Privacy · WeGoat

WeGoat collects the minimum data needed to run a prediction game among friends. No advertising, no trackers, no resale of data.

1. Data controller

OPEN (SARL), 85 avenue Niel, 75017 Paris, the publisher of WeGoat. For any question about your data or to exercise your rights: contact@wegoat.fr.

2. Data collected

Account: email address or mobile number, technical identifier, sign-in method (link or code by email, code by SMS or WhatsApp, Google or Apple), sign-up and last sign-in dates. With Google or Apple, we only receive your email address and, where applicable, your name (which is used to suggest a username).
Phone number: if you sign in by SMS or WhatsApp, or add your number in My profile, your mobile number. It is used only to send you a sign-in code, by SMS or, if you choose, by WhatsApp: never shown to other players, never used for advertising or for other messages. To limit abuse, we keep a record of each code request (number, date, delivery method, encrypted fingerprint of the IP address) for 48 hours, then only monthly totals, with no personal data.
“Find my account”: if, from a new account that is still empty, you recover your old account, the new account is deleted and its phone number (or its email address, if the old account doesn’t have one) moves to the old account. To limit abuse, we keep a record of each code sent by email for this operation (requested address, date, number of attempts) for 48 hours, then only the date and the method used (email or phone).
Mobile app: platform (Android, or iOS for iPhone, iPad and Mac), dates of first and last opening.
Country: the country of your connection, inferred from your IP address by our host (we keep only the country code, never the IP address or the city), or the one you choose in My profile. It is also used to suggest a language to you (French in French-speaking countries; Spanish in Spain and the Spanish-speaking countries of the Americas; Italian in Italy, San Marino and the Vatican; Portuguese in Brazil, Portugal, the Portuguese-speaking countries of Africa and East Timor; English elsewhere) and to preselect your interests. For a visitor without an account, the country of the connection is read on each visit, without being stored, to suggest their language: a first-time visitor to wegoat.fr connecting from a non-French-speaking country is directed to wegoat.app.
Language and time zone: the language you choose (French, English, Spanish, Italian or Portuguese), stored with your account and, in your browser, in a cookie; if you use WeGoat in a language other than French, your device’s time zone (for example “America/Chicago”), so that times are displayed, and emails and notifications are sent to you, at your local time. In French, times are always Paris time. Until you make a choice, the suggested language depends on the site you use (wegoat.fr: French; wegoat.app: English, Spanish, Italian or Portuguese) and on the country of your connection (failing that, your browser’s language); in any language other than French, the time zone may also be guessed by our host from your connection, without being stored.
Interests: the competitions you choose to show or hide (the “Your interests” step at sign-up, then “My interests” in My profile). By default, the boxes are checked according to your country: everything in French-speaking countries; elsewhere, everything except a few shows and competitions reserved by default for France.
Profile: username, avatar (initials color, illustration, club logo, or profile photo if you upload one), notification preferences, date and version of the accepted terms. The profile photo is cropped and reduced (256 × 256 pixels), without its metadata (location, device); it is optional.
Notifications: settings for each notification (push, email, none); for each device on which you turn on push notifications, the technical subscription address assigned by your browser’s push service (Google, Apple, Mozilla or Microsoft), its encryption keys and the browser type; in the app for iPhone, iPad and Mac, the device token assigned by Apple’s notification service (APNs); in the Android app, the one assigned by Google’s notification service (Firebase Cloud Messaging); a log of the notifications sent (type, channel, date, group concerned) to avoid duplicates; a log of team announcements (date sent to your address, delivery status) so that we never send you the same one twice.
Game: groups joined or created (role, join and leave dates), picks, points and leaderboards; groups finished in 1st place; WeGoat XP (total, XP for the month, level, breakdown by source, level-ups); if you asked for it, your removal from the “Members of the month” leaderboard.
Invitations (referrals): your personal invitation token for each group (“?ref=”, 10 randomly generated characters, unrelated to your username or identifier) and, if you joined a group through another member’s personal link, that member’s identity (who invited you), the group and the date.
Results: result entries, confirmations and votes, arbitration decisions.
Chats: messages written in your groups’ chat (text, date, author), the date you last read each chat (unread messages).
Private messages: messages you exchange with another member or with the WeGoat team (text, date, author), the date you last read each conversation, and the list of members you have blocked.
Reports: content or results reported and the reason entered.
Messages to the team: with the “Suggest an improvement or report a bug” form, the message type (improvement or bug) and its text, your username, your account’s email address and identifier, and technical information attached to help us: the page you are writing from, platform (website, iPhone or Android app), app version, the device’s browser and operating system (user agent), screen size; the date sent and the delivery status of the email to the team.
Content created: competitions, questions, photos, group dares and texts that you add.
Technical logs: IP address, browser type, pages requested, date and time, errors, recorded by our hosts for security and the proper operation of the service.

