1. Introduction and Contact

Welcome to GoalGuess! We respect your privacy and practice strict data minimization. This Privacy Policy explains exactly what data we collect, why we need it, how long we keep it, and how you can control or delete it.

Data Controller: Tibor Horvath, goalguess.app

Contact for privacy matters: me@tiborhorvath.dev. You may contact us to exercise any of your rights described in Section 6, or with any questions about this policy.

2. Data We Collect

First Name

To help your friends identify you within private leagues. Collected at registration. Retained until account erasure, then replaced with "Deleted".

League Nickname (optional)

A short alias you may set within a mini-league. Displayed on league leaderboards in place of your First Name if set. Set per league after registration. Retained for the lifetime of the league membership.

Private mini-league wall messages (optional)

Text you post on the message wall inside a private mini-league (not available in open/global leagues). Visible to league members until removed. When you delete a message, leave a league, or delete your account, the message text is permanently removed and your name is replaced with a generic label; the row may remain so replies keep their thread structure.

Email Address

Used strictly for account creation, onboarding, login verification, and essential security notices. Retained until account erasure, then permanently and irrecoverably deleted from the system.

Language Preference

Your preferred language (English or Hungarian), used to deliver reminders and the interface in your language. Retained until account erasure.

Session Refresh Token

A cryptographic token (stored as a one-way hash — the original token is never retained) used to maintain your active session without requiring constant logins. Expires automatically after 30 days of inactivity, or immediately on sign-out or account erasure.

Browser Push Subscription

A device-specific browser token used to send you push notifications — including match results, rank changes, and tournament outcome updates. Only stored with your explicit opt-in. Retained until you disable push notifications in settings, or until account erasure. Disabling push notifications immediately and permanently deletes this token.

In-App Notification History

Records of notifications delivered to your in-app inbox (match results, rank changes, tournament outcomes), stored alongside a read/unread flag. Read notifications are automatically deleted after 7 days; unread notifications are retained until you read them, or until account erasure.

Consent Audit Data (IP Address & Browser Info)

When you accept our legal terms or register an account, we record your IP address and browser details (User-Agent). We collect this strictly to fulfil our legal obligation to prove that valid consent was given, as required by the GDPR. Retained permanently in anonymised form. Upon account deletion, your identity is removed from the log and your IP address is masked so it can no longer be linked back to you.

3. Push Notifications — Consent and Withdrawal

To send you push notifications (match results, rank changes, and tournament outcomes), GoalGuess requests your explicit consent to send browser-based push notifications. We only send these notifications if you opt in.

You may withdraw your consent at any time by toggling push notifications OFF in the app settings. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal. When you withdraw consent, we immediately and permanently delete your push subscription token from our servers (Art. 7(3) GDPR).

4. Third-Party Authentication (Google OAuth)

GoalGuess uses Google to verify your identity. When you log in with Google, we access your email address and basic profile information (first name) solely to create your account. We do not request access to your Google contacts, calendar, or any other Google service.

GoalGuess does not share, transfer, or sell your Google User Data to any third parties. You can revoke our access to your Google account at any time by visiting your Google Account Security settings.

This authentication flow involves transferring data to Google LLC (United States). See Section 8 for details on international transfers.

5. Account Deletion and Anonymization

You have the right to delete your GoalGuess account at any time via the app settings. When you initiate account deletion:

• Your First Name, Email Address, Language Preference, Session Tokens, Push Subscription, and all OAuth connection data are immediately and permanently destroyed.
• Private mini-league wall messages you authored are scrubbed: the text is removed and your name is anonymized. Thread rows may remain for other members' replies.
• To maintain the mathematical integrity of historical leaderboards for other players, your past match predictions are retained but irreversibly anonymized. They are reassigned to a generic profile (e.g., "Deleted User"). It is impossible to link this anonymized prediction data back to your original identity.
• To fulfil our legal accountability requirements, the technical record of your initial legal consent (such as the timestamp and browser info) is retained but permanently anonymized. Your identity is removed from the log, and your IP address is masked so it can no longer be linked back to you.

You may also request a full export of your personal data before deletion. See Section 6 (Right to Data Portability) for details.

Admin-initiated deletion: Service administrators may delete accounts for violations of the Terms and Conditions. The same anonymization procedure applies.

6. Your Rights Under GDPR

As a data subject under the GDPR, you have the following rights. To exercise any of these rights, contact us at the address in Section 1.

Right of Access (Art. 15)

You may request a copy of all personal data we hold about you. You can also download a complete JSON export of your data directly in the app (Settings → Export my data).

Right to Rectification (Art. 16)

You may correct your First Name or Language Preference at any time in your profile settings.

Right to Erasure (Art. 17)

You may delete your account and all associated personal data at any time in the app settings (see Section 5). Historical prediction data is anonymized, not erased, to preserve leaderboard integrity — this constitutes a legitimate interest that overrides the erasure right for that specific data.

Right to Data Portability (Art. 20)

You may download a structured, machine-readable JSON export of your personal data (profile, predictions, league memberships, and more) directly in the app (Settings → Export my data).

Right to Restrict Processing (Art. 18)

You may request that we restrict the processing of your personal data in circumstances defined by Art. 18 GDPR (e.g., while contesting accuracy). Contact us to make this request.

Right to Object (Art. 21)

You may object to processing of your data carried out on the basis of legitimate interests (Art. 6(1)(f)), such as the retention of anonymized prediction data. We will assess your objection and cease processing unless we can demonstrate compelling legitimate grounds.

Right to Withdraw Consent (Art. 7(3))

Where processing is based on consent (push notifications), you may withdraw your consent at any time in the app settings. See Section 3.

Right to Lodge a Complaint (Art. 77)

You have the right to lodge a complaint with the Hungarian data protection supervisory authority: Nemzeti Adatvédelmi és Információszabadság Hatóság (NAIH), naih.hu.

7. Lawful Basis for Processing

8. International Data Transfers

Your data is processed primarily within the European Union. However, two limited transfers occur:

Google LLC (United States) — Google OAuth

When you sign in with Google, your authentication request is handled by Google's servers in the US. Google processes this under its Data Processing Agreement and Standard Contractual Clauses (SCCs) as required by GDPR Chapter V. You can review Google's privacy practices at policies.google.com/privacy.

Browser vendors — Web Push

Push notification payloads are routed through the push service of your browser vendor (e.g., Google, Mozilla, or Apple), which may be located outside the EU. Payloads are end-to-end encrypted before leaving our servers; the vendor can deliver but cannot read the content.

9. Automated Decision-Making

GoalGuess does not use automated decision-making or profiling that produces legal or similarly significant effects on you (Art. 22 GDPR). Leaderboard rankings are deterministic calculations based on your submitted predictions, not algorithmic profiling.