Last updated: 2026-09-03
This policy explains what personal data Goaldinho collects, why, how long we keep it, and the rights you have under the EU General Data Protection Regulation (GDPR).
Goaldinho is operated by:
Account & profile data: your email address, full name, jersey name and number, birth date, nationality, country, preferred foot, and an optional avatar — provided when you register or edit your profile.
Club, league, and match data: clubs and leagues you create or join, matches you organize or play in, teams, standings, season awards, and any location or description text an organizer writes.
Community & reputation data: MVP votes, match ratings, and pairing/ranking votes you or other members submit, plus a reliability score computed from voting history.
Messages & requests: club join requests, bans, friendly-match proposals, and read receipts on in-app messages.
Billing data: if you subscribe to a paid plan, your subscription status, plan, and billing period. Your payment card details are entered directly on Stripe's own checkout page and never reach our servers.
Technical data: your IP address (used only in memory, for a single request, to estimate your country for content filtering — never stored), your browser's language setting, and the cookies described in our Cookie Policy.
Performing our contract with you (GDPR Art. 6(1)(b)): creating and managing your account, clubs, matches, and subscription.
Our legitimate interest (Art. 6(1)(f)): showing you clubs and leagues near you by estimating your country from your IP address, and keeping the platform secure (for example, honoring bans issued by club and league organizers).
Legal obligation (Art. 6(1)(c)): keeping billing records as required by tax and accounting law.
Consent (Art. 6(1)(a)): only where we ask for it explicitly. Today, this applies solely to the optional analytics cookie category described in our Cookie Policy, which is not yet in use.
We don't sell your data. We share it only with the service providers ("processors") that help us run Goaldinho: Supabase (database hosting and authentication), Stripe (subscription payments — we never see your full card details), Resend (transactional emails, such as admin invitations), ipwho.is (resolves your IP address to a country for content filtering; the result isn't stored), and Vercel (hosts the application itself).
Other members of a club or league can see the profile information you choose to display there (jersey name/number, positions, stats) and any votes or ratings you give them, as part of how the app is designed to work.
Some of our processors may store or process data outside the European Economic Area. Where that happens, we rely on the safeguards they themselves put in place under GDPR (such as Standard Contractual Clauses) — see each processor's own privacy policy for details.
We keep your account data for as long as your account is active. Club and league membership history — including past memberships and bans — is kept indefinitely as part of each club's and league's historical record, much like a real sports federation keeps its records: even after you leave a club, your past matches, votes, and standings remain attributed to your account.
You can request deletion at any time (see "Your rights" below); we'll remove what we can while keeping the minimum needed for other members' own accurate historical records — for example, a completed match's score doesn't disappear because one player later deletes their account.
Billing records are kept for as long as required by applicable tax law after your subscription ends.
Under the GDPR, you have the right to access the personal data we hold about you, correct inaccurate data, request erasure, restrict or object to processing, receive your data in a portable format, and withdraw consent at any time where processing is based on consent. To exercise any of these, contact us using the details above.
You also have the right to lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or your own country's supervisory authority.
We use a small number of cookies, described in full in our Cookie Policy. None of them are advertising cookies, and we don't use third-party tracking or analytics today.
Goaldinho isn't directed at children. If you're under 16, please only use Goaldinho with the involvement of a parent or guardian, in line with the age of consent for information-society services under the GDPR.
We may update this policy as the app or our legal setup changes — for example, once our Dutch business registration is complete. We'll update the "last updated" date above whenever we do.