Last updated: 19 May 2026
CSWStats ("we", "us", "our") is committed to protecting your personal data. This policy explains what data we collect, why, and how we use it, in line with the UK General Data Protection Regulation (UK GDPR).
The data controller is CSWStats, contactable at hello@cswstats.com.
| Data | Why we collect it | Legal basis |
|---|---|---|
| Email address | Account creation, login, service communications | Contract |
| Password (scrypt hash) | Account authentication | Contract |
| DartCounter password (Fernet-encrypted at rest) | Refreshing your DartCounter access token when it expires | Contract |
| DartCounter access token (Fernet-encrypted at rest) | Fetching your match history and statistics from DartCounter | Contract |
| Darts performance data | Powering your analytics dashboard | Contract |
| Throw coordinate data (Omni users only) | Powering Pro throw analytics | Contract |
| Stripe customer ID | Managing your subscription | Contract |
| Session cookies | Keeping you logged in | Legitimate interest |
We do not sell your data. We do not use your data for advertising.
We retain your account data for as long as your account is active. If you delete your account, we will permanently delete your personal data within 30 days, except where we are required to retain it for legal or accounting purposes (e.g. payment records for up to 7 years under UK law).
We use the following cookies:
_ga, _ga_*) - only set if you click Accept on the cookie banner. Used to count visitors and see which pages get the most attention. IPs are anonymised. You can change your mind any time by clearing this site's cookies in your browser.We do not use advertising cookies, retargeting, or third-party trackers beyond Google Analytics.
You have the right to:
To exercise any of these rights, email hello@cswstats.com. We will respond within 30 days.
You also have the right to lodge a complaint with the UK's data protection authority, the Information Commissioner's Office (ICO).
Your CSWStats password is stored as a scrypt hash and is never readable by us in plaintext. Your DartCounter credentials (password and access token) are encrypted at rest using symmetric AES-128 in CBC mode (via Fernet) with HMAC-SHA256 integrity. All data in transit is encrypted via HTTPS/TLS. We apply industry-standard server security practices to our Oracle Cloud infrastructure, including rate limiting on authentication endpoints to prevent brute-force attacks.
CSWStats is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe a child has registered, please contact us and we will delete the account.
We may update this policy. We will notify registered users by email before significant changes take effect.
Privacy questions or data requests: hello@cswstats.com