Privacy Policy

Criczo is a cricket app: you score matches, run tournaments, join squads and book grounds. This page says what we collect to do that, why, and what you can ask us to delete. It covers criczo.co.in and the Criczo app, both operated by CODEJUNCTIONS PRIVATE LIMITED.

What we collect

Because you gave it to us. Your mobile number, which is how you sign in and how a captain adds you to a squad. Your name and city. Optionally an email address, date of birth, gender, playing role and a profile photo.

Because you used the app. Matches you play or score, ball by ball; the teams and tournaments you belong to; ground bookings you make; photos and clips you upload to a match.

Automatically. A count of how many times your profile has been opened, and ordinary server logs — IP address, browser, time of request — which we keep for security and to find faults.

Through Google Analytics. Which pages are opened and roughly where from, so we can see what people actually use. It is aggregate measurement, not a record of what you personally did.

If you allow notifications. A push subscription for that browser, linked to your Criczo account so a message about your match reaches you and not everybody.

Through Microsoft Clarity. A recording of how pages were used — taps, scrolling, where people get stuck. What you type is masked and never captured, so a PIN or a one-time code cannot appear in a recording. We use it to find the screens that are confusing.

We do not collect your contacts, and we do not sell or share your data with advertisers.

Why we collect it

• To sign you in. The one-time code goes to your number, or your email if you verify one.
• To make the app work: squads, scorecards, tournament tables and bookings all need to know who you are.
• To keep your history. A verified email is how you get back into an account if you ever change your number — mobile numbers get recycled.
• To prevent abuse, and to fix things when they break.

What other people can see

Cricket is played in public, and a scorecard is a shared record. Your name, city, photo, playing role and match statistics are visible to other people using Criczo — that is the point of a profile. Your mobile number and email address are not shown to other users.

Who we share it with

We do not sell your data. We pass it to a small number of services that make the app work:

• Fast2SMS — your mobile number, to deliver a sign-in code.
• Hostinger — your email address, to deliver a verification code and account email.
• Google — if you choose Sign in with Google, Google tells us your email address, name and whether Google has verified that address. We ask for nothing else, and we do not get access to your Google account.
• Amazon Web Services — storage for photos and clips you upload.
• OneSignal — delivers the push notifications you opted into. It receives a subscription identifier for your browser and your Criczo account id, so a notification can be sent to you rather than to everybody.
• Google Analytics — which pages are opened, so we can tell what is worth building. No cricket data and no contact details go to it.
• Microsoft Clarity — how pages are used, so we can see where people get stuck. Typed input is masked before it leaves your browser.

We will also disclose data if the law requires it, and we will tell you unless we are forbidden from doing so.

Payments

When you pay for a ground booking, the payment is handled by our payment gateway. Your card number, CVV, UPI PIN and net-banking credentials go straight to them — they never reach Criczo’s servers, and we could not show them to you if you asked.

• We keep what a receipt needs: the amount, the date, whether it succeeded, the method used (UPI, card, cash) and the gateway’s own reference for it.
• For a card we may see the last four digits and the card type, because the gateway returns them so you can recognise your own payment. That is all of the card we ever hold.
• A venue owner sees the payout account they entered themselves, and the bank reference of money we have settled to them. They do not see your payment details.
• Payment records are kept for as long as tax and accounting law requires, which is longer than the rest of your data. Deleting your account does not erase a transaction that has already happened.

Sign in with Google

Signing in with Google only ever connects you to a Criczo account that has already verified the same email address. It does not create an account on its own, and it does not read your Gmail, Drive, contacts or calendar. You can disconnect Criczo at any time from your Google account permissions; you will still be able to sign in with your mobile number.

How long we keep it

Your account and its cricket history stay until you ask us to delete them. Sign-in codes are discarded within minutes. Server logs are kept for a short period and then removed.

Your choices

• Edit or remove most of your profile yourself, in the app.
• Turn notifications off at any time — in the app, or in your browser’s own site settings. Nothing else stops working.
• Ask for a copy of your data, or for your account to be deleted, by emailing us. We will act within 30 days.
• Deleting your account removes your profile. Match scorecards you took part in remain, because they are a shared record belonging to every team in that match, but they will no longer be linked to you.

Keeping it safe

Traffic is encrypted in transit. Your PIN is stored only as a hash, and the sign-in code is hashed too — neither can be read back out of our database, by us or by anyone else. Your session is held in a cookie that JavaScript cannot read.

Children

Criczo is not intended for children under 13. If you believe a child has given us information, email us and we will remove it.

Changes

If we change this policy we will update the date at the top, and tell you in the app if the change is significant.

Contact

CODEJUNCTIONS PRIVATE LIMITED — write to info@criczo.co.in.