Privacy notice
Last updated: [[DATE]]
Who we are
GoalSides is operated by [[LEGAL NAME]], [[SOLE TRADER / LIMITED COMPANY REGISTERED IN ENGLAND & WALES, COMPANY NUMBER 00000000]], of [[POSTAL ADDRESS]]. We are the data controller for the personal data described here. You can reach us at [[CONTACT EMAIL]].
What we collect
- Account details — your email address, and a display name and icon you choose. Passwords are stored by our authentication provider as salted hashes; we never see them.
- Game history — for members only, a record of each finished game: which game, the mode, whether you won, and a score.
- Membership details — your subscription status and renewal date. Card details go to Stripe and are never sent to us or stored on our systems.
- Technical data — IP address and basic request information, processed by our hosting and security provider to serve the site and block abuse.
We do not ask for your date of birth, location, or any special category data.
Why we use it, and on what basis
- To give you an account and let you sign in — necessary to perform our contract with you.
- To record and show your stats — necessary to perform our contract, because that is the service members pay for.
- To take payment and manage your membership — necessary to perform our contract, and to comply with our legal obligations on record-keeping.
- To keep the site available and secure — our legitimate interests in running a working service.
- To show advertising — your consent, given through the cookie banner and withdrawable at any time.
Who we share it with
We use a small number of processors, each of which sees only what it needs:
- Supabase — authentication and database.
- Cloudflare — hosting, DNS and the billing endpoint.
- Stripe — payments. Stripe is a controller in its own right for the payment data it handles.
- Google — advertising, where you have consented.
We do not sell your data, and we do not share it with clubs, leagues, data brokers or advertisers beyond what the ad consent above covers.
Where your data goes
Some of these providers process data outside the UK. Where that happens, transfers are covered by the UK International Data Transfer Addendum or the provider’s equivalent safeguards. [[CONFIRM THE HOSTING REGION YOU SELECTED IN SUPABASE AND STATE IT HERE]]
How long we keep it
Account and game history are kept while your account is open. Delete your account and we remove them within 30 days, except records we must keep for tax and accounting purposes, which are kept for six years.
Your rights
You can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, or ask for it in a portable format. Email [[CONTACT EMAIL]] and we will reply within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.
Children
You must be at least [[MINIMUM AGE — SEE NOTE]] to hold a GoalSides account. [[NOTE FOR YOU, NOT FOR THE PAGE: a football games site is likely to be accessed by children, which brings the ICO Children’s Code into scope regardless of what age you set here, and Google prohibits personalised ads to users under 13. Decide your minimum age and whether you age-gate before publishing.]]
Changes
If we change this notice materially we will say so on the site and, for members, by email before the change takes effect.