Privacy Policy

The controller of personal data processed through GoalLineExpert is:

• GOALLINEEXPERT
• privacy@goallineexpert.com
• https://goallineexpert.com

This Policy applies to personal data processed through the GoalLineExpert website, User accounts, Premium services, contact forms, service emails, the referral programme and connected Telegram functionality.

It does not govern independent processing carried out by external websites and services that maintain their own privacy policies.

• Directly from you when registering, paying or contacting us.
• Automatically from your browser and our server when you use the website.
• From PayPal or another selected payment provider when processing a payment.
• From Telegram when you voluntarily connect your account.
• From a referral cookie or link when you visit through a referral.

When registering, we process a username, email address and password. The password is hashed before storage and is not retained in readable form.

To verify an account, we may create temporary codes and tokens with limited validity. Similar tokens may be used for account recovery.

Service emails are sent through a selected email or SMTP provider.

Premium payments may be processed by PayPal or another external payment provider. The payment provider processes information necessary to complete and verify the transaction under its own privacy policy.

GoalLineExpert may receive and retain an order or transaction identifier, amount, currency, status, date and other information necessary to activate the Service, maintain accounting records and resolve disputes.

When you voluntarily connect your account to Telegram, we may process your Telegram username, user ID, chat ID and connection-status information.

This data is used to identify the connected account, provide authorised access to channels or bots, send selected notifications and manage access according to the subscription plan.

Telegram also processes personal data as an independent service provider under its own terms and privacy policy.

To protect registration and other sensitive actions, we may process IP addresses, timestamps, request counts, failed attempts and other technical signals.

We use Cloudflare Turnstile to distinguish genuine Users from automated requests. During verification, the browser receives a challenge and the server sends the resulting token to Cloudflare for validation.

• Password hashing.
• CSRF protection for forms.
• Rate limiting for excessive requests and attempts.
• Temporary verification codes and tokens.
• Technical logs for detecting errors and abuse.

GoalLineExpert uses cookies and similar technologies where necessary for login, session maintenance, language selection, security, referral functionality and remembering User settings.

A detailed list of the cookies used, their purposes and durations will be published in a separate Cookie Policy.

We may disclose limited personal data to service providers where necessary to operate the Platform.

• Hosting, server and infrastructure providers.
• Cloudflare for form and infrastructure protection.
• PayPal or another payment provider.
• SMTP or email-delivery provider.
• Telegram for voluntarily connected services.
• Professional advisers, accountants or legal representatives where necessary.
• Competent authorities where disclosure is required by law.

Some providers may process data outside the European Economic Area. Where applicable, transfers should rely on a recognised safeguard, such as an adequacy decision, standard contractual clauses or another valid legal mechanism.

We retain personal data only for as long as necessary for the purposes for which it was collected, unless a longer period is required or permitted by law.

When determining the retention period, we consider:

• The duration of the account and contractual relationship.
• The need to provide and demonstrate the purchased Service.
• Accounting, tax and other legal requirements.
• Limitation periods for bringing or defending legal claims.
• The need to prevent fraud, abuse and attacks.
• The sensitivity and volume of the relevant data.

Subject to applicable law, you may exercise the following rights:

Commission for Personal Data Protection

Address: 2 Prof. Tsvetan Lazarov Blvd., Sofia 1592, Bulgaria. Official information and complaint procedures are available through the CPDP website.

GoalLineExpert is intended only for persons over 18 years of age. We do not knowingly seek to collect personal data from minors.

If we learn that a minor has created an account or supplied personal data contrary to our rules, we may restrict the account and delete the data unless retention is required by law.

We may update this Policy when the Service, providers, technology or applicable law changes.

The current version will be published on this page with a revised last-updated date.