Privacy Policy

Last updated: August 9, 2026

This notice describes how GoalingBreak processes personal data of platform users (website and mobile app) under Regulation (EU) 2016/679 (“GDPR”).

1. Data controller

goalingbreak.com. For any request: privacy@goalingbreak.com.

2. Data we process

• Account data: email, password (stored only as a hash), language, favourite team, the public username you choose.
• Usage data: daily presence, quiz scores, gamification points and trophies, content posted in the Curva, followed teams.
• Technical data: IP address and minimal technical logs for security and anti-abuse (rate limiting).
• Referrals: if you arrive via an invite link we store a cookie (“gb_ref”) with the inviter’s code for 90 days to attribute the invite when you sign up.

3. Purposes and legal bases

• Providing the service (contract, art. 6.1.b GDPR): account, quizzes, Curva, standings.
• Transactional email — address verification, password reset, weekly digest (contract).
• Security and abuse prevention (legitimate interest, art. 6.1.f).
• Invite/referral programme (contract and legitimate interest).

4. Recipients

Data is processed by providers strictly necessary to run the service: infrastructure hosting, Brevo (transactional email), API-Football (sports data provider — receives no user personal data). We do not sell personal data.

5. Retention

Account data is kept while the account is active. You can delete your account from the Account section: email and password are removed and content is anonymised. Technical logs are kept for short periods.

6. Your rights

You have the right of access, rectification, erasure, restriction, portability and objection (arts. 15-22 GDPR). A data export is available in the Account section. You may lodge a complaint with your supervisory authority.

7. Minors

The service is intended for users aged 16 or older.