BBQ Scorecard by Holy Smokes BBQ Co · Last updated May 24, 2026
BBQ Scorecard by Holy Smokes BBQ Co is a restaurant review tool. It lets you score BBQ restaurants, track visits, keep notes, and compare scores with friends.
This app stores data in two places depending on whether you sign in:
Without signing in: All data stays on your device in your browser's localStorage. Nothing is sent to any server.
With signing in: Your data is stored in a Google Cloud Firestore database hosted under the Firebase project "holy-smokes-bbq-scorecard." This is a real cloud database managed by Google. Data stored in Firestore includes everything listed in the "What Data We Collect" section below. Your local device also keeps a copy in localStorage so the app works offline.
The app uses Firebase Authentication with Google sign-in. When you sign in, we receive your name, email address, and profile photo URL from your Google account. This information is used to identify you within the app and to your friends. We do not access any other Google account data.
If you sign in, the following data is collected and stored in Cloud Firestore:
Your profile: display name, email address, profile photo URL, and a unique friend code (e.g. BBQ-7K3M).
Your reviews: restaurant names, locations, dates visited, category scores (1–9 scale across 10 categories), menu selections, sauce dependency, would-return rating, notes, price information, trip labels, and other review data you enter.
Your friends list: the user IDs, display names, and friend codes of users you connect with. Friend connections are bidirectional — when you add someone, they also see you.
What is NOT stored in the cloud: Photos you attach to reviews stay on your device only. They are stored in your browser's localStorage and are never uploaded to Firestore or any other server.
When you add a friend by exchanging friend codes, they can see your restaurant reviews (scores, restaurant names, locations, dates, and notes). You can see theirs. This is the entire point of the friends feature.
No data is shared with anyone you have not added as a friend. Your reviews are only visible to you and your confirmed friends.
We do not sell, rent, or share your data with any third parties. There are no ads, no analytics services, and no tracking scripts.
The app uses the following third-party services:
Firebase Authentication (Google): handles sign-in. Subject to Google's privacy policy.
Cloud Firestore (Google Firebase): the database where user profiles, reviews, and friend connections are stored when signed in. Data is hosted on Google Cloud infrastructure. Subject to Google's privacy policy.
OpenStreetMap via Leaflet: map tiles for the map and nearby views. No personal data is shared beyond standard HTTP requests for map tile images.
Overpass API (OpenStreetMap): used by the BBQ Near Me feature to search for nearby restaurants. Your coordinates are sent as part of the search query. No account or personal data is shared. Subject to OpenStreetMap's usage policies.
Google Analytics / Google Tag Manager: anonymous usage analytics. Subject to Google's privacy policy.
Netlify: website hosting and CDN. Netlify serves the app files but does not have access to Firestore data. Subject to Netlify's privacy policy.
The “BBQ Near Me” feature uses your device’s location (GPS or network-based) to find BBQ restaurants nearby. Location data is sent to the Overpass API (OpenStreetMap) as coordinates in the search query. Your location is not stored, logged, or sent to any other service. The app only accesses your location when you tap the Nearby button and you have granted permission. You can revoke location access at any time in your device settings.
The app stores review data, photos, theme preferences, and geocoding cache in your browser's localStorage. This data never leaves your device unless you sign in, at which point review data (excluding photos) is synced to Cloud Firestore.
The app uses Google Analytics and Google Tag Manager to track anonymous feature usage (which screens are viewed, which actions are taken). No personal information is included in analytics events. Firebase Authentication uses browser storage (localStorage/IndexedDB) for session management, not cookies.
Cloud Firestore is protected by security rules that restrict access. Users can only read and write their own data. Friend review data is accessible only to confirmed friends. All data in transit is encrypted via HTTPS.
You can delete individual reviews from within the app. Deleted reviews are removed from both your device and Cloud Firestore (if signed in).
To request full account deletion, visit our account deletion page or email datadelete@holysmokesbbqco.com. We will remove your Firestore profile, all reviews, and all friend connections within 7 days.
To clear local data, clear your browser's site data for this domain.
This app is not directed at children under 13 and does not knowingly collect any information from children.
If this policy changes, the updated version will be posted at this URL with a new date.
For questions about this policy, account deletion, or anything else, email support@holysmokesbbqco.com or visit our GitHub: github.com/HolySmokesBBQ/BBQ-Scorecard