Privacy policy

• Scores need no account. If you sign up, we ask only for an e-mail address, a display name and a password: no phone number, no real name.
• No ads, and no advertising, analytics or tracking cookies or scripts.
• Two cookies: one in the app that remembers your language, and one that keeps a member signed in, set only when you sign in.
• What you follow and your settings are kept in your own browser.
• Data reaches our servers only when you vote on a match, turn on notifications in the app, or sign up or sign in as a member.
• Members can delete their own account at any time from the account page.

Mostly stored in your browser's local storage and not sent to us (except for notifications, below):

• The matches, teams and leagues you follow, and which bells you turned off.
• Leagues you folded away in match lists, your theme (light, dark or device), and whether you turned motion off in the app.
• Teams and leagues you opened from search.
• A random ID for match votes, and your picks.
• In the app: a random device key, your notification settings, and whether you dismissed the install prompt.
• In the app: a turboscore-lang cookie with the language you last used (Thai or English), so the installed app opens in it. It lasts a year. Your browser sends it with requests that open the app; we don't record it.
• In the app, with notifications on: a copy of what was last sent for them (below), in your browser's Cache Storage, so the app can renew its push subscription by itself. It is removed when you turn notifications off.
• When you sign in as a member: a turboscore_member cookie holding a random code for that sign-in. Scripts on the page cannot read it. It lasts 60 days from when it was last used and is removed when you sign out. Your browser also remembers that it has signed in before (a single mark, no account data), so pages know to ask our server who is signed in.

Match votes. When you pick a winner before kick-off, we store your browser's random ID, the match, your pick and the time, so each browser votes once per match. The ID is not linked to your name or identity.

Notifications (app only). When you turn notifications on, the app sends: a random device key (we keep only its SHA-256 hash), your browser's push subscription (the push service address and encryption keys), language, time zone, the kinds of notification you chose, quiet hours, and the matches, teams and leagues you follow with their bell settings. We use them only to send the notifications you asked for. While notifications are off, none of this is sent.

Notifications are delivered through your browser maker's push service (such as Google, Apple or Mozilla) under their own policies. We keep a log of each send: title, text, link, time and how many were delivered.

Member accounts (only if you sign up). We store your e-mail address, your display name, your password as a hash (we cannot read the password itself), your language, whether your e-mail is confirmed, whether you chose to get news of activities by e-mail, when you accepted the terms and this policy and which version, when you signed up and last signed in, and the sign-ins still in use (as hashes of random codes). We use them to sign you in, to let you take part in activities that need an account, and to contact you about your account. Your display name may be shown to others in activities; your e-mail address is not.

E-mail to members. We send e-mail to confirm your address and to set a new password when you ask. News of activities is sent only if you chose it, and you can stop it at any time on your account page. E-mail goes through an e-mail delivery provider, which receives your address and display name to deliver the message.

Server logs. Our servers log incoming requests, such as IP address, time and the page asked for, to run the service and fix problems. IP addresses also limit how many votes and notification sign-ups can be made per minute; those counts are held in memory for at most a minute. They also limit sign-ups, sign-ins and requests for e-mailed links; those counts are held in memory for at most an hour.

• Some team and league logos load from our football data provider's servers, so your browser contacts them directly.
• Highlights use YouTube: thumbnails load from YouTube, and the video loads from youtube-nocookie.com only when you press play.
• Fonts are served from our own site.

• A device's notification data is kept until you turn notifications off or the push service tells us the subscription has expired; we then delete it with its follows.
• Votes are kept with the match data. There is no automatic deletion yet.
• A member account is kept until you delete it. A sign-in not used for 60 days is removed. The link that confirms an e-mail works for 48 hours, and the link that sets a new password for 1 hour.

• Delete your member account yourself on your account page: the account and its member data are removed from our servers straight away. The same page lets you change your display name and password and stop e-mail news.
• Turn off notifications in the app's settings: we delete the device and its follows from our servers straight away.
• Clear GOAL.CO's site data in your browser settings: everything stored on your device is removed. Votes already sent still count but are no longer tied to your browser.

If we change what we store, we will update this page and the date at the top before the change takes effect.