delete_forever Right to Erasure / To Be Forgotten (GDPR Art. 17, CCPA & PDPA)

Data Deletion Request

Last updated: September 18, 2026

1. Your Right to Erasure

Under the General Data Protection Regulation (GDPR, Article 17), the California Consumer Privacy Act (CCPA / CPRA), and the Malaysian Personal Data Protection Act 2010 (Act 709), you hold the statutory right to request permanent deletion of all personal data held about you by N.C Scores and its operating entity, Noob Company.

We respect your data sovereignty. When you initiate a deletion request, we completely eradicate your personal identifiers from our production systems within thirty (30) calendar days.

2. How to Delete Your Data

bolt

Option A: Instant Self-Service Deletion

If you have access to your account, you can permanently erase your profile, favorites, setlists, and login credentials instantly through your account settings.

mail

Option B: Manual DPO Request

If you cannot access your account or registered via Google Sign-In, email our designated Data Protection Officer. We will verify your identity and purge your records.

3. What Data Is Permanently Purged?

Upon confirmed account erasure, the following personal records are irrevocably deleted from our Google Firebase databases:

  • Account Identity: Display name, email address, password hashes, and Firebase Auth UID.
  • Music Library Data: Personal repertoire favorites, custom setlists, and song request submissions.
  • Client Preferences: Transposition settings, dismissed notices, and local storage caches.
  • Analytics Telemetry: User-level identifiers in telemetry and event logs.

4. Statutory Retention Exceptions

Please note that certain transaction logs cannot be erased immediately due to legal and regulatory mandates:

Tax & Anti-Money Laundering Regulations: Payment transactions processed via Stripe must be retained for statutory periods (typically 7 years) under Malaysian Inland Revenue Board (LHDN) and international accounting standards. However, your account will be permanently deactivated and disassociated from future usage.

5. Fulfillment Timeline

- Self-Service Erasure: Executed immediately across active databases.
- Manual Email Requests: Processed and confirmed in writing within 30 calendar days of identity verification, free of charge.