Privacy Policy

Goaal Ball (goaalball.com) is a live sports scores website and Home Screen app. It is run by [To be confirmed: name of the person or company that runs Goaal Ball]. In this policy, “we” and “us” mean the people who run Goaal Ball.

For any privacy question or request, contact us at [To be confirmed: contact email address].

• You can read scores, fixtures, lineups, tables and news without an account.
• Goaal Ball shows no adverts and uses no analytics or advertising trackers.
• We do not sell your data or share it for advertising.
• We collect only what a feature you choose to use needs: a vote, a chat message, a sign-in or an alert.
• Your favourites, theme and recent searches stay on your own device.
• You can ask us to delete your account and data at any time (see section 10).

When you vote, chat or turn on alerts without signing in. We give your browser a random, anonymous ID (the aura_fan cookie). It is not linked to your name or email. We store it with:

• your match prediction votes (which match, and home, draw or away);
• for alerts: the push subscription your browser gives us (a delivery address from your browser’s push service and its encryption keys), and which matches, teams and leagues you follow.

When you sign in with a nickname. We store the nickname you choose, when you signed in, and whether match chat has been turned off for that sign-in.

When you sign in with Google. We store:

• your Google account ID (a number Google uses to identify your account to us);
• your email address, but only if Google has verified it;
• the web address of your Google profile photo;
• a nickname, which we suggest from your Google name the first time you sign in;
• when you last signed in.

When you post in match chat. We store your message, the match, the time, your nickname and your anonymous ID. Your message and nickname are public: anyone viewing that match’s chat can read them, signed in or not.

Technical information. Like any website, our hosting provider receives your IP address and basic request details (such as the page and your browser type) in order to deliver pages. Goaal Ball does not store IP addresses in its own database. When you open a highlight video, we use the country your connection appears to come from, as provided by our host, only to check whether that video may be shown in your country; it is not saved.

What we do not collect. We do not collect payment details (nothing is for sale), your precise location, your contacts, or your Google password.

When you choose Continue with Google:

1. Goaal Ball sends you to Google’s own sign-in page. You type your password there, never on Goaal Ball.
2. Google asks you to allow Goaal Ball to see your basic profile and email address (the openid, email and profile permissions). We ask for nothing else, so we cannot read your Gmail, contacts, Drive or other Google data.
3. Google sends you back to Goaal Ball with a one-time code. Our server exchanges that code directly with Google, and checks that the answer was issued by Google, for Goaal Ball, for this sign-in, and has not expired.
4. We save the details listed in section 3 and sign your browser in.

If you were already signed in with a nickname on the same browser, your Google account is linked to that nickname so your name carries over. You can remove Goaal Ball’s access at any time in your Google Account under Third-party apps and services. This stops future Google sign-ins; it does not delete what we already hold (see section 10).

• To run the features you use: counting votes, showing match chat, keeping you signed in, and sending the alerts you asked for.
• To keep match chat safe: we can remove messages and turn off chat for a sign-in that breaks the Terms of Service.
• To protect the service: limiting how fast messages can be sent, and keeping the site secure and working.
• We do not use your information for advertising, profiling, or automated decisions about you, and we do not sell it.

Goaal Ball uses only its own cookies, and only those needed for the features below. There are no advertising or analytics cookies.

Your browser’s own storage also keeps, on your device only: your light or dark theme, favourite and pinned teams and leagues, recent searches, and whether you dismissed the install or alerts banners. We never receive these. Clearing your browser’s site data removes them.

Highlight videos are shown in a player from the video’s publisher. That player is a third-party service and may set its own cookies under its own privacy policy.

We share personal information with the services below only as far as each needs it to do its job for Goaal Ball.

These services may process information in countries other than yours. Where we store data: [To be confirmed: the region of the Neon database and Vercel functions].

• All pages and data are sent over encrypted HTTPS connections.
• Sign-in cookies are signed with a secret key held only on our server, cannot be read by page scripts (HttpOnly), and are sent only over HTTPS.
• Google sign-in uses Google’s recommended protections against forged or replayed sign-ins (state, nonce and PKCE checks).
• The database is reached only by our server code, using credentials kept out of the website’s code.
• Votes and alerts use an anonymous ID instead of your name or email.

• Accounts (nickname or Google): until you ask us to delete them.
• Chat messages and votes: until you ask us to delete them, or we remove a message under the Terms of Service.
• Alerts for a single match: removed automatically about two days after the match ends. Team and league alerts stay until you turn them off.
• Push subscriptions: switched off automatically when your browser’s push service tells us the subscription no longer exists.
• Information on your device: until you clear it in your browser.

Things you can do yourself:

• Sign out from the Sign in page; this removes the sign-in cookie from your browser.
• Turn alerts off with the bell on a match, team or league, or block notifications for goaalball.com in your browser or phone settings.
• Clear Goaal Ball’s site data in your browser to remove favourites, settings and cookies from that device.
• Remove Goaal Ball from your Google Account’s connected apps.

Asking us. Depending on where you live, you may have the right to ask for a copy of your data, to correct it, to delete it, or to object to how we use it. To make any of these requests, including deleting your account and data, email [To be confirmed: contact email address] with your nickname and, if you used Google sign-in, the email address of that Google account. We may ask you to confirm the request from that email address so that nobody else can delete your account.

When we delete an account, we remove the account record and the chat messages posted under its nickname. Votes and alerts are stored under your browser’s anonymous ID rather than your account: turning an alert off deletes it, and clearing Goaal Ball’s site data disconnects your browser from its votes. We will complete your request within [To be confirmed: number of days].

You must be at least [To be confirmed: minimum age] to sign in or post in match chat. Some match pages show betting odds, which are for adults (18+) only where betting is legal. If you believe a child has given us personal information, contact us and we will delete it.

If we change how we handle your information, we will update this page and the “Last updated” date at the top.

Questions or requests about your privacy: [To be confirmed: contact email address]. Goaal Ball is run by [To be confirmed: name of the person or company that runs Goaal Ball].