How GoalGrid AI handles your data

Optional user account

Registration is not required. If you create an account, we process:

• Email — sign-in and account-related communication.
• Password — we store only a cryptographic hash, not the readable password.
• Email verification — a temporary token in the link (typically valid for 48 hours) until you confirm your account.
• Session cookie — after sign-in so you do not have to log in on every visit.
• Registration consent — the time you confirmed data processing to create the account.

An account without a verified email cannot be fully used to sign in. You can request a new verification link from the sign-in dialog.

Contact form

• message type (bug, idea, inquiry) and message text;
• email — required for inquiries and ideas, optional for bug reports;
• page URL, referrer, site version, submission time, and user-agent (diagnostics);
• optional newsletter consent — marketing at most 1–2 times per month; opt out by email or contact message.

We store messages on the server and the operator can view them in administration. A copy may go to an internal email or operator notification (e.g. Discord webhook without selling data to third parties).

Cookies and localStorage

• localStorage — language, light/dark theme, saved matches, and filters (stored in your browser).
• User session — after sign-in to an optional account.
• Administrator session — for site management only, separate from the public account.

You can delete browser data in your browser settings (site data / cookies).

Technical processors

Data may be processed by services necessary for operation (without selling personal data):

• Hosting / server — site operation, backups, and technical logs (IP, request time).
• Resend — sending transactional emails (account verification, form notifications).
• API-Football — match sports data (without your name; their policies may apply when the API is called).
• Discord webhook (optional) — internal operator alert for a new form message.

Purpose and retention

• operating the account and verifying identity by email;
• responding to feedback and fixing site bugs;
• security, abuse prevention, and rate limiting;
• marketing only with separate consent.

We retain data for as long as needed for the purpose (e.g. for the life of the account, to resolve a complaint, or as needed to archive feedback). Hosting technical logs are usually kept for a short period.

Your rights

You have the right to request access, correction, restriction of processing, or erasure of your data where you have grounds under applicable rules (including GDPR). You may also withdraw newsletter consent.

Request via contact