Privacy policy
For the app The Fines Box (Bødekassen). Last changed 30 October 2026.
Who is responsible
The Fines Box is made and run by ShieldCastle Labs (Søren Børsting Skjoldborg), Denmark, who is the data controller. Write to contact@thefinesbox.com about anything to do with your information.
What we store
- Your account: your email address, the name you type, the app's language, and how you log in (code by email, Apple or Google). If you log in with Apple and choose "Hide My Email", we only get an address from Apple that forwards to you.
- Your teams: which teams you're on, your roles (e.g. admin or fines judge), requests to join, and the team's name, logo, colours and links.
- Fines: the team's list of fines, fine proposals, approved fines, corrections and comments, and who gave or proposed them. If you send an anonymous proposal, only the team's fines judges can see that it was you.
- Suggestions: suggestions for the fine library and for translations of the team's fines.
We don't use ads, tracking or analytics tools, and we don't sell information.
Why, and on what basis
We use the information to give you and your team the app: log you in, show the team's fines, ranking and members, and send you login codes. The basis is that this is necessary to provide the service you asked for (GDPR Article 6(1)(b)). Technical logs, e.g. IP addresses at login, are used for security and fixing errors (Article 6(1)(f), our legitimate interest in a secure app).
Who can see it
What you do on a team can be seen by the others on the team: your name, your roles and the team's fines. Each team only sees its own information. We use these suppliers (data processors):
- Supabase – database, login and images. Servers in Ireland (EU).
- Resend – sends login codes by email. Sent from Ireland (EU).
- Expo (USA) – delivers app updates. Sees your phone's IP address and the app's version when the app checks for an update.
- Apple and Google – only if you choose to log in with them.
- GitHub (USA) – shows this website.
Suppliers in the USA are used under the EU's rules for transferring information (the EU-US Data Privacy Framework or the EU's standard contractual clauses).
How long
We keep the information for as long as you have an account. You can delete the account in the app under Profile → Delete account. Your email, name and login methods are then deleted. Fines you got or gave stay in the team's history as "Former player" without your name, so the team's accounts still add up. If you leave a team, your fines stay in the team's history.
Your rights
You have the right to see the information we hold about you, have it corrected or deleted, get a copy of it, restrict its use and object. Write to contact@thefinesbox.com. You can also complain to the Danish Data Protection Agency (datatilsynet.dk).
Age
The app is for people aged 13 and over.
Changes
If we change the policy, we update the date at the top, and we tell you about bigger changes in the app.