ScoreBox Privacy Policy

Last updated: November 2, 2026

ScoreBox is built by Dark Forest Studios LLC (“Dark Forest Studios,” “we,” “us”). This policy explains how the ScoreBox app handles information.

The short version: ScoreBox has no accounts, and nothing you enter into the app is sent to us. Our only server provides sports data. It keeps a small amount of technical information, such as standard traffic records, which we use only as totals to run the service. None of it is linked to who you are.

We never collect your provider details (playlist addresses, logins, channel lists) or what you watch.

What our sports data service keeps

The app has no sign-in or account system and does not send us your name, email address, or other personal information.

Dark Forest Studios operates one backend service for ScoreBox, and it handles sports data only: scores, schedules, and which networks carry which games. To use it, the app shows proof that ScoreBox was purchased: the App Store's signed purchase record on Apple TV, or Google Play's license check on Android TV. The service checks that proof and returns an access token. It keeps the following:

• A scrambled purchase identifier. The service turns the purchase identifier into a one-way scrambled code that cannot be turned back into the original. This lets the service recognise a valid purchase and honour refunds. Nothing else from the purchase record is kept. It is deleted after 60 days without use.
• A short-lived abuse counter. To limit how often one device can use a temporary access pass, the service keeps a scrambled device code and a daily count for about two days.
• Standard traffic records. Our hosting provider keeps standard records of requests to the service, including IP addresses, for about a month. We use them, together with an approximate country derived from the IP address, only as totals, such as the number of unique devices by app version and by country. We use these totals to run the service, control costs, and prevent abuse. These records include which data files a device requested (for example, a league's schedule), but never what you watch.
• Sign-in statistics. Counts of successful and failed purchase checks by platform and app version, with no identifiers, kept for about three months.

Access tokens are not kept by the service; they stay on your device and expire within three days. Because none of this is tied to a person, we can't look up or delete one person's records, but all of it is deleted automatically after the periods above.

None of this is linked to who you are, sold, shared for advertising, or used to track you across apps or websites.

What ScoreBox stores on your device

So the app can work, ScoreBox saves the following in your device's local app storage only:

• The IPTV playlist details you provide: the M3U URL, or the Xtream Codes host and login.
• Your followed leagues, teams, and channels, and any channel pins.
• App preferences.

This information stays on your device. It is not uploaded to us, and it is removed if you delete the app. If you turn on iCloud sync on Apple TV or backup on Android TV, Apple or Google stores a copy in your own account. That is the platform's feature, and we cannot access it.

Network requests ScoreBox makes

ScoreBox is a connected app. It contacts the following services from your device:

• Our sports data service. ScoreBox gets scores, schedules, and broadcast information from our own service, which collects them from an aggregate sports data API. Requests carry the access token described above and no personal information.
• The app store. To prove the purchase, the app reads the purchase record from the App Store, or runs Google Play's license check, through the platform's own system.
• Your IPTV provider. ScoreBox loads channel lists, program data, and video streams from the playlist server that you configure. Those requests go to your provider, exactly as they would in any IPTV app. That provider is a third party with its own privacy practices, which we do not control.

As with any internet request, the services your device contacts can see your device's IP address. Our sports data service uses it only as described above.

No analytics, advertising, or tracking

ScoreBox contains no advertising, no third-party analytics SDKs, and no tracking technologies. Apple and Google may provide us with standard App Store metrics, such as total download counts. If you chose in your device settings to share crash reports and usage statistics with app developers, Apple or Google may also share those with us. That is the platforms' feature, not something the app collects.

Children's privacy

ScoreBox is not directed to children and does not knowingly collect information from anyone, including children under 13.

Changes to this policy

We may update this policy from time to time. When we do, we will revise the “last updated” date above.

Contact

Questions about this policy? Email info@darkforeststudios.net.