Privacy Policy

Last updated: July 15, 2026

1. What we collect

Sign-in with Google or email: your email address and, for Google, your profile picture URL.
Sign-in with Telegram (Mini App): your Telegram user ID, first name, username, and profile photo URL, as provided by Telegram when you open the app.
Game data: your team name, avatar, picks, and resulting scores.
Technical: a session token stored in your browser's localStorage. We do not use analytics trackers or advertising cookies.

2. How we use it

Only to run the game: authenticate you, save your picks, show standings (your team name and avatar are visible to other players), and — if your Telegram account is connected — send you game notifications (deadlines, lineups, results) via our Telegram bot. Verification codes are delivered by email via Resend. We do not sell or share your data with anyone, and we send no marketing.

3. Where it lives

Data is stored in Supabase (managed PostgreSQL). Access is protected by row-level security; other players can only see your public profile fields (team name, avatar) and picks — never your email or Telegram ID.

4. Your rights

You can change your team name in Profile, disconnect Telegram at any time (Profile on the web, or /unlink in the bot), and request full deletion of your account and data by contacting us. We will comply within 30 days.

5. Children

The service is not directed at children under 13, and we do not knowingly collect their data.

6. Changes

Updates to this policy will be posted here with a new "Last updated" date.

7. Contact

zahareus@gmail.com or Telegram @goatsoccergame_bot.