Privacy Policy

xGoal ("we", "our", or "us") operates the xGoal website at xGoal (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

1. Information We Collect

1.1 Information from Google Sign-In

When you sign in using Google OAuth, we receive and store:

• Email address - to identify your account
• Name - to personalize your experience
• Profile picture - to display in your account
• Google account ID - to link your account securely

We only request the minimum permissions necessary (email, profile, openid). We do not access your contacts, calendar, or any other Google services.

1.2 Account Information

When you subscribe to our premium service, we collect payment information through Stripe. xGoal does not store your credit card details directly - all payment processing is handled securely by Stripe.

1.3 Usage Data

We automatically collect certain information when you use our Service:

• Pages viewed and features used
• Browser type and version
• Device type and operating system
• IP address (anonymized for analytics)
• Referring website
• Date and time of access

1.4 Newsletter

When you subscribe to our newsletter, we collect your email address. Newsletter subscriptions are managed through Beehiiv. You can unsubscribe at any time via the link in any newsletter email.

1.5 Cookies and Local Storage

We use a cookie consent banner (Google Consent Mode v2). No analytics or advertising cookies are set until you explicitly accept. If you decline, Google still receives anonymized, cookieless pings for modeling purposes, but no personally identifiable cookies are stored.

We use cookies and local storage for:

• Authentication - to keep you signed in
• Preferences - to remember your settings (dark mode, cookie consent choice)
• Analytics - to understand how our Service is used (only after consent)

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain our Service
• Create and manage your account
• Process subscription payments
• Send you service-related communications (account updates, security alerts)
• Respond to your inquiries and support requests
• Improve and personalize your experience
• Analyze usage patterns to enhance our Service
• Protect against fraud, abuse, and unauthorized access
• Comply with legal obligations

3. How We Share Your Information

We do not sell your personal information. We may share information only in the following circumstances:

3.1 Service Providers

• Stripe - for payment processing (Stripe Privacy Policy)
• Google Analytics - for website analytics (Google Privacy Policy)
• Railway - for hosting infrastructure (Railway Privacy Policy)
• Cloudflare - for content delivery and security (Cloudflare Privacy Policy)
• Microsoft Clarity - for behavioral analytics including heatmaps and session recordings (Microsoft Privacy Statement)
• Meta (Facebook) - for conversion tracking via Meta Pixel (Meta Privacy Policy)
• Reddit - for conversion tracking via Reddit Pixel (Reddit Privacy Policy)
• Beehiiv - for newsletter delivery (Beehiiv Privacy Policy)

3.2 Legal Requirements

We may disclose your information if required by law or in response to valid legal requests.

4. Data Retention

We retain your personal information for as long as:

• Your account remains active
• Necessary to provide our services to you
• Required by law or legitimate business purposes

When you delete your account, we will delete or anonymize your personal information within 30 days, except where retention is required by law.

5. Your Rights and Choices

You have the right to:

• Access - request a copy of your personal data
• Correction - request correction of inaccurate data
• Deletion - request deletion of your data
• Portability - receive your data in a portable format
• Opt-out - unsubscribe from marketing communications
• Revoke Google access - disconnect xGoal from your Google account at Google Account Permissions

To exercise these rights, please contact us.

6. Data Security

We implement appropriate security measures to protect your information, including:

• HTTPS encryption for all data transmission
• Secure authentication with HTTP-only cookies
• Regular security audits and updates
• Limited access to personal data on a need-to-know basis

However, no method of transmission over the Internet is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

7. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place when transferring data internationally.

8. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us.

9. Third-Party Links

Our Service may contain links to third-party websites, including bookmakers and data providers. We are not responsible for the privacy practices of these external sites. We encourage you to review their privacy policies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page and updating the "Last updated" date. For material changes, we may also send you an email notification.

11. Contact Us

If you have questions or concerns about this Privacy Policy, please contact us:

• Email: [email protected]
• Contact form: xGoal Contact