Privacy Policy

The controller of your personal data is the operator of GoatGuess: Jakub Chadim, company ID (IČO) 03170586, Czech Republic. GoatGuess is a one-person hobby project, not a big company.

For anything about your data, write to privacy@goatguess.com. The operator answers personally. We have no data protection officer, as the law does not require one for a project this small.

• You can play without signing up. We only store what the game needs: results, streak, cards and groups.
• We don’t sell your data, use it for advertising or build profiles from it.
• We use only one cookie, and it’s essential: the sign-in. Visitor statistics run without cookies, which is why you don’t see a cookie banner here.
• You can delete your account and download your data at any time, right from the account menu.

Legal basis: performance of a contract means we need the data to provide the game to you under the terms of use (Art. 6(1)(b) GDPR). Legitimate interest means we need the data to run the game safely and fairly, and this does not override your interests (Art. 6(1)(f)).

We do not carry out automated decision-making or profiling with legal effects.

We don’t sell data. Only these processors help us with it, under a data processing agreement:

• Cloudflare, Inc. (USA): application hosting, database, page delivery, attack protection and cookie-free Web Analytics. The database is stored in the EU.
• PostHog, Inc.: cookie-free visitor statistics. The data is stored in PostHog’s EU cloud (Frankfurt).

You use Google and Discord only to sign in. They are not our processors but independent controllers, and your data with them is governed by their own policies. We receive from them only the data listed above.

Anthropic (the Claude model) helps us design the look of the athletes’ goat characters from public information about them. We never send it any data about you or other users. More on the About players and data page.

We would hand data over to authorities only if the law required us to.

The database is in the EU. Cloudflare is a US company and delivers pages from servers all over the world, so your request may pass through a server outside the EU. Cloudflare is certified under the EU-US Data Privacy Framework, and transfers are also covered by standard contractual clauses approved by the European Commission.

Under the GDPR you have the right:

• of access and portability: click Download my data in the account menu and you get everything we have about you as a JSON file,
• to erasure: click Delete account in the account menu. We delete the account, results, cards, games in progress, group memberships and your reports. Groups you own pass to another member, empty groups are closed. We also clear the data in this browser.
• to have inaccurate data corrected,
• to restrict processing,
• to object to processing based on legitimate interest,
• to withdraw your consent at any time (e.g. remove the e-mail from a report),
• to lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz), Pplk. Sochora 27, 170 00 Prague 7, or with the supervisory authority of your EU country.

Send any other requests to privacy@goatguess.com. We reply within one month at the latest, usually much sooner. We may sometimes verify that the account is really yours.

Anyone can play without signing in. You can create an account with Google or Discord from the age of 16.

After you sign in, we ask for your birth year. It’s optional. If you don’t give it, we treat you as a minor: you won’t see anything meant only for adults. If we find out that an account belongs to someone younger than 16, we delete it.

Parents can write to us at privacy@goatguess.com.

We only use essential cookies, without which signing in doesn’t work. That’s why we need neither your consent nor a cookie banner.

• better-auth.session_token and better-auth.session_data: keep you signed in (anonymously too). Valid for up to 1 year.

In your browser’s storage (localStorage) we keep your settings and a copy of your game data so the game is fast and works offline: light or dark theme, chosen sport, your GOAT, results, cards and groups. The keys start with hd:. They are not sent anywhere. You remove them by clearing the site data in your browser or by deleting your account.

For as long as the tab is open, we keep in session storage (sessionStorage) where the visit came from (e.g. a link from a friend) and, during sign-in, which service you are signing in with. The keys start with gg:, they are not identifiers and they disappear when you close the tab.

Visitor statistics (PostHog, Cloudflare Web Analytics) run without cookies and store nothing in your browser themselves.

When we change the policy, we update the date at the top. We announce significant changes directly in the game.

Personal data: privacy@goatguess.com. Everything else: gusta@goatguess.com.