Privacy Policy

GoalRadar ("we", "us", "our") operates the website at goalradar.org. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights under applicable privacy laws including GDPR and CCPA. By using GoalRadar you agree to this policy.

1. Information We Collect

a) Newsletter subscriptions

When you subscribe to our newsletter we collect your email address, the date of subscription, and a source label indicating which page you subscribed from. Data is stored in Vercel Postgres and processed via Resend.

b) Advertising cookies

We use Google AdSense to display advertisements. Google may set cookies and collect browsing data to serve personalised ads. This is governed by Google's Privacy Policy. You may opt out at adssettings.google.com.

c) Server log data

Our hosting provider Vercel logs IP addresses, browser types, pages visited and timestamps. Logs are retained for up to 30 days for security and diagnostics.

d) Rate-limiting data

To prevent abuse, hashed IP addresses are stored in Vercel KV with a maximum TTL of 1 hour.

2. How We Use Your Data

• To send World Cup 2026 match alerts and newsletters (email subscribers only)
• To send a one-time double opt-in confirmation email
• To serve contextual advertising via Google AdSense
• To prevent spam via rate limiting
• To diagnose technical issues via server logs

3. Legal Basis for Processing (GDPR)

• Consent — newsletter subscriptions require explicit double opt-in confirmation
• Legitimate interests — server logs for security and fraud prevention
• Consent — advertising cookies where a consent mechanism is presented

4. Data Sharing and Third Parties

We do not sell, rent or trade your personal data to third parties for marketing purposes.

5. Affiliate Links

GoalRadar contains affiliate links to streaming services and other products. When you click these links and make a qualifying purchase, we may earn a commission at no extra cost to you. See our Affiliate Disclosure for full details.

6. Your Rights

• Right to access — request a copy of data we hold about you
• Right to rectification — correct inaccurate data
• Right to erasure — request deletion of your personal data (GDPR Article 17)
• Right to object — object to processing based on legitimate interests
• Right to data portability — receive your data in a structured format
• CCPA right to know — California residents may request disclosure of data collected
• CCPA right to delete — California residents may request deletion of personal information
• Right to opt out of newsletter — click the unsubscribe link in any email

To exercise any right, email privacy@goalradar.org. We respond within 30 days.

7. Data Retention

• Newsletter subscriber data: retained until unsubscribed or deletion requested
• Unconfirmed subscribers (no double opt-in click): deleted after 30 days
• Server logs: retained up to 30 days by Vercel
• Rate-limit data: auto-deleted after 1 hour

8. Cookies

• Strictly necessary: session and CSRF cookies required for site function
• Advertising: Google AdSense cookies for personalised or contextual ads
• Analytics: cookies set if Google Analytics is enabled for usage insights

Control cookies via your browser settings. Disabling advertising cookies affects ad personalisation.

9. Children's Privacy

GoalRadar is not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us data, contact us immediately for deletion.

10. International Data Transfers

Data may be processed in the United States (Vercel infrastructure). EU transfers are covered by standard contractual clauses under GDPR Chapter V.

11. Changes to This Policy

We may update this policy periodically. Material changes are indicated by updating the "Last updated" date above. Continued use of GoalRadar constitutes acceptance.

12. Contact

Privacy enquiries: privacy@goalradar.org · Contact page