Privacy Policy
Effective date: 30 September 2026 · Applies to the Goal Fight game on iOS and Android (com.goalfight) and to this website.
In short: Goal Fight is listed in the app stores for ages 13 and up, and its content is suitable for all ages. We collect only what the game needs to work, keep matches fair and fix crashes. We never sell personal data, we show no behavioural or personalised ads, we do not collect advertising identifiers, and a player or parent can have everything deleted at any time.
1. Who we are
Goal Fight is developed and published by Publisher Hub, Egypt ("we", "us"). We are the controller of the personal data described here. Contact: [email protected].
2. Data we collect
| Data | What it is | Source |
|---|---|---|
| Guest account id | A random install id created when you first open the game (not shown in the game) and a player id on our game server. It is not your name or phone number. | Created by the game |
| Apple / Google sign-in id | If you choose Sign in with Apple or Google, we receive only a stable account identifier from Apple or Google, used to save and restore your progress. We do not ask Apple or Google for your name or email address, and we never see your password. | Apple, Google |
| Username | Your public @username, the one id other players see and use to add you as a friend. The game assigns one automatically (from the display name you chose, or "player" plus digits); you can choose another in the game (Profile), and each name belongs to only one player. It is shown to other players, for example in friend lists and requests, so it should not contain your real name. When your account is deleted, the username is deleted too and can be taken by someone else. | The game, or you |
| Profile and gameplay data | Display name (the game gives you one at first; you can change it in the game, in Profile; it is shown to other players), your public @username, level, rank, characters and skills you own or use, in-game currencies and items, match results and gameplay statistics, settings such as language. | The game |
| Device and technical data | Device model, operating system and version, app version, language, time zone, network type, IP address (processed by our servers and service providers to deliver the service). | Your device |
| Analytics events | Firebase Analytics records app usage events such as sessions, screens, match start and end, and tutorial progress, with a random app-instance id. It runs without advertising identifiers, with Google Signals and ad personalisation turned off, and is never used for advertising. We do not send your name, email or sign-in id to analytics. | The game (Firebase) |
| Crash and error reports | Sentry receives technical reports when the game or our servers hit an error: stack traces, device and app version, and the steps leading to the error. The reports carry no name, email, IP address or advertising id (collecting these is switched off), only technical details and a random installation id. | The game, our servers |
| Multiplayer data | For online matches, Photon relays match inputs between players and processes your IP address and player id for the duration of the connection. | The game (Photon) |
| Push notification token | Only if you turn notifications on: a device token from Google or Apple that lets us deliver notifications to that device (such as a friend's match invite or a new event), stored with your player id, platform and game language. Notifications carry no personal data: no name, username, room code or phone number. The daily reward reminder is created on your device and needs no token. | Your device (Google, Apple) |
| Ad impressions and clicks | Counts of how many times a sponsor ad was shown or tapped, per campaign and ad place, with platform and language. Each batch of counts is sent with your player id and match id so our server can drop duplicates and limit abuse. | The game |
| Support and requests | What you send us by email or through our website forms (for example an account-deletion request): your contact address, player id and message. | You |
We do not collect precise location, contacts, photos, microphone or camera data. The game does not collect advertising identifiers (the IDFA on iOS or the Android advertising ID) and does not track anyone across other companies' apps or websites.
If in-app purchases are offered, payments are handled entirely by Apple or Google. We receive a purchase receipt to deliver your items, never your card details.
3. How we use your data
- To run the game: create and restore your account, save progress, match you with other players, deliver items (performance of our contract with you).
- To keep play fair and safe: detect cheating, abuse and fraud, enforce our Terms of Use (legitimate interests).
- To fix and improve the game: diagnose crashes, balance gameplay, measure which features are used (legitimate interests, or consent where the law requires it).
- To show and measure sponsor ads in the stadium and lobby, and report aggregated results to sponsors (legitimate interests).
- To send notifications you turned on, such as a friend's match invite or a new event (your consent; you can turn them off at any time).
- To support you and answer requests, including deletion requests (legal obligation and legitimate interests).
We do not use your data for automated decisions that have legal or similarly significant effects on you.
4. Service providers
These companies process data on our behalf, under contracts that limit their use of it to providing their service to us:
| Provider | Purpose | Policy |
|---|---|---|
| Microsoft (PlayFab, Azure) | Player accounts, game data storage, backend services | privacy.microsoft.com |
| Exit Games (Photon) | Real-time multiplayer networking | photonengine.com/privacy |
| Google (Firebase Analytics, Sign-In) | Usage analytics; optional Google sign-in; delivering push notifications (Firebase Cloud Messaging) if you turn them on | policies.google.com/privacy |
| Functional Software (Sentry) | Crash and error reporting | sentry.io/privacy |
| Apple (Sign in with Apple, App Store) | Optional Apple sign-in; distribution and purchases on iOS; delivering notifications to iPhones (Apple Push Notification service) | apple.com/legal/privacy |
| Our hosting provider | Servers for our game API and this website | Processes server logs only |
5. In-game sponsor ads
Stadium banners, pitch-side boards and the lobby banner can show sponsor ads that we choose and serve from our own servers. We do not use third-party ad networks, we do not build advertising profiles, and ads are not personalised to you: a campaign can only target a platform (iOS or Android) and a language. The game reports impressions and taps in batches with your player id and match id; our server uses these ids only to remove duplicates and apply rate limits. Reports and sponsor statistics use only aggregated counts with no player id. Tapping an ad opens the sponsor's page in the in-game browser; that page is governed by the sponsor's own privacy policy.
