Privacy

Playing without an account

Without an account, the player and progress exist only in this browser. No personal game data are sent to the server; the game only downloads shared content from it — training sessions, missions and stories it may open.

When progress is uploaded

Progress is sent to the server only when a parent signs in or registers and confirms “Transfer” on the transfer screen. The player, appearance, training sessions, results, XP, rewards, stories and missions are then uploaded. The game never does this automatically.

Deleting the local game

“Delete local game” in guest Settings removes the local player. Clearing the browser data removes the player too; they cannot then be restored unless they were transferred or saved using “Download player backup”. After a completed transfer, the local copy is removed and only a small transfer note remains.

What the game stores in an account

• The family login and an one-way password fingerprint — the server never knows the password itself and nobody can read it from the fingerprint.
• A parent's e-mail, if you register a public account or add one to an existing account: for verification and password recovery. For a new public account, we also store the verification time, the parent's confirmation and acceptance of the terms. The child does not need an e-mail of their own.
• Progress in the game: completed training sessions and routines, recorded team training sessions and matches, records, badges, cards, stories read and missions in progress.
• Settings you enter: the name and gender of the hero and the other characters, shirt numbers, the team name, colours and holidays.
• We also store the time of the last sign-in and devices that are signed in (only as a random fingerprint, without an address or device type).
• On your device: you stay signed in thanks to one essential cookie (no ads, no measurement), valid for 180 days after its last use or until you sign out. The browser keeps a copy of progress, settings and actions not sent yet in local storage, so the game works even with a weak signal. Signing out deletes them for the child who is playing (siblings keep theirs so they do not lose unsent actions); deleting the account deletes them for all children in the family on the device where you confirm the deletion. Elsewhere they disappear when the browser data are cleared.

What the game does not store

We do not ask for the child's surname, date of birth, photos, location or phone number. Please use a nickname for the hero. There are no ads in the game. The game itself, including play without an account, loads no third-party analytics or advertising scripts; Google measurement is used only on the parents page and only with your consent (see below). We do not pass the characters' names on to anyone. Your browser performs the check that protects registration against bots — without a captcha and without a third-party service.

Who can see it

Only your family, after signing in. The game administrator sees a list of accounts in the game (login, when it was created, when it was last used and how many children it has), so they can send invitations and reset forgotten passwords — they do not see your child's progress in the game. From the game, they see only aggregate numbers without individual families or children. The operator has technical access to stored data for maintenance and to deal with your requests. The data are not public.

Messages to parents

Verification e-mails and password resets are sent by the Brevo service. It receives the parent's e-mail address and the message with a one-time link, not the child's name or progress. It is not a newsletter. Sending is set up without tracking opens or link clicks. Registration and acceptance of the terms are not marketing consent; we do not send a newsletter. Brevo's privacy policy.

Where it is kept

The web server keeps an access log for each visit for security and troubleshooting (IP address, time, page address and browser type); it is deleted after at most 15 days.

Game data are stored on a server in the European Union (Stockholm, provider Oracle Cloud Infrastructure), in private storage. Backups are used for recovery after a failure: they are kept on the same server with a copy on the operator's second server, also in Stockholm — both for at most 14 days. The connection is encrypted (HTTPS).

We keep account data and progress until the account is deleted. Unfinished verification requests and the local e-mail queue are deleted after 24 hours. Each link can be used once. To protect against abuse, we keep a short-term counter of attempts in which the e-mail and IP address are replaced by a protected fingerprint; it is deleted within two days.

Aggregate visit statistics (without cookies)

On public pages (home, parents page, Privacy and Terms) and on registration and sign-in screens, we collect aggregate visit statistics: how many people visit the pages, how long they stay, how far they read, which buttons they click and where they came from. Game screens, signed-in families and children playing without an account send nothing. We use no cookies or third-party company for this.

To estimate the number of different visitors, the server immediately creates a one-way fingerprint from the IP address and browser type that changes every day; we do not store the IP address itself for statistics. Detailed records are deleted after 90 days and aggregate counts after 25 months.

From the game records of registered families, we calculate only aggregate numbers, such as how many families also train in the second week. Individual families or children cannot be seen in them, and we hide groups of fewer than five families. For a newly created account, we store where the family came from (for example, an Instagram link), if it was measured. This is used only for these aggregates and is deleted when the account is deleted.

Our legal basis is our legitimate interest in improving the game and the pages (Article 6(1)(f) GDPR). You can object: use the button below or write to us. We also respect the browser's “Global Privacy Control” setting.

Do not count me This browser will then send nothing; it remembers only your decision.

Google measurement on the parents page (only with consent)

The game itself (with or without an account), registration and sign-in use no Google scripts or cookies. Only the parents page (goallevel.app/pro-rodice, in English /for-parents) and the page shown after registration may, with your consent, use:

• Google Analytics: aggregate visits to the parents page (where people came from and what they viewed). Google provides this service to us as a processor and keeps the data for 14 months.
• Google Ads: how many registrations our ads produced. If you came from a Google ad, Google remembers its click and sees your visit to this page. After registration we send it the information that registration took place, with a random number so it is not counted twice. Google may process the data as an independent controller. We do not allow personalised advertising.

Like any web service, Google sees the IP address and browser type. We never send Google an e-mail, login, password, names or anything about a child and their game. Google may also process data in the USA; transfers are protected by the EU–US Data Privacy Framework. How Google uses data: policies.google.com/technologies/partner-sites.

Our legal basis is your consent (Article 6(1)(a) GDPR). Nothing is loaded without it. Consent lasts 180 days and you can change or withdraw it at any time in Consent settings; withdrawal deletes the measurement cookies stored for our site (cookies on Google's own domains are managed by Google). Withdrawal does not affect processing before it.

Cookies only after consent: Google Analytics for at most 180 days, Google Ads for at most 90 days. On the server, we store a random number for a new registration for 30 days so one registration is not counted twice.

Why we process data and our legal basis

• Account, game and account e-mails: so we can provide the game to you under the terms (performance of a contract, Article 6(1)(b) GDPR).
• Server access logs and protection against abuse: service security (legitimate interest, Article 6(1)(f) GDPR).
• Aggregate statistics: improving the game and the pages (legitimate interest; you may object at any time).
• Google Analytics and Google Ads: only with your consent (Article 6(1)(a) GDPR).

We make no automated decisions about anyone and create no profiles. The game is for children, but the account is created and managed by a parent; Google measurement concerns only the parents page.

What you can do

In Settings → Account you can download all data as a file at any time (and later upload it again, for example to a new account), or delete the account. An account with a verified e-mail is deleted only after you confirm it using a link sent to the parent's e-mail (so a child cannot delete the family by mistake). The deletion is then immediate and cannot be undone: the login and every child's progress are removed from the live game. If a record is still in a backup for recovery after a failure, it is removed within 14 days at the latest when backups rotate. This also applies to the login and password fingerprint. For at most 90 days (14 days longer in backups), only a note remains that an account with a certain internal number was deleted at that time — without the login, e-mail or progress — so restoring a backup does not bring the deleted account back.

You also have the right to access, correct and erase your data, to restrict processing and to data portability (the downloadable file). You may object to processing based on legitimate interest and withdraw consent at any time.

If you need anything

To exercise your rights or ask a question, e-mail trueshpen@gmail.com; we will respond within one month at the latest. If you believe we are handling data incorrectly, you may lodge a complaint with the Czech Office for Personal Data Protection (www.uoou.gov.cz).

Game terms · updated 30 October 2026