Privacy Policy

Effective 9 September 2026

This policy explains how Roll for Goal collects, uses and protects information when you use the Roll for Goal mobile application and website.

1. Who is responsible

Ammar Mustafa is the controller responsible for the service.

Postal address: Thuringer Weg 57, 33102 Paderborn, Germany
Privacy contact: privacy@rollforgoal.com

2. Information we collect

Account and profile information

• Email address, generated username, display name and selected avatar colour.
• A securely hashed version of your password. We do not store your plain-text password.
• Account creation and profile update timestamps.

Game and social information

• Groups, group memberships and invitation records.
• Games and custom match information you create.
• Your score predictions (“rolls”), points, outcomes and reactions.
• Names or labels you submit for groups, games and custom teams.

Technical information

Our infrastructure providers may process basic request information such as IP address, request time, response status and diagnostic logs for security, reliability and troubleshooting. Authentication tokens are stored securely on your device to keep you signed in.

Website analytics

With your consent, our public website uses Google Analytics to help us understand page visits and general usage. Google may process information such as visited pages, browser and device details, approximate location derived from your IP address, and cookie or similar identifiers. We do not load Google Analytics when you decline.

Change analytics choice

3. How we use information

• Provide accounts, private groups, fixtures, rolls, leaderboards and reactions.
• Authenticate users, protect the service and prevent abuse.
• Maintain, troubleshoot and improve reliability.
• Respond to support, privacy and deletion requests.
• Comply with legal obligations and enforce our rights.

4. Legal bases in the EEA and UK

Where applicable, we process information because it is necessary to provide the service you request, because we have legitimate interests in keeping the service secure and reliable, because you have given consent, or because the law requires us to do so.

5. When we share information

We do not sell personal information and the current app does not use advertising or third-party analytics SDKs. When you allow website analytics, Google processes the website usage information described above. We may also share limited information with hosting, database and infrastructure providers acting on our behalf; with authorities when legally required; or as part of a business transfer subject to appropriate safeguards.

Fixture information may be obtained from a football-data provider. Account details and rolls are not sent to that provider as part of normal fixture syncing.

6. Visibility to other users

Your display name, avatar colour, membership, rolls, points and reactions can be visible to other members of the private groups you join. Rolls remain hidden from other members until the relevant reveal time in the product.

7. Retention and deletion

We retain account information while your account is active and keep service records only as long as needed for the purposes described above. You can permanently delete your account through the app. This immediately deletes your profile, authentication sessions, memberships, predictions and reactions. Before deleting your account, you must delete each group you own or transfer its ownership. Games you created are also deleted. You can also use our account deletion page if you cannot access the app. Information may be retained only when required for security, fraud prevention or legal compliance.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or export your information, or object to certain processing. Contact us using the details above. You may also complain to your local data-protection authority.

9. Security and international processing

We use reasonable technical and organisational safeguards, including encrypted network connections and hashed passwords. No service can guarantee absolute security. Information may be processed in countries other than your own; where required, we use appropriate transfer safeguards.

10. Children

Roll for Goal is not directed to children under 13, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and delete it.

11. Changes

We may update this policy as the service changes. We will post the updated version here and change the effective date. Material changes may also be communicated in the app.

12. Contact

Questions about privacy can be sent to privacy@rollforgoal.com.