BBQ Scorecard by Holy Smokes BBQ Co · Last updated October 14, 2026
BBQ Scorecard is made by Holy Smokes BBQ Co ("we"). This policy explains what data the app and website handle, why, and the choices you have. It applies to the BBQ Scorecard app (Android and iOS), the web version at holysmokesbbqco.com/scorecard/, and the pages of holysmokesbbqco.com.
Your account (only if you sign in). Name, email address, and profile photo from your Google or Apple account, or the email you sign up with, plus a friend code the app generates. We use these to run your account, sync your reviews between devices, and let friends you approve see what you share. Legal basis: performing our agreement with you (GDPR Art. 6(1)(b)).
Your content. The reviews you write: restaurant names, scores, notes, dates, and any photos you attach. Photos you attach stay with your content on your device; when cloud sync is available they are stored in Google Firebase Storage. Everything else syncs to Google Firestore. Your content is visible to you and, where you share it, to friends you have approved. Nobody else can read it. Legal basis: performing our agreement with you.
Usage analytics (only with your consent). With your permission we use Google Analytics and Firebase Analytics to see which features get used, so we know what to improve. In the app, this is off until you say yes and you can change your mind any time in Settings. On the website, visitors in the EEA, UK, and Switzerland are asked before analytics runs; elsewhere on the website it runs by default. Analytics is not linked to your account, name, or email. Google Analytics also records standard device and browser information, including an approximate location estimated from your IP address. Legal basis: consent (Art. 6(1)(a)).
Crash reports. The mobile apps send crash logs and basic diagnostics through Firebase Crashlytics so we can fix failures. Legal basis: our legitimate interest in keeping the app working (Art. 6(1)(f)). You can object using the contact below.
Location (only when you use BBQ Near Me). If you tap BBQ Near Me and allow location access, your coordinates, at the precision your device reports, are sent to the OpenStreetMap Overpass API to find barbecue spots near you, and OpenStreetMap map tiles load around that point (the tile servers receive your IP address and the map area you view). We do not store your coordinates. Legal basis: performing the lookup you asked for.
We do not sell your data. We do not run ads. We do not share your content with anyone except the friends you approve.
Google (Firebase: sign-in, database, photo storage, analytics, crash reports) and Netlify (website hosting). When you use BBQ Near Me, OpenStreetMap receives the coordinates you search from (Overpass API) and your IP address and the map area you view (tile servers). These providers process data on our instructions, except OpenStreetMap, which handles the lookup under its own privacy policy. Fonts are served from our own site; no font provider receives anything.
Our servers are in the United States. If you use the app from the EEA, UK, or Switzerland, your data is transferred to the US. Google LLC is certified under the EU-US Data Privacy Framework, and standard contractual clauses apply where required.
Account data and your content: until you delete them or your account. Analytics data: up to 14 months. Crash logs: per Firebase Crashlytics retention (90 days). Data on your own device stays until you delete the app or clear its data.
Wherever you live, you can ask us for a copy of your data, ask us to correct or delete it, restrict or object to processing, take your data elsewhere, and withdraw consent at any time. To withdraw analytics consent on the website, use the "Analytics choices" link in the page footer; in the app, use the analytics setting in Settings. Our website does not respond to Do Not Track or Global Privacy Control browser signals; those two controls are how you turn analytics off here. Email datadelete@holysmokesbbqco.com and we will respond within a month. Deleting individual reviews in the app removes them from our servers immediately; full account deletion is described at our account deletion page and completed within 7 days. If you are in the EEA or UK you can also complain to your data protection authority (in the UK, the ICO).
BBQ Scorecard is not directed at children under 16, and we do not knowingly collect their data.
If this policy changes, we will update this page and the date above.