Gol Contra - Privacy Policy

The short version

Gol Contra is a football social-deduction game you play with friends. No account, no login, no email. You type a name (12 characters max), pick a jersey or a portrait, join a lobby, and play.

What we ask for

A name and a jersey or portrait. Both are visible to everyone in the same lobby — that is how the other players know who is who. The name is also what gives the seat back after a drop, including on another device.

What is stored while a lobby is alive

While a lobby is open, the backend holds:

• the 4-letter lobby code
• each player's name and icon
• the secret role dealt to them
• every match action as an event log (nominations, votes, cards, penalties, captain powers, referee calls)
• crowd reactions
• presence timestamps
• the table's season log — one entry per finished match with the players' names, icons, roles and who won

Bots that fill empty seats have rows of their own.

Storage is Convex, a cloud backend.

How long that lives

A lobby expires after 10 minutes without any connected player, or when the host closes the table ("Encerrar mesa"). A cleanup job runs every minute and permanently deletes expired lobbies — and all their rows — one hour after they expire. None of it is kept for analytics.

The only thing that outlives a lobby is a global counter of loyal vs. mafia wins by ending reason, with no player data in it.

What stays on your device

On the web, the game keeps a random seat token per lobby code, plus the last lobby code, in the browser's localStorage. In the iPhone app, the same tokens live in the Keychain (service com.mellofattura.Gol-Contra.session) and a "rules already seen" flag lives in UserDefaults, on the device itself. The token only proves the seat on that device — a reload can pick it up without asking again. It is not linked to any identity. To reclaim a dropped seat on another device, or after that storage is gone, you type the same name in the same lobby.

Invites

The app builds a link to own-goal.mellofattura.com with the lobby code and hands it to the system share sheet. The site and the app open the same lobbies. The golcontra:// URL scheme opens the app from a link like that.

What we don't do

• No analytics SDK
• No ads
• No tracking
• No third-party sharing beyond hosting (Convex for the backend, Vercel for the site)
• No data sold
• No purchases

Children and teenagers

The game is for friends who are already together — on a call or in a room. Nothing we store identifies a person beyond the name they type.

Deletion

Everything you produced in a lobby disappears when the lobby is purged. For anything else, just write to us.

Contact

For privacy inquiries, email us at mgbirkans@gmail.com or use our contact form at Contact.