Privacy notice
Last updated: 22 August 2026
Who we are
GoalSides is run by a sole trader based in the United Kingdom, who is the data controller for the personal data described in this notice. For anything at all — questions, complaints, or exercising any of the rights below — email [email protected]. Our full name and postal address are set out at the end of this notice.
What we collect
- Account details — your email address, and a display name and icon you choose. Passwords are stored by our authentication provider as salted hashes; we never see them.
- Game history — for members only, a record of each finished game: which game, the mode, whether you won, and a score.
- Membership details — your subscription status and renewal date. Card details go to Stripe and are never sent to us or stored on our systems.
- Technical data — IP address and basic request information, processed by our hosting and security provider to serve the site and block abuse.
We do not ask for your date of birth, location, or any special category data.
Why we use it, and on what basis
- To give you an account and let you sign in — necessary to perform our contract with you.
- To record and show your stats — necessary to perform our contract, because that is the service members pay for.
- To take payment and manage your membership — necessary to perform our contract, and to comply with our legal obligations on record-keeping.
- To keep the site available and secure — our legitimate interests in running a working service.
- To show advertising — your consent, given through the cookie banner and withdrawable at any time.
Who we share it with
We use a small number of processors, each of which sees only what it needs:
- Supabase — authentication and database.
- Cloudflare — hosting, DNS and the billing endpoint.
- Stripe — payments. Stripe is a controller in its own right for the payment data it handles.
- Google — advertising, where you have consented.
We do not sell your data, and we do not share it with clubs, leagues, data brokers or advertisers beyond what the ad consent above covers.
Where your data goes
Some of these providers process data outside the UK. Where that happens, transfers are covered by the UK International Data Transfer Addendum or the provider’s equivalent safeguards. Our database is hosted in Frankfurt, Germany (EU).
How long we keep it
Account and game history are kept while your account is open. Delete your account and we remove them within 30 days, except records we must keep for tax and accounting purposes, which are kept for six years.
Your rights
You can ask us for a copy of your data, correct it, delete it, restrict or object to how we use it, or ask for it in a portable format. Email [email protected] and we will reply within one month.
If you are unhappy with how we have handled your data you can complain to the Information Commissioner’s Office at ico.org.uk, or by calling 0303 123 1113.
Children
You must be at least 16 to hold a GoalSides account.
Changes
If we change this notice materially we will say so on the site and, for members, by email before the change takes effect.
Controller details
GoalSides is operated by Cameron Butcher, a sole trader, of 13 Bond Close, Faversham, Kent, ME13 7GB, United Kingdom. Email [email protected].