Legal
Privacy Policy
Last updated: November 7, 2026
Golviva (golviva.com, "we") is an independent football data and player-valuation site. This policy explains what information is processed when you visit the site or use the Golviva app, and the choices you have. The short version: you can browse without an account, we keep little ourselves — counts of the pages and screens you open, tied to a random ID unless you sign in — and third-party processing is limited to the Google services, Apple's push service for the app's notifications on iPhone, Cloudflare's e-mail service for sign-in codes and the predictions e-mail, the internal sign-up notice and the sites the pictures load from, all described below. Golviva is operated by T1M LLC, which is responsible for the data processing described here.
What we collect
You don't need an account to browse Golviva or to use the app, and we never ask visitors for names, e-mail addresses or any other personal details. Signing in is optional: on the website and in the app it keeps what you follow wherever you sign in, and on the website it is also how you connect Golviva to an AI assistant — see the next two sections. Our hosting and security providers keep standard technical server logs (IP address, browser type, time of request) to operate and protect the service. Your preferences — language, light/dark theme and whether the goal sound is on — and the players, clubs and national teams you opened last (the search box offers them again) are stored only in your browser's localStorage and are never transmitted to us. What you follow while signed out stays there too; to show the matches of those teams and players, the site sends their ids to our server, which keeps nothing of the request. To see which pages are read and how people find Golviva, the website also counts each page you open: its address (without anything after a "?"), when, your browser family (for example Chrome on Android), the site's language, the country our network provider derives from your connection (never the IP address itself), a random ID for your browser kept in localStorage and — on the first page of a visit only — the address of the site that sent you and any campaign tags in the link. If you are signed in, these views are linked to your account (including the pages you read before signing in on that browser). We keep them for 180 days and use them only to understand and improve Golviva; if your browser sends a Global Privacy Control signal, the site counts nothing. Nor does it count anything before you accept measurement in the cookie notice (see “Cookies & local storage”).
Accounts & AI assistant connections
If you sign in — on the website or in the app (it is one account for both), with Apple, Google or a code we e-mail you — we store your account's e-mail address, display name and profile-picture link. With Apple's "Hide My Email", the address we receive is a private relay address from Apple, and Apple shares no picture. To sign in with a code, we e-mail a one-time code to the address you enter, through Cloudflare's e-mail service; we keep the address and a one-way hash of the code for 10 minutes (never the code itself), and an account opened this way holds only the address. To stop abuse, we count the codes asked for per address and per network (IP address), and wrong tries per address, under a one-way hash, for at most a day. If you ask for it — with the switch on your account page or the card on the predictions page — we also e-mail your account's address the day's match predictions each morning, through the same Cloudflare service and in the language you last used Golviva in; we keep when and where you asked for it, with the page's language and the country our network provider derives from that connection. Each of these e-mails has a link that stops them at once; we keep that you unsubscribed, and a record of each one we sent (the day, the account and the language) for 90 days, so that nobody gets the same e-mail twice. When a new account is created, we post a short internal notice to a private Telegram channel that only Golviva's operators can read: the account's e-mail address and name, an approximate location (the country, from our network provider), where the sign-in started (the website, the app or an AI-assistant connection) and, when we know it, how you first came to Golviva (for example a search, an ad or a link; for the Android app, where it was installed from). We also keep what you follow — teams, players, competitions and starred matches — on your account, so it comes back on the website and on any phone you sign in on; in the app we also link your device's registration (see the next section) to the account until you sign out. For each assistant you connect we keep its name, when it was last used and a one-way hash of its access tokens (never the tokens themselves). A tool call sends us only what that lookup needs, such as a player or team name — never your conversation with the assistant. We count calls to apply your usage limit and keep a log of each call (tool, time, outcome and duration; for a failed call, the error message) for 30 days to protect and debug the service. The football data we return is shown to you by the assistant's provider (for example Anthropic or OpenAI) under its own privacy policy. If the assistant asks for it when you connect (ChatGPT does), Golviva also shares your account's e-mail address and name with the assistant's provider so it can recognise the connection; the connect screen lists this before you allow it. A few accounts we set up ourselves (for example for app-directory reviewers) sign in with an e-mail and password instead of Apple or Google; for those we store only a salted hash of the password. Daily call counts are kept for about 13 months to show your usage history; account data is kept until you delete your account. You can disconnect an assistant at any time on golviva.com/mcp, which ends its access immediately. You can delete your account on the website (Account → Delete account) or in the app (Settings → Account → Delete account): the account, what it follows, its assistant connections and their records are removed at once, and for an account created with Sign in with Apple, Golviva's access is also revoked with Apple. You can also write to admin@golviva.com and we will delete it within 30 days. For each account we also record how it signs in (Apple, Google or an e-mail code), where it was created (a page of the website, the app or an AI assistant) and the country our network provider derives from that connection.