6. Sharing and selling
We do not sell your personal data and do not share it for cross-context behavioural advertising. We share data only with the service providers above, with other players to the extent the game shows it (your display name, username, character, match results, and to friends or on leaderboards your level, rank points, wins and position), with sponsors only as aggregated, non-identifying counts, when the law requires it, to protect our rights or users' safety, or as part of a merger or sale of the game (with this policy still applying).
7. How long we keep data
- Account and gameplay data: we keep only the data the game uses (your account, progress, items and settings), and only until you ask us to delete it. Then it is deleted completely, including from backups, within 30 days.
- Analytics events: no name, email, sign-in id or advertising id, only a random app-instance id. Event-level data expires after 2 months, the shortest setting Firebase offers; after that only aggregated reports that identify no one remain.
- Crash reports: no name, email, IP address or advertising id; deleted automatically after at most 90 days.
- Ad counts: kept in aggregated form with no player id. The per-player records used against duplicates and abuse (recent batch ids and one daily impression counter) are removed when no longer needed for those checks, and at the latest when your account is deleted.
- Push notification tokens: kept only while notifications are on for that device (at most 5 devices per account). A token is deleted when you turn notifications off, when Google or Apple report it is no longer valid (for example after you uninstall the game), or when your account is deleted.
- Support emails and deletion requests: only until the request is handled, then deleted.
- Server logs: short-lived technical logs (up to 30 days) kept only to protect the service from attacks and abuse.
8. Your rights and choices
Depending on where you live (for example under Egypt's Personal Data Protection Law No. 151 of 2020, the GDPR in the EU/UK or privacy laws in US states), you can ask to access, correct, delete or export your data, object to or restrict some uses, and withdraw consent at any time. Email [email protected] with your @username (Profile or Settings → Account) or the email of the Apple or Google account you signed in with. We answer within 30 days and will not treat you differently for using your rights. You may also complain to your local data protection authority. Parents and guardians can use these rights for their children (see section 10).
Analytics data is tied to a random app-instance id, not to your name. You can turn analytics off at any time in the game: Settings → Account → Share usage stats. This stops all analytics events from that device at once. Crash reports, which carry no personal details, are not affected by this switch. You can also ask us to delete analytics data, and deleting your account and the game stops all further collection. You can revoke Apple or Google sign-in from your Apple or Google account settings.
Notifications are off until you turn them on: the game asks once, after your first match, and never at launch. You can turn them off at any time in the game (Settings → General → Notifications) or in your device settings. Turning them off deletes the token from our server and stops all further notifications.
9. Deleting your account
In the game, go to Settings → Account → Delete account. Your account is removed from the game immediately, and all its data is deleted completely within 30 days, including from backups (see section 7). If you no longer have the game installed, use our account deletion request form or email us. Deletion removes your profile, progress, items and sign-in links and cannot be undone. Purchases made through Apple or Google are not refunded by deletion. See the Delete account page for the full details.
10. Children and parents
Goal Fight is listed in the app stores for ages 13 and up, and its content is suitable for all ages. It is not directed at children under 13, and we do not knowingly collect personal data from them beyond what the game needs to run (described below). Because younger players may still play, we built the game's data practices to be safe for everyone:
- No behavioural or personalised ads. We use no third-party ad networks; sponsor ads are chosen only by platform and language, never by who is playing, and sponsors never receive data about players.
- No sale of data, ever, and no sharing for advertising.
- No advertising identifiers. Analytics runs without the IDFA or the Android advertising ID and is never used for advertising.
- Crash reports without names, emails, IP addresses or advertising ids.
- Notifications only on request. They stay off until the player (or a parent) turns them on, and they carry no personal data.
- Play without personal details. The whole game can be played as a guest. It does not require a name, email address, phone number or photo.
Without sign-in, the personal data we process about any player is limited to what the game needs to work: a random account id, game progress, and the technical data (such as the IP address) needed to run the service and online matches. We use these identifiers only to support the internal operations of the game. Apple or Google sign-in is optional and only saves progress across devices: we receive just an account identifier, never a name or email address. For a child under 13, or under the age of digital consent in their country (13 to 16 in the EU), we ask that sign-in is done by a parent, or through a child account set up by a parent (Apple Family Sharing or Google Family Link). If we learn that we collected personal data from a child under 13 (or under the age of digital consent in their country) beyond what the game needs to run, we delete it.
Parents and guardians can, at any time, ask us to review a child's data, delete it completely, or stop any further collection. Email [email protected] with the subject "Parent request" and the child's username (in the game: Profile or Settings → Account). We may ask for details to confirm that the request comes from the child's parent or guardian; then we delete everything and confirm by email. You can also delete the account directly in the game or on our Delete account page.
We describe our own practices here; Goal Fight does not currently hold a certification from any children's privacy seal or Safe Harbor programme.
11. Security and international transfers
Traffic between the game and our servers (your account, profile, purchases and match results) is protected in transit with TLS. Real-time match traffic is relayed by Photon and is not end-to-end encrypted: Photon's payload encryption protects the sign-in and room-join messages, while match inputs and the name and rank card shown to your opponent are sent without that encryption. We restrict access to people who need it, and keep secrets and credentials out of the game. No system is perfectly secure, so please contact us if you find a problem. Our providers may process data in countries other than yours, including the United States and the European Union; where required, transfers use safeguards such as the European Commission's Standard Contractual Clauses.
12. Changes and contact
We will update this policy when the game or the law changes, change the effective date above, and tell you in the game about significant changes. Contact: Publisher Hub, [email protected], or our contact page.