Privacy Policy

What we keep

If you only read the site we keep nothing about you beyond ordinary server logs. If you create an account we keep: your email address, display name, a scrambled (hashed) version of your password, your chosen language, the clubs and display choices you set, and your predictions and points.

To limit password guessing we also keep, for up to a day, a count of sign-in attempts tied to your internet address.

Visit statistics

To see how the site is used we count visits without identifying anyone: each browser tab makes up a random number, and we store it with the page opened, the country (from the host or the browser language), the device type, the language, the site you came from and how long the tab stayed open. No address, name or tracking cookie is stored, the data is deleted after 120 days, and the browser setting "Do Not Track" switches it off.

Why

To run your account and the game (contract), to keep the site safe (legitimate interest), and to show your own clubs. We do not sell your data, we do not use it for advertising and we do not send marketing email.

Cookies and device storage

A sign-in cookie keeps you signed in (up to 30 days). A language cookie and a time-zone cookie remember your choices. Your theme, followed clubs and goal-alert setting are stored on your device only. These are needed for the site to work as you set it. If advertising is added later, its cookies will be described here and asked for first where the law requires.

Who else handles it

The site is hosted with Hostinger and its database runs with Neon; both process data for us under their own terms. Match data comes from third-party providers and does not include any of your data.

How long

Until you delete your account. Deleting it on the account page removes your details, clubs and predictions at once. Sign-in sessions end after 30 days.

Your rights

You may ask to see, correct or delete your data, to object to its use, and to complain to your data-protection authority (in Türkiye the KVKK Board; in the EU your national authority). Most of this you can do yourself on the account page; for anything else write to the contact address shown on goalystats.com.

Security and children

Passwords are stored only as salted hashes, sessions are stored only as hashes, and the site uses HTTPS. The site and the game are for people aged 18 and over.

Changes

We may update this policy; the date above shows the latest version.