The Golviva app
The Golviva app for iPhone and Android works without an account; signing in with Google or Apple is optional and is described in the previous section. On first launch it creates a random ID for your device and registers it with our server, together with: the notification token Firebase Cloud Messaging issues to the app, your platform (iOS or Android), the app's language and version, your phone's time zone, whether notifications are allowed, your notification choices, and what you follow in the app — teams, starred matches, the matches of followed teams you took out of your favourites, favourite players and pinned competitions — plus when the app was last opened and the country our network provider derives from the connection when the device first registers. On Android it also reports where the app was installed from — a Google Play search, an ad, a link on our website or another app — as the Play Store's install referrer gives it; we keep only that source, never an ad's click identifier, and use it, with the country the device first registered from, to see which of our ads and pages bring people who stay in each country. We use this to send you the match alerts you choose (the time zone, to give kick-off times in your own time and to keep early reminders silent at night), and our operators can see it device by device to understand which teams, players and competitions people follow. Unless you turn it off, the app also gets the day's match predictions once a day; we note the day each device last got them, so they never come twice. None of it includes your name, e-mail address, contacts or precise location — unless you sign in, when the registration is linked to your account — and we never sell or share it. Notifications are delivered through Google's Firebase Cloud Messaging and, on iPhone, Apple's push notification service. The app also uses Google Analytics for Firebase to count the screens viewed and app sessions, with the device model and an approximate location. On iPhone, when Live Activities are allowed, it also registers the tokens iOS issues for them — one that lets us put a match on your Lock Screen and one for each match shown there — and whether Live Activities are allowed in iOS Settings; we use them only to show your matches on the Lock Screen and in the Dynamic Island and keep them up to date, and a match's token is deleted within a day of it. Display settings such as the theme stay on your device. You can turn notifications off at any time in the app or in your phone's settings. The app also counts the screens you open — the screen's name, the player, club, match or article it shows, the screen before it, the time, the app's version and language, and the country our network provider derives from the connection — under the same device ID, linked to your account when you are signed in. We keep them for 180 days and use them only to understand which parts of the app are used. The app also asks our server, when it starts and when you come back to it, whether a newer version of its own code is available, and downloads it if so. That check names the app's platform, version and code version, the same device ID and a random installation ID; the app then tells us whether the update was downloaded, applied or undone, and the first line of the error message if the app's code crashed. We keep these reports for 90 days and use them only to keep updates working.
Analytics
We use Google Analytics 4 to understand how the site is used (pages viewed, approximate location derived from IP, device and browser type). Google Analytics sets cookies and processes this data on our behalf under Google's terms. The statistics we see are aggregated and do not identify you personally. Alongside it, Golviva keeps its own first-party statistics, described in "What we collect" and "The Golviva app": they stay on our servers, are never shared or sold, and our operators use them — per account, for signed-in users — to understand how Golviva is used. Google Analytics loads only after you accept measurement in the cookie notice — before that it sets no cookie — and its advertising features stay off.
Your rights
Depending on where you live (including under the EU/UK GDPR and Turkey's KVKK), you may have rights of access, correction, deletion, restriction and objection regarding personal data. Unless you sign in, we hold practically no personal data about you ourselves, so the quickest way to block cookies or opt out of analytics is your browser settings or the Google Analytics Opt-out Browser Add-on. For anything else — including access to your account data or deleting your account — contact us and we will help. Golviva's own statistics are tied to a random browser or device ID rather than to you unless you sign in; Global Privacy Control in your browser turns them off on the website, and clearing the site's data starts a new ID.
Children
Golviva is general-audience football content and is not directed at children. We do not knowingly collect personal information from children.
Changes to this policy
We may update this policy as the site evolves (for example when adding new features). The date at the top reflects the latest revision; significant changes will be visible on this page.
Contact
Questions about privacy on Golviva? Write to us by e-mail or reach us on X (Twitter) or Instagram: