Last updated: August 2026

This policy explains what personal data Goaltyso ("we", "the service") collects when you use our website and mobile app, why we collect it, and how you can exercise your rights.

1. What we collect

Account data — when you sign in via Google, Facebook, or email:

• Email address
• Display name and profile picture (from the OAuth provider)
• Mobile phone number (required for prize redemption)
• Preferred language and theme

Activity data generated as you use the service:

• Your score predictions and market picks (correct score, Over/Under, BTTS, Double Chance, HT/FT, parlay flags)
• Chat messages you post in match rooms
• Favourites (leagues, teams, players, matches you starred)
• Points earned and prize redemption history

Technical data collected automatically:

• IP address and coarse country (via Cloudflare)
• Browser / device type, operating system, screen size
• Referral URL and pages visited on our site

2. How we use it

• To provide the core service — displaying scores, saving your predictions, awarding points.
• To personalize your experience — showing content in your language, remembering your favourites.
• To communicate about prize claims and match alerts (only if you opt in).
• To detect and prevent abuse — spam, cheating in the prediction game, chat harassment.
• To analyze aggregate usage patterns and improve the product. We never sell personal data.

3. Third-party services

Some data is processed by trusted partners:

• Cloudflare — content delivery network and DDoS protection. Sees your IP address and request headers. See Cloudflare's privacy policy.
• Google Sign-In / Facebook Login — used only when you choose to sign in with them. We receive your email, name, and profile picture. We do not receive your password. See their privacy policies for details.
• API-Sports — supplies football fixture, statistics, and odds data. We send match IDs; they do not receive your personal data.
• LibreTranslate — self-hosted on our own infrastructure at translate.1882883881.com. Message text you translate is sent for translation but is not stored beyond the anonymous cache.
• flagcdn.com — serves country flag images. Sees your IP when a flag image loads.

4. Cookies and local storage

We use the following on your device:

• Session cookie (SCOREVN_SESS) — keeps you signed in. Deleted when you log out.
• lang cookie — remembers your language choice for one year.
• theme cookie — remembers dark/light theme.
• localStorage — stores prediction drafts, chat translation preference, and a translation cache to speed up your visits.

We do not use third-party advertising cookies. Ads shown on the site are served by us directly.

5. Data retention

• Account and predictions — retained while your account is active. Deleted permanently within 30 days of account deletion.
• Chat messages — retained per room for up to 24 hours; then automatically wiped by the daily reset.
• Server logs — retained for up to 30 days for abuse investigation, then rotated.

6. Your rights

You can:

• Access a copy of the personal data we hold about you.
• Correct your name, email, phone number, or language from your profile page.
• Delete your account and all associated data by emailing us at [email protected].
• Withdraw consent for OAuth sign-in by revoking the connection at Google or Facebook.

7. Children

The service is not directed at children under 13. If you become aware that a child under 13 has provided us with personal data, please contact us and we will delete it.

8. International transfers

Our servers are located in Hong Kong/Singapore. If you access the service from outside these regions, your data will be transferred there for processing.

9. Changes to this policy

We may update this policy from time to time. Material changes will be highlighted on the site for at least 30 days before taking effect.

10. Contact

Privacy questions or data requests: [email protected] — or via the contact form.