Taiwan (臺灣) - International privacy rights

If the law where you live provides additional rights, identify them in your request.

Preparatory Office of the Personal Data Protection Commission Taiwan Consumer Protection Act iWIN child online safety and complaint information Child and Youth Sexual Exploitation Prevention Act Data and content requests Legal notice 臺灣 Taiwan (臺灣)Privacy Terms Delete data Support International privacy rights Legal notice Open app

Collector, purposes and legal bases

Alexander Goytom, established in Italy, is the personal-data collector and controller. Contact: ertalex@hotmail.it. To provide the requested Free features, NerdScore processes profile, group, game, match, media, session and necessary security data under Article 19(1)(2) of Taiwan's Personal Data Protection Act, on the basis of a contractual or quasi-contractual relationship with appropriate security measures. Google Analytics for Firebase is enabled only after explicit consent under Article 19(1)(5); refusal or withdrawal does not affect core features.

OVHcloud, Firebase App Check, Google Play / Play Integrity and Firebase Hosting perform separate core-hosting, app-attestation, Play-platform-integrity and public-legal-page-delivery tasks. Sharing initiated by a user with chosen private-group members or invitees is part of the requested service. NerdScore does not routinely provide personal data to an independent third party, sell it, use it for advertising or make automated decisions with legal or similarly significant effects.

Period, territory, recipients and cross-border processing

Core profile, group, game, match, media, security-log and backup data is transferred over HTTPS, as the service is used, to OVHcloud in Frankfurt, Germany for hosting, security, backup and support. It remains for the category-specific periods stated in the Privacy Policy. Firebase App Check processes provider attestation material and App Check tokens on Google's global infrastructure when app attestation occurs. App Check does not retain attestation material; tokens remain valid for at most seven days, and the unused replay-protection feature would retain consumed tokens for at most 30 days.

Google Play / Play Integrity encrypts and processes a request hash or nonce, package name, version, signing certificate, Play licence status, and device-attestation certificate and token when integrity is requested; Google states that this data is not transferred to third parties and is deleted after a fixed retention period. Firebase Hosting processes an IP address and HTTP technical information only when a legal page is opened and may retain IP data for a few months. Google Analytics for Firebase processes an app-install identifier, limited usage events and an approximate region only after consent and can be withdrawn at any time. Firebase services may process data where Google or its agents maintain facilities. NerdScore continuously checks the four possible restrictions in PDPA Article 21 and will stop and reassess an affected transfer if a competent authority issues an applicable restriction.

Rights under PDPA Article 3 and response periods

You may request an inquiry or review, a copy, supplementation or correction, cessation of collection, processing or use, and erasure. Use Support, the in-app export or deletion tools, or email ertalex@hotmail.it. NerdScore verifies identity only to the proportionate extent needed to protect other users and explains any lawful restriction or refusal.

A request for inquiry, review or a copy is decided within 15 days; where necessary, that period may be extended once by at most 15 days with written reasons. A request for supplementation, correction, cessation or erasure is decided within 30 days and may be extended once by at most 30 days with written reasons. You may also contact Taiwan's competent personal-data authority through the official links below.

Personal-data incidents under the law currently in force

Under the currently effective PDPA Article 12, where a violation of the Act causes personal data to be stolen, disclosed, altered or otherwise infringed, NerdScore clarifies the relevant facts and promptly notifies affected people by an appropriate method. The notice states the known facts, affected data, possible impact, measures taken and a contact point, and is supplemented as the investigation develops.

The amendments promulgated on November 11, 2025 will introduce authority reporting and other procedures, but their effective date must still be set separately by the Executive Yuan and they are not yet in force. NerdScore maintains future-ready reporting fields and a commencement monitor without presenting those future duties as current law. The notice and incident procedure reopen before the next Taiwan release when an effective date or implementing rules are announced.

Minors, contracts and user content

NerdScore is not directed to people under 16. In Taiwan, a 16- or 17-year-old may use the service only where a parent or legal representative has read the Terms and permitted use of the Free service, content uploads and the content licence described there. This versioned declaration is not identity or age verification, and NerdScore does not collect identity documents for this purpose.

Users retain rights in their content and grant only the defined, non-exclusive licence necessary to provide, protect and moderate the private-group service. Private groups have reporting, formal legal notice, removal, reasons, review and encrypted evidence-preservation routes. Lowering the age limit or adding public or random interaction, advertising, prizes or payment reopens the minors and content assessment.

Taiwan scope and the current Free service

Under PDPA Article 51, the Act may apply when a non-government agency outside the territory of the Republic of China collects, processes or uses personal data of R.O.C. nationals. The current Act and published competent-authority interpretations do not identify a general separate registration or Taiwan-representative appointment for this type of foreign, free, private scorekeeping service. A change in law or service model reopens that conclusion.

The current release is entirely free, with no order, payment, advertising, wager, prize or in-app purchase. Content is shared only inside invited private groups, with no public feed, public profile search or one-to-one chat. Plus, Billing, Ads, sponsorship, public groups or discovery, prizes or another material use change reopens the Taiwan privacy, consumer, minors and platform-law reviews before release. Language changes only the translation, not the selected legal market.

Your rights

You may request access, a machine-readable export, correction, deletion, restriction or portability, and may object where processing relies on legitimate interests. Write to ertalex@hotmail.it; identity checks may be required to protect other users.

You may withdraw analytics consent in the app at any time. You may also complain to your local supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

International privacy rights

We provide every user, regardless of country, a way to request access, a copy, correction, and deletion of their data. We do not discriminate against anyone who exercises a privacy right, and we do not sell or share personal data for money or targeted behavioral advertising.

Changing NerdScore's language changes only the translation you read. It does not change your country, the law that applies, the competent authority, or any mandatory rights you have where you live.

Data controller

The data controller is Alexander Goytom. For privacy, access, export, correction, deletion or removal requests, write to ertalex@hotmail.it.

NerdScore is a scorekeeping service for private board game groups. It does not require an email account and does not sell personal data.