goalkick
Privacy notice
goalkick is an online football manager you play with friends. This notice describes the personal data it processes — there is not much.
Controller
Waller GmbH, Pantaleonsmühlengasse 28–30, 50676 Köln, Germany. Email: floris@wallerlitjens.de. Represented by its managing director, Floris Litjens.
Hosting (Vercel)
The application runs on Vercel Inc. (USA). When you visit, Vercel processes technically necessary connection data — IP address, time, browser identifier — in server logs. Legal basis: Art. 6(1)(f) GDPR (operating and securing the site). A data processing agreement is in place; transfers to the USA rest on the EU-US Data Privacy Framework and standard contractual clauses.
Database (Neon)
Game state and account data live in a Postgres database at Neon Inc., hosted in Frankfurt, Germany, under a data processing agreement.
Signing in with Discord
Sign-in happens exclusively through Discord (OAuth). We receive and store your Discord ID, display name, email address and avatar. Legal basis: Art. 6(1)(b) GDPR (providing the game). Discord’s own privacy policy applies to the sign-in itself.
Cookies
Only functional cookies are set: the session (sign-in), your language choice and your colour scheme. No analytics, advertising or tracking cookies. Legal basis: § 25(2) TDDDG together with Art. 6(1)(b) GDPR.
Push notifications
Web push happens only after your explicit opt-in via the switch in the league settings (Art. 6(1)(a) GDPR). We store your browser’s push endpoint; you can revoke consent at any time in the browser or with the same switch.
A league’s Discord webhook
A league may voluntarily configure a Discord webhook. Results and reminders are then posted to the chosen Discord channel. The league’s founder sets this up and can remove it at any time.
Error diagnostics (Sentry)
When a technical error occurs in the game, an error report is sent to Sentry (Functional Software Inc.) and processed on servers in the EU. The report contains technical details of the error (message, affected page, browser type) but no content you typed and no advertising identifiers. Legal basis: Art. 6(1)(f) GDPR (keeping the service stable); a data processing agreement is in place with Sentry.
No analytics, no ads
There are no analytics tools, no ad networks, and no sharing of data for advertising.
Retention
Account data and game state are kept for as long as the account exists. On request the account and its data are deleted — an email is enough.
Your rights
You have the rights of access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and objection (Art. 21 GDPR), and the right to complain to a supervisory authority, such as the data protection authority of North Rhine-Westphalia.