Privacy Policy

• Account details— your email address, an optional display name, and your password. Passwords are hashed by our authentication provider; we never see or store them in plain text. If you sign in with Google, we receive basic profile information (name, email) from Google instead of a password.
• Your activity— the goals you classify, the votes you cast, and the accounts you follow. This is the heart of the game.
• Notification settings— if you turn on push notifications, we store a push subscription provided by your browser so we can deliver them. You can turn this off at any time.
• Technical data— limited information such as IP address and browser user-agent, used transiently to keep your session secure and to prevent abuse.

We do not knowingly collect data from children under 13. Goalpedia is not directed at children.

• to create and run your account and keep you signed in;
• to record your classifications and votes and to compute the aggregate consensus shown on each goal;
• to send essential transactional emails — for example, verifying your email address or resetting your password. We don't send marketing email unless you ask for it;
• to send the notifications you turn on (such as goal alerts), through your browser's push service;
• to keep the Service secure, prevent vote manipulation, and debug problems.

Where data-protection law applies, we rely on: performance of a contract (running your account and the game), legitimate interests (keeping the Service secure and free of abuse), and consent where we ask for it (for example, optional emails).

We share data only with the processors that run the Service on our behalf:

• Supabase— authentication and database hosting. Your account and activity data live here.
• Vercel— application hosting and content delivery. It processes the requests you make to the Service, including technical data such as your IP address and server logs.
• Resend— delivery of transactional emails (verification, password reset).
• Sentry— error and performance monitoring, which helps us find and fix faults. Diagnostic data about an error — such as the page, your browser, and a technical trace — may be sent here.
• Google— only if you choose to sign in with Google, which shares basic profile information with us.
• Your browser's push service(such as Apple, Google, or Mozilla) — only if you enable push notifications, to deliver them to your device.

We also describe real matches using football data from third-party providers. That match data is about public events, not about you. We don't sell your personal data.

Some of these processors are based outside the UK and the EEA — for example, in the United States. Where your personal data is transferred internationally, we rely on appropriate safeguards — such as the UK's International Data Transfer Agreement or the European Commission's Standard Contractual Clauses — so it stays protected to the same standard.

We use a small number of cookies that are strictly necessary to keep you signed in and to keep the Service secure. We don't use advertising cookies or third-party tracking pixels.

We keep your account data for as long as your account is active. If you delete your account, we delete or anonymise your personal data, except where we need to retain something to meet a legal obligation or resolve disputes. Aggregated, anonymised consensus results may remain part of the public record of a goal.

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal data, and to object to certain processing. To exercise any of these, email michael@symmetriclabs.xyz. You also have the right to complain to your local data-protection authority — in the UK, the Information Commissioner's Office (ICO).

We may update this policy from time to time. When we make material changes we'll update the date at the top of this page.

Goalpedia is operated by Symmetric Labs, the data controller responsible for your personal data under this policy. Questions about your privacy? Email michael@symmetriclabs.xyz. See also our Terms of Service.