Privacy Policy

Data controller

Goalpit is responsible for the personal data collected on this site. For requests to access, correct, port or delete your data, write to [email protected]. We reply within 30 days.

What data we handle

• Account: email address and sign-in method (password or Google).
• Public profile: the name and avatar you choose, shown in rankings and leagues.
• Game activity: puzzle results, points, streaks, league membership and a copy of your progress so it follows you to other devices.
• Without an account, your progress, streaks and settings stay only in your own browser.
• We do not collect payment data, precise location, contacts or special categories of data. We never ask for your real name.

Advertising

Goalpit shows no ads for now. If we add them, in regions that require consent (EU, EEA and UK) we will ask for your choice through a certified consent platform before any ad cookie is used, and we will update this page first.

Visit statistics

We use no analytics cookies for now. To learn whether people come back, once a day your device tells us the date you first opened Goalpit and today's date. There is no identifier and no cookie, and it is skipped if your browser asks not to be tracked. If we add analytics later, we will ask for your consent first where the law requires it.

Passwords

Your password is stored only as a secure, irreversible hash. We can never read or recover the original. If you forget it, we send a time-limited link to your email to choose a new one. Your session is kept with a secret key on your device.

Legal bases and purposes

• Providing the service you ask for: account, results, leagues and rankings.
• Legitimate interest in keeping the service safe, stable and free of abuse. IP addresses are only hashed to limit abuse and are not stored.
• Consent, when you tick optional boxes (news by email) or accept cookies where required.

Processors and transfers

• Hosting provider: runs the site, API and database.
• Google: sign-in, only if you choose to sign in with your Google account.
• When data is transferred outside the European Economic Area, it is done under the standard contractual clauses of the providers.

Retention

• Account and profile: while the account exists. Deleting it removes your results, leagues and saved progress, and the keys of all your devices.
• Codes to use Goalpit on another device: 15 minutes, or until first use.
• Penalty duels: the name you typed, your shirt and the kicks are deleted within a day.

Your rights

You can delete your account and data yourself from your Profile page. For access, correction, export or objection, write to [email protected]. You can also complain to the competent data protection authority (in Portugal, the CNPD).

Minors

The service is for people aged 18 or over. The puzzles are recreational and are not betting or gambling advice.