Privacy policy
We keep only what it takes to flash your lights when your teams score, and you can delete all of it yourself.
What we keep
- Your sign-in: your email address and, if you sign in with Google, your name. Passwords are handled by Amazon Cognito; we never see them.
- Your LIFX token and Govee API key, and the last four characters of each to show you which one is connected. They're stored encrypted and never sent back to your browser.
- Your lights: each light's LIFX or Govee id (and, for Govee, its model), its name, and the TV delay you set.
- Your teams and any colors you picked for them.
- Your plan. If you pay, Stripe handles the card. We keep the Stripe customer and subscription ids and the plan's status, never card numbers.
- Messages you send from the contact page, so we can answer them.
- Anonymous visit counts: which pages are opened, which site linked here (or which ad, when you came from one), and errors pages hit. No cookies, nothing that identifies you.
If you came from one of our ads
We advertise on Google. If you arrive by clicking one of our Google ads, your browser remembers that for 90 days, and our pages load Google's ad tag. It sets a Google cookie so Google can tell us that an ad led to a new account or a paid plan, as a count. We turn off ad personalization in the tag, and we never send Google your email, your lights or your teams. If your browser sends Global Privacy Control or Do Not Track, the tag doesn't load at all. Visitors who didn't come from an ad never get the ad tag or its cookie. Google's own ad policies describe what it does with ad clicks.
Links to stores
Our which lights work page links to stores such as Amazon. If a link is an affiliate link, the page says so, and we may earn a small commission on what you buy, at no cost to you. The store sees that you came from us; we don't see what you buy.
What we use it for
To run illumiscore: find and flash your lights when your teams score, show you your settings, take payment for paid plans, and answer you. We don't sell your information or use it to target ads.
Who else sees it
- LIFX receives requests made with your token, to list and flash your lights.
- Govee receives requests made with your API key, to list your lights, read their state, flash them and put them back.
- Stripe processes payments for paid plans.
- Amazon Web Services hosts the site, the database, sign-in, and our email.
- Google, if you choose to sign in with Google, and through its ad tag if you came from one of our Google ads (see above).
Deleting it
Disconnect LIFX or Govee on your dashboard to forget that token or key and its lights. Delete your whole account under Settings → Delete account: that removes your sign-in, token, key, lights and teams right away, and cancels a subscription. Stripe keeps payment records as the law requires. You can also delete the token itself at cloud.lifx.com.
Changes
If this policy changes, the new version is posted here with a new date.
Contact
Questions about your data: contact us or email joey@thompsonswe.com. illumiscore is run by Thompson SWE LLC, Atlanta, Georgia.
Last updated October 26, 2026.