Privacy Policy

Last updated: September 2026

Who we are

Goalsforge ("we", "us") is the football analytics product behind goalsforge.com, operated by FIFIJO (VAT: PL7191562591). For anything in this policy, contact us atinfo@goalsforge.com.

What we collect

When you register a Goalsforge account we store:

  • your email address and the credentials you use to sign in;
  • basic account metadata (signup time, last sign-in);
  • your interaction data with the product: which fixtures you view, follow, or save, so the platform can personalise your experience.

The marketing site sets no advertising cookies and runs no cross-site advertising or behavioural tracking scripts. We do use two privacy-respecting analytics providers (Umami and OpenPanel) to understand which pages and analyses are most useful; both are designed to be cookieless and do not build persistent visitor profiles. See the cookie policy for what each one collects.

Why we collect it

We use your account information to operate Goalsforge: to let you sign in, follow fixtures and competitions, and access the public track record. We may send essential service emails (security, important product changes). The legal basis is the contract between you and Goalsforge formed when you create an account.

Where it is stored

Account and analysis data are stored in a Cloudflare D1 database hosted on Cloudflare's infrastructure. We do not sell, rent, or share your account information with any third party for marketing purposes.

How long we keep it

We keep your account data for as long as your account is active. You can delete your account at any time from your account settings; we will erase your personal data within 30 days of deletion, except where retention is required by law.

Your rights

You can ask at any time to see the data we hold about you, to correct it, export it, or to delete your account. Emailinfo@goalsforge.comand we will act within 30 days. If you are in the EU/UK you also have the right to complain to your data protection authority.

GDPR & data protection

This section supplements the policy above for visitors and account holders in the European Economic Area (EEA), the United Kingdom, and Switzerland, and explains how Goalsforge complies with Regulation (EU) 2016/679 (the "GDPR") and the UK GDPR.

Data controller

The data controller for personal data processed through this website and your Goalsforge account is:

FIFIJO
VAT: PL7191562591
Email:info@goalsforge.com

Lawful basis for processing (Art. 6 GDPR)

  • Performance of a contract (Art. 6(1)(b)): to create and operate your Goalsforge account, deliver analyses you follow, and provide the track record you have signed up to.
  • Legitimate interests (Art. 6(1)(f)): to keep the service secure and resilient (rate-limiting, abuse detection, logging of security events) in a way that does not override your rights and freedoms.
  • Legal obligation (Art. 6(1)(c)): to retain records we are required to keep for tax, accounting, or regulatory purposes.

Categories of personal data

  • Identity & contact: email address, display name, and the credentials (hashed password) you use to sign in.
  • Account metadata: signup time, last sign-in, account status.
  • Product interaction: which fixtures and competitions you view, follow, or save, so the platform can personalise your experience.
  • Technical: IP address and request metadata (timestamps, user-agent) processed by our edge infrastructure to deliver and protect the service.

Recipients and international transfers

Account and analysis data are stored in a Cloudflare D1 database within Cloudflare's infrastructure. Some processing (in particular CDN delivery and DDoS protection) is performed by Cloudflare, Inc. in the United States. Where personal data is transferred outside the EEA or UK, we rely on the European Commission's Standard Contractual Clauses (2021/914) and the UK International Data Transfer Addendum, supplemented by Cloudflare's published technical and organisational measures. We do not sell, rent, or share your personal data with third parties for marketing purposes, and we do not run cross-site advertising or behavioural tracking scripts on this site. The marketing site does use two privacy-respecting analytics providers (Umami and OpenPanel); both store data in the EU, set no cookies, and do not build persistent visitor profiles. See thecookie policy for the full description.

Retention

  • Active account data: kept for the life of your account.
  • Security and access logs: retained for up to 90 days, then deleted or anonymised.
  • Tax / accounting records: retained for the period required by Polish tax law (currently 5 years from the end of the relevant tax year).

Your rights under the GDPR

Subject to the conditions and exceptions in the GDPR, you have the right to:

  • Access the personal data we hold about you (Art. 15): request a copy of your data.
  • Rectification (Art. 16): have inaccurate or incomplete data corrected.
  • Erasure ("right to be forgotten") (Art. 17): delete your account, subject to retention exceptions above.
  • Restriction of processing (Art. 18): ask us to limit how we process your data while a complaint is resolved.
  • Data portability (Art. 20): receive the data you provided to us in a structured, commonly used, machine-readable format (JSON), or have it transmitted to another controller where technically feasible.
  • Object to processing based on legitimate interests (Art. 21) on grounds relating to your particular situation.
  • Withdraw consent (Art. 7(3)) where processing is based on consent. Withdrawal does not affect the lawfulness of processing before withdrawal.

Exercising any of these rights is free. We will respond within one month of receiving your request (Art. 12(3)); if your request is complex we may extend that period by a further two months and notify you of the reasons for the delay. To exercise your rights, emailinfo@goalsforge.comfrom the address linked to your account so we can verify the request.

Automated decision-making and profiling

Goalsforge produces probability analyses for fixtures. Those analyses are not decisions about you. We do not make decisions based solely on automated processing that produce legal or similarly significant effects on you within the meaning of Art. 22 GDPR.

Right to lodge a complaint

If you believe our processing of your personal data is unlawful, you have the right to lodge a complaint with a supervisory authority. Our lead supervisory authority is:

President of the Personal Data Protection Office (UODO)
ul. Stawki 2, 00-193 Warsaw, Poland
uodo.gov.pl

You may also complain to the data protection authority in your country of residence, place of work, or place of the alleged infringement, seeedpb.europa.eu for the full list of EEA authorities, or theInformation Commissioner's Office if you are in the UK.

Changes

If this policy changes, the updated version will be posted at this URL with a new "last updated" date and registered users will be notified by email.