Privacy Policy

Effective 28 September 2026

This policy explains how Roll for Goal collects, uses and protects information when you use the Roll for Goal mobile application and website.

1. Who is responsible

Ammar Mustafa is the controller responsible for the service.

Postal address: Thuringer Weg 57, 33102 Paderborn, Germany
Privacy contact: privacy@rollforgoal.com

2. Information we collect

Account and profile information

• Email address, generated username, display name and selected avatar colour.
• A securely hashed version of your password. We do not store your plain-text password.
• Account creation and profile update timestamps.

You can also play as a guest. A guest account has a display name and avatar colour but no email address or password until you choose to save it.

Sign in with Apple or Google

If you choose to sign in with Apple or Google, we receive an identifier for your Apple or Google account, your email address and, where you allow it, your name. With Apple you can hide your email address, in which case we receive a private relay address that forwards to you. We use this information only to sign you in and create your account; we do not receive your Apple or Google password.

Game and social information

• Groups, group memberships and invitation records.
• Games and custom fixture information you create.
• Your score predictions (“rolls”), points, outcomes and reactions.
• Names or labels you submit for groups, games and custom teams.

Technical information

Our infrastructure providers may process basic request information such as IP address, request time, response status and diagnostic logs for security, reliability and troubleshooting. Authentication tokens are stored securely on your device to keep you signed in.

Launch waitlist

When you join the launch waitlist on our website, we store your email address, which signup form you used, the time you joined and, if the link you followed carried them, its campaign labels (UTM source, medium and campaign). We use this only to email you about the app launch. Every email includes a way to unsubscribe, and you can ask us to remove you from the waitlist at any time.

Website analytics

With your consent, our public website uses Google Analytics to help us understand page visits and general usage. Google may process information such as visited pages, browser and device details, approximate location derived from your IP address, and cookie or similar identifiers. We do not load Google Analytics when you decline.

Change analytics choice

3. How we use information

• Provide accounts, private groups, fixtures, rolls, leaderboards and reactions.
• Authenticate users, protect the service and prevent abuse.
• Maintain, troubleshoot and improve reliability.
• Send account emails, such as email verification and password reset.
• Email waitlist members about the app launch.
• Respond to support, privacy and deletion requests.
• Comply with legal obligations and enforce our rights.

4. Legal bases in the EEA and UK

Where applicable, we process information because it is necessary to provide the service you request, because we have legitimate interests in keeping the service secure and reliable, because you have given consent, or because the law requires us to do so.

5. When we share information

We do not sell personal information and the app does not show advertising or collect in-app analytics. When you allow website analytics, Google processes the website usage information described above.

We use service providers who process information on our behalf and only on our instructions:

• Amazon Web Services hosts the app's servers and database in Frankfurt, Germany.
• Resend delivers account emails, such as email verification and password reset.
• Apple and Google verify your sign-in when you choose to sign in with them.

We may also share information with authorities when legally required, or as part of a business transfer subject to appropriate safeguards.

Fixture information may be obtained from a football-data provider. Account details and rolls are not sent to that provider as part of normal fixture syncing.

6. Visibility to other users

Your display name, avatar colour, membership, rolls, points and reactions can be visible to other members of the private groups you join. Rolls remain hidden from other members until the relevant reveal time in the product.

7. Retention and deletion

We retain account information while your account is active and keep service records only as long as needed for the purposes described above. You can permanently delete your account through the app. This immediately deletes your profile, authentication sessions, memberships, predictions and reactions. Before deleting your account, you must delete each group you own or transfer its ownership. Games you created are also deleted. You can also use our account deletion page if you cannot access the app. Information may be retained only when required for security, fraud prevention or legal compliance.

8. Your choices and rights

Depending on where you live, you may have rights to access, correct, delete, restrict or export your information, or object to certain processing. Contact us using the details above. You may also complain to your local data-protection authority.

9. Security and international processing

We use reasonable technical and organisational safeguards, including encrypted network connections and hashed passwords. No service can guarantee absolute security. Our servers are in the European Union. Some service providers, such as Resend and Google, may process information in the United States; where required, we rely on the EU–U.S. Data Privacy Framework or the European Commission's standard contractual clauses.

10. Children

Roll for Goal is not directed to children under 13, or under 16 in countries of the European Economic Area where that is the age required to consent, and we do not knowingly collect their personal information. If you believe a child has provided information, contact us so we can investigate and delete it.

11. Changes

We may update this policy as the service changes. We will post the updated version here and change the effective date. Material changes may also be communicated in the app.

12. Contact

Questions about privacy can be sent to privacy@rollforgoal.com.