Privacy Policy
Last updated: 9 October 2026
This policy explains what personal data the game collects, why, and your rights. It is written in plain language on purpose. For anything not covered here, write to us and we will answer.
1. Who is responsible
The data controller is the person operating the website ultimategoatclicker.com. Contact for any privacy matter: support@ultimategoatclicker.com.
2. What we collect
- Automatically when you play: a random account ID, and your game data (clicks, Star Points, level, daily streak, missions, cards, boosts, play time, clan, the challenges you clicked).
- Technical data: our hosting providers process your IP address and basic request information (browser, device type, time) to deliver the site and to keep it secure and abuse-free.
- If you create an account: your email address and a password (the password is stored encrypted by our authentication provider — we never see it in clear text).
- Information you choose to add: display name, country (picked from a list), optional Instagram username, avatar, chat messages, clan activity, challenge proposals and votes, chosen rival.
- In-game analytics events: a small set of actions (starting a session, signing up, watching a rewarded ad, spinning the wheel, creating a clan, proposing a challenge, claiming the daily bonus, buying a sound, sharing a card) with minimal details, used only to understand how the game is used and improve it.
3. Why we use it (legal bases)
To run the game and your account (performance of a contract); to keep the game secure, prevent cheating and abuse, and understand overall usage (our legitimate interest); to show advertising (only with your consent); to comply with legal obligations.
4. Cookies and local storage
We store a few items in your browser: your login session, your settings (volume, sound), your cookie/ads choice, and minor interface preferences. These are necessary for the game to work and are not used to track you across other websites. If and when we enable third-party ads, they may set their own cookies, but only after you accept them in the consent window. You can decline and still play.
5. Who we share data with
We do not sell your data. We use trusted providers that process data on our behalf:
- Supabase — database, accounts and real-time features (stores your game data and account).
- Cloudflare — website hosting, content delivery and domain (serves the pages; processes technical/IP data for delivery and security).
- An advertising provider — only if ads are enabled and only after your consent.
We may also disclose data if required by law or to protect the game and its users.
6. International transfers
Some providers may process data outside the European Union (for example in the United States). Where that happens, it is covered by the safeguards those providers offer, such as the European Commission's Standard Contractual Clauses.
7. How long we keep it
Account and game data are kept while your account exists. Unused guest accounts are deleted automatically after a period of inactivity. World and country chat messages are deleted automatically after about 24 hours; clan chat after about 7 days. Analytics events are kept for up to about 90 days. When you ask us to delete your account, we remove your personal data except anything we must keep for legal reasons.
8. Your rights
You can ask to access your data, correct it, delete it, restrict or object to its use, receive a copy (portability), and withdraw consent at any time. To do any of this, or to delete your account, email support@ultimategoatclicker.com. You also have the right to complain to a data protection authority — in Italy, the "Garante per la protezione dei dati personali" (garanteprivacy.it).
9. Children
The game is not intended for children under 14 (under 13 where local law allows). We do not knowingly collect data from them. If you believe a child has given us data, contact us and we will delete it.
10. Changes
If we change this policy we will show a notice in the game and update the date above.