ScrumMastr

Legal

Privacy Policy

Last updated: April 29, 2026 (revised for first-party consent banner)

The short version

  • You can use ScrumMastr without an account. No email, no password.
  • Votes inside a room are anonymous to other participants until the host reveals them.
  • We only collect personal data when you sign in for a Pro subscription.
  • We do not sell your data. Ever.
  • On the web we plan to load Google Analytics 4 (visitor measurement) and Google AdSense (ads on the free tier). Neither is loaded until you accept advertising and analytics cookies in our cookie banner.

1. Who we are

ScrumMastr is a product operated by Bliqo OÜ, a private limited company registered in Estonia (registrikood 17327969, KMKR EE102903568), with registered office at Lõõtsa tn 5, 11415 Tallinn, Estonia. Bliqo OÜ is the data controller for the personal data processed via scrummastr.cloud and the ScrumMastr mobile apps.

For all privacy questions, contact us at hello@bliqo.app. Full company details are listed in our imprint.

2. What we collect

2.1 If you use ScrumMastr without an account

You can create rooms and vote without signing up. In that case we process:

  • The display name you enter when joining a room (free text, often a nickname).
  • Your votes within a room (numbers or labels you select).
  • A short-lived participant ID stored in your browser to keep you connected.
  • Standard server logs (IP address, user agent, timestamps) for security and abuse prevention.

2.2 If you sign in (host account)

Hosts can optionally create an account to upgrade to Pro. In that case we also process:

  • Email address and authentication identifiers (Google, Apple, Microsoft, or email + password).
  • Subscription state and entitlement (whether you have an active Pro plan).
  • Custom branding you upload (logo image, brand colors).

2.3 If you participate in a Pro host's room

Pro hosts can export mood history (CSV). The export contains the display names, mood selections, and timestamps of participants in that room.

3. Why we process this data

  • To run the service — votes, participants, and rooms exist so the product works (legal basis: performance of contract).
  • To bill Pro subscriptions — managed via the Apple App Store or Google Play (legal basis: performance of contract).
  • To keep the service safe — abuse prevention, fraud detection, debugging (legal basis: legitimate interest).
  • To fund the free tier with ads — Google AdSense on the web, served to participants in free hosts' rooms. Legal basis is consent, collected via our first-party cookie banner. AdSense is not loaded if you decline.
  • To measure how the website is used — Google Analytics 4 on the web, to count visits, understand traffic sources, and learn which pages and features get used. Legal basis is consent, collected via the same cookie banner. GA4 is not loaded if you decline; no analytics cookies or events are sent.

4. How long we keep it

  • Rooms and votes: deleted automatically when a room is inactive for an extended period.
  • Account data: kept while your account is active, deleted on request.
  • Server logs: retained for up to 90 days for security purposes.
  • Subscription records: kept as long as required by tax and accounting law (typically 7 years).

5. Who we share data with

We only share data with processors that help us run the service. These are:

  • Supabase — database, authentication, and realtime infrastructure (EU region).
  • Apple & Google — for in-app purchase processing of Pro subscriptions.
  • Google AdSense — to serve ads on the web to participants in free hosts' rooms. Not loaded inside the iOS or Android apps.
  • Google Analytics 4 — to measure web visitor behaviour at an aggregate level (page views, traffic sources, feature usage). Configured without advertising remarketing features. Not loaded inside the iOS or Android apps.
  • Hosting providers — to deliver the website and APIs.

We do not sell personal data and we do not share data with third parties for their own marketing.

6. International transfers

We aim to keep data within the EU. Where a processor (such as Google or Apple) transfers data outside the EU, the transfer is covered by Standard Contractual Clauses or an equivalent safeguard.

7. Your rights

Under the GDPR you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate data.
  • Request deletion (the "right to be forgotten").
  • Restrict or object to processing.
  • Receive your data in a portable format.
  • Withdraw consent at any time.
  • Lodge a complaint with your local supervisory authority (for Estonia, this is the Andmekaitse Inspektsioon).

To exercise any of these rights, email hello@bliqo.app.

8. Children

ScrumMastr is built for professional teams and is not directed at children under 16. We do not knowingly collect personal data from children.

9. Cookies

We use a small number of cookies and similar technologies. The full list and their purposes are described on our Cookies page.

10. Changes to this policy

If we make material changes to this policy we will update the "Last updated" date above and, where appropriate, notify signed-in hosts by email.