related controls where available. These may be added to the final app manifest by the Google Mobile Ads SDK.

TopScore does not request runtime access to precise or approximate device location, camera, microphone, contacts, calendar, call logs, SMS, photos, media, files, or notifications.

7. Advertising choices

Your available advertising choices depend on your device, Google account, region, and applicable law. You can review ad personalization controls in Android settings and in Google My Ad Center. Android versions that provide an Advertising ID also let you reset or delete that identifier in system privacy or ads settings. Limiting personalization does not necessarily remove ads.

In regions where Google requires a privacy-options entry point, you can review or change your advertising choices from TopScore Settings → Manage ad privacy. Withdrawing consent can result in non-personalized or limited ads rather than removing advertising entirely.

8. Data retention

• Local app data: remains until you change it, clear TopScore's storage, or uninstall the app, subject to any Android cloud backup or device-transfer copy.
• API and infrastructure records: standard server and security records, if generated, are kept only as long as reasonably necessary for operations, security, abuse prevention, and legal obligations.
• Feedback: correspondence is kept as long as needed to respond, maintain support history, protect legal rights, and meet legal obligations.
• Advertising, consent, Analytics, Crashlytics, Firebase installation/session, and Android backup data: is retained by Google and relevant providers according to their policies, retention settings, and your choices.

9. Accessing or deleting information

TopScore has no end-user account to delete.

• To delete local preferences and cache, use Android Settings → Apps → TopScore → Storage → Clear storage, or uninstall TopScore.
• Manage or delete Android device backups through your Android or Google account backup settings.
• Manage applicable in-app advertising consent choices through TopScore Settings → Manage ad privacy, and manage Google's advertising activity through Android ads settings and Google My Ad Center.
• Clearing TopScore's storage or uninstalling the app removes local Firebase identifiers from that installation and stops future collection from that copy of the app. Previously collected Analytics and Crashlytics records are subject to Google's retention and deletion processes.
• To request access to or deletion of information you sent directly to us, email tofa.du@gmail.com.

Because TopScore does not create an end-user account and does not assign its own persistent user ID, we may be unable to identify a particular person in ordinary API records without sufficient details. We will not collect extra personal information solely to identify you unless required by law.

10. Your privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, restriction, portability, or objection regarding your personal information, and to withdraw consent where processing relies on consent. You may also have the right to appeal a response or complain to your local data-protection authority. To exercise a right concerning information controlled by us, contact us using the address below. Google-controlled data and choices should also be managed through Google's privacy tools.

11. Legal grounds and international processing

Where a legal basis is required, we process information as necessary to provide requested app functions, for legitimate interests such as operating and securing the service and responding to support requests, to comply with legal obligations, and on the basis of consent where applicable. Google and other providers may process information in countries other than your own and apply the safeguards described in their policies.

12. Children's privacy

TopScore is a general-audience sports app and is not directed to children under 13 (or the higher minimum age required in a user's country). We do not knowingly collect personal information directly from children. If you believe a child has sent personal information to us, contact us so we can review and, where appropriate, delete it.

13. Security

The production TopScore API uses HTTPS, and local app data is protected by Android's application sandbox. We use reasonable technical and organizational safeguards appropriate to the information processed. No network transmission or storage method is completely secure, so absolute security cannot be guaranteed.

14. Changes to this policy

We may update this policy when TopScore's features, service providers, or legal obligations change. We will revise the "last updated" date above. If a change is material, we will provide additional notice where required.

15. Contact

For privacy questions or requests, contact:
TopScore / Tofa Labs
Email: tofa.du@gmail.com