Rules & privacy
Cookies and browser storage
What stays on your device and what changes when you clear it.
On this pageView contents +
Staying signed in
Sign-in uses the session cookie gg_user_session. Recovery cookies such as gg_user_recovery and __Secure-gg_account_recovery support restoring a valid remembered session. A recovery key is also stored in localStorage and IndexedDB.
The current default account-session lifetime is up to 365 days and can renew with use. Signing out revokes the active session and its recovery credentials. The separate administrator session has a 12-hour lifetime.
Preferences and saved items
Browser storage contains language, view preferences, filters and local copies of saved items. Examples include bb_public_language, goalgrid_favorite_teams and goalgrid_favorite_leagues. Pending account changes can also be kept locally until synchronisation succeeds.
Some values persist until changed or removed. Session storage belongs to the current browser session. Cached page data helps the application show a previous snapshot while a fresh request is pending.
Website usage statistics
Anonymous server statistics. When a public HTML page is successfully delivered, the server records aggregate pageviews, page paths, entry pages, device categories, traffic-source categories and locally derived country totals. Obvious bots, link previews, browser prefetches and unusually high request rates are excluded. Daily unique visitors are estimated with an aggregate probabilistic bitmap; sessions use a one-way signature held in memory for up to 30 minutes. The IP address and user-agent are processed transiently for filtering, the estimate and local country lookup, but neither raw values nor visitor identifiers are written to the statistics. Query parameters, fragments and account IDs are also excluded. Successful account creation is stored only as an aggregate daily count. This measurement does not store or read anything on your device and cannot be switched off through the optional-analytics control.
Optional Umami analytics. More detailed usage statistics use Umami, hosted at stats.goalgridai.com, to help improve pages and features. No analytics panel opens automatically. Umami stays off unless you enable it manually in Settings → Privacy or with the button below. Using or browsing the website does not grant consent, and the website and account features work without Umami.
When allowed, the browser sends the page path, browser language, screen dimensions and selected interaction names. We remove URL query strings, fragments, referring-page addresses, custom event data and account identifiers from these analytics payloads. The analytics server also receives ordinary connection information, such as the IP address and browser headers. These statistics are not used for advertising profiles.
You can turn off optional analytics in Settings → Privacy. Withdrawal stops further optional measurement from this browser, including an already open page; it does not undo requests already sent or the separate anonymous server statistics. Browser Do Not Track and Global Privacy Control signals also keep Umami off.
Optional Umami analytics stays off unless this browser has a valid consent choice.
The choice and its date are stored on this browser for up to 365 days using goalgrid_analytics_consent_v2. A compatibility preference and umami.disabled keep older settings screens in sync. These values remember your privacy choice; they are not marketing identifiers. Choices apply separately to each browser and site origin.
Notifications and external resources
Push notifications require your browser’s permission. If enabled, a subscription links the browser to a delivery endpoint. You can block notifications in the site permissions of your browser without closing your account.
External fonts, images and push delivery can involve third-party servers. The optional-analytics control governs Umami measurement. It does not delete account data, disable resources needed to display the page, or revoke browser notification permission.
How to manage your data
- Use Settings → Privacy for the available local export and device-data controls.
- Use your browser’s site settings to clear cookies, localStorage, IndexedDB and cached resources for goalgridai.com.
- Sign out before leaving a shared device.
- To delete the server account, use the request procedure in Privacy.
Clearing all site data can sign you out and reset preferences. Favorites already synchronised with your account can load again after sign-in. To remove a favorite from the account, remove it with its star rather than merely clearing the browser.