Bu çeviri senin kolaylığın için. Hukuken bağlayıcı olan Çekçe sürümdür.

Privacy Policy

Son güncelleme: 7 Ekim 2026

What data GoatGuess stores about you, why, for how long and what you can do about it. We wrote it so that it can actually be read.

1. Who is behind it

The controller of your personal data is the operator of GoatGuess: Jakub Chadim, company ID (IČO) 03170586, Czech Republic. GoatGuess is a one-person hobby project, not a big company.

For anything about your data, write to privacy@goatguess.com. The operator answers personally. We have no data protection officer, as the law does not require one for a project this small.

2. In short

You can play without signing up. We only store what the game needs: results, streak, cards and groups.
We don’t sell your data, use it for advertising or build profiles from it.
We use only one cookie, and it’s essential: the sign-in. Visitor statistics run without cookies, which is why you don’t see a cookie banner here.
You can delete your account and download your data at any time, right from the account menu.

3. What data, why and for how long

Legal basis: performance of a contract means we need the data to provide the game to you under the terms of use (Art. 6(1)(b) GDPR). Legitimate interest means we need the data to run the game safely and fairly, and this does not override your interests (Art. 6(1)(f)).

Anonymous account

Neden: After your first daily game we automatically create an account for you without a name or e-mail: a random ID and a generated nickname (e.g. “Young GOAT 123”). That way your results don’t get lost and you can join a group.
Hukuki dayanak: performance of a contract
Ne kadar süre: as long as you use it. We delete an anonymous account after 12 months without activity.

Google or Discord account

Neden: When you sign in, the provider gives us your name, e-mail, a link to your profile picture and your account ID with them. We use them only to sign you in and show your name. We don’t send you any e-mails.
Hukuki dayanak: performance of a contract
Ne kadar süre: until you delete your account

Game data

Neden: Results of the daily games, streaks, your card album, games in progress (so you can finish them on another device), the groups you belong to, and the nickname other members see there.
Hukuki dayanak: performance of a contract
Ne kadar süre: until you delete your account. A game in progress is deleted as soon as you finish it.

Profile: birth year, sport, your GOAT

Neden: Your birth year is optional and we never display it. It tells us whether we may show you content meant only for adults. We remember your sport and your GOAT with your account, so you have them on every device.
Hukuki dayanak: birth year: legitimate interest (protecting minors). Sport and GOAT: performance of a contract.
Ne kadar süre: until you delete your account or remove the information

Country and technical sign-in data

Neden: We derive your country from your IP address (Cloudflare determines it) and store only the country code, e.g. CZ. For sign-ins we store the IP address and browser type to detect account misuse.
Hukuki dayanak: legitimate interest (security, country-specific content)
Ne kadar süre: country until you delete your account. Sign-in data until you sign out, at most 1 year.

Bug reports and ideas

Neden: The text of your message, an optional e-mail for a reply and context: page address, game, sport, browser type and app version. Against spam we store a fingerprint of your IP address that cannot be turned back into the address.
Hukuki dayanak: legitimate interest (fixing bugs). E-mail: your consent, given by filling it in.
Ne kadar süre: at most 24 months. Sooner if you delete your account or ask us to.

Visitor statistics

Neden: How many people play, which games and where they get stuck. We use PostHog (EU servers) and Cloudflare Web Analytics, both without cookies. PostHog never gets your name, e-mail, IP address or account ID, only a one-way fingerprint of the ID. Without an account, every page load gets a new random ID. If your browser has Do Not Track or Global Privacy Control turned on, statistics don’t run at all.
Hukuki dayanak: legitimate interest (improving the game)
Ne kadar süre: aggregates long-term, raw records at most 12 months

Server logs

Neden: Every request creates a technical record at Cloudflare (IP address, time, page address, errors). We need it to deal with outages and attacks.
Hukuki dayanak: legitimate interest (security and operation)
Ne kadar süre: a few days

We do not carry out automated decision-making or profiling with legal effects.

4. Who we entrust data to

We don’t sell data. Only these processors help us with it, under a data processing agreement:

Cloudflare, Inc. (USA): application hosting, database, page delivery, attack protection and cookie-free Web Analytics. The database is stored in the EU.
PostHog, Inc.: cookie-free visitor statistics. The data is stored in PostHog’s EU cloud (Frankfurt).

You use Google and Discord only to sign in. They are not our processors but independent controllers, and your data with them is governed by their own policies. We receive from them only the data listed above.

Anthropic (the Claude model) helps us design the look of the athletes’ goat characters from public information about them. We never send it any data about you or other users. More on the About players and data page.

We would hand data over to authorities only if the law required us to.

5. Transfers outside the EU

The database is in the EU. Cloudflare is a US company and delivers pages from servers all over the world, so your request may pass through a server outside the EU. Cloudflare is certified under the EU-US Data Privacy Framework, and transfers are also covered by standard contractual clauses approved by the European Commission.

6. Your rights

Under the GDPR you have the right:

of access and portability: click Download my data in the account menu and you get everything we have about you as a JSON file,
to erasure: click Delete account in the account menu. We delete the account, results, cards, games in progress, group memberships and your reports. Groups you own pass to another member, empty groups are closed. We also clear the data in this browser.
to have inaccurate data corrected,
to restrict processing,
to object to processing based on legitimate interest,
to withdraw your consent at any time (e.g. remove the e-mail from a report),
to lodge a complaint with the Czech Office for Personal Data Protection (uoou.gov.cz), Pplk. Sochora 27, 170 00 Prague 7, or with the supervisory authority of your EU country.

Send any other requests to privacy@goatguess.com. We reply within one month at the latest, usually much sooner. We may sometimes verify that the account is really yours.

7. Children and age

Anyone can play without signing in. You can create an account with Google or Discord from the age of 16.

After you sign in, we ask for your birth year. It’s optional. If you don’t give it, we treat you as a minor: you won’t see anything meant only for adults. If we find out that an account belongs to someone younger than 16, we delete it.

Parents can write to us at privacy@goatguess.com.

8. Cookies and browser storage

We only use essential cookies, without which signing in doesn’t work. That’s why we need neither your consent nor a cookie banner.

better-auth.session_token and better-auth.session_data: keep you signed in (anonymously too). Valid for up to 1 year.

In your browser’s storage (localStorage) we keep your settings and a copy of your game data so the game is fast and works offline: light or dark theme, chosen sport, your GOAT, results, cards and groups. The keys start with hd:. They are not sent anywhere. You remove them by clearing the site data in your browser or by deleting your account.

For as long as the tab is open, we keep in session storage (sessionStorage) where the visit came from (e.g. a link from a friend) and, during sign-in, which service you are signing in with. The keys start with gg:, they are not identifiers and they disappear when you close the tab.

Visitor statistics (PostHog, Cloudflare Web Analytics) run without cookies and store nothing in your browser themselves.

9. Changes to this policy

When we change the policy, we update the date at the top. We announce significant changes directly in the game.

10. Contact

Personal data: privacy@goatguess.com. Everything else: gusta@goatguess.com.