We do not collect payment data, precise location (GPS position, city, address), or your phone’s contacts. We only infer your country from your connection, which you can change in “My profile”, and, if you use WeGoat in a language other than French, your time zone.

3. Purposes and legal bases

Creating and managing your account, running the groups, picks, results and leaderboards: Performance of the contract (the terms of use you accept).
Sending you sign-in emails: Performance of the contract.
Sending you a sign-in code by SMS or WhatsApp, if you choose this method: Performance of the contract.
Limiting SMS or WhatsApp code requests (preventing abuse, controlling their cost): The publisher’s legitimate interest in protecting the service and controlling its cost.
Displaying the service, emails and notifications in your language and at your local time; suggesting a language and interests based on your country: Performance of the contract.
Calculating your WeGoat XP and your level, and awarding “invited players” XP to the member whose personal link brought you into a group: Performance of the contract (rules of the game, Section 5 of the terms of use).
Showing your username, avatar, level and XP for the month in “Members of the month”, and your username, avatar and points in the podiums of the official groups in Play: The publisher’s legitimate interest in running the game among all its members. You can object at any time, without giving a reason: write to contact@wegoat.fr to no longer appear in “Members of the month”; leave the official group to no longer appear in its podium.
Reminders and notifications (email, push notifications on your devices): Your consent, given and withdrawn at any time from My profile (type by type, and device by device for push), or through the unsubscribe link in every notification email. The “Picks to make” and “Results and points” emails are exceptions (below).
Reminding you by email, before they lock, of the picks you haven’t made yet (“Picks to make”), by default: The publisher’s legitimate interest in making sure that every member can make their picks on time in the groups they take part in, even if you have turned off the other email notifications. You receive at most one reminder email per day, for all your groups combined. You can object at any time, without giving a reason: the “Picks to make” setting in My profile, or the unsubscribe link in every reminder email (one-click unsubscribe).
Sending you your results and points by email after each round (“Results and points”), and a congratulations email (“Bravo”) if you win a group, by default: The publisher’s legitimate interest in keeping every member informed of their results and their ranking in the groups they take part in, even if you have turned off the other email notifications. You receive at most one results email per day, for all your groups combined; the “Bravo” email is sent only once per group won. You can object at any time, without giving a reason: the “Results and points” setting in My profile, which also covers the “Bravo” email, or the unsubscribe link in every results email (one-click unsubscribe).
Informing you of important WeGoat news (for example a new app) by email: The publisher’s legitimate interest in letting its members know about major changes to the service, a few times a year, even if you have turned off email notifications. You can object at any time, without giving a reason: the “Stop receiving WeGoat announcements” link in every announcement (one-click unsubscribe), or the “WeGoat news” setting in My profile.
Understanding the use of the mobile apps (number of members on Android and on iPhone): The publisher’s legitimate interest in tracking the adoption of its apps in order to improve them.
Knowing members’ countries (number of members per country): The publisher’s legitimate interest in tracking the distribution of its members by country. You can correct your country at any time in My profile.
Reading and replying to your messages sent with “Suggest an improvement or report a bug”, fixing the problems reported and improving the service: Your request (the message you choose to send us) and the publisher’s legitimate interest in fixing and improving WeGoat.
Moderation, handling reports, preventing abuse and fraud, security: The publisher’s legitimate interest in offering a safe and fair service.
Keeping result votes anonymously after an account is deleted: Legitimate interest: keeping results and leaderboards accurate for the other players.
Responding to requests from the authorities: Legal obligation.

4. Who sees your data

The members of your groups see your username, your avatar, your points and, after a question locks, your picks. A profile photo is published at a public address that is hard to guess; it can be reported by a member and removed by the team. In a public group, other players can see the name of the group and the number of members; the same applies to a keyword group, for anyone who types its exact keyword. If you ask to join an “On request” group, its organizer and its admins see your username, your avatar and the date of the request.
When you make a pick on a competition that has an official WeGoat group, you join that group automatically and your pick is copied there: your username, your avatar and your points then appear in that public leaderboard, visible to its members. If you are in the top three, your username, your avatar and your points also appear in that group’s podium, shown to all WeGoat members in Play, and any member can share the image of that podium. You can leave the group at any time from the group’s page; you are then never added automatically again.
WeGoat XP: your level appears next to your username in your groups’ leaderboards. If you are among the top players of the month, your username, your avatar, your level and your XP for the month appear in “Members of the month”, visible to all signed-in members. The breakdown of your XP is visible only to you (My profile) and to the WeGoat team. On simple request to contact@wegoat.fr, you no longer appear in “Members of the month”; your XP continues to be calculated.
Invitations: who invited you to a group is visible only to the WeGoat team, never to other members. The member who invited you only sees, in their XP breakdown, the number of invited players who became active, never their names. A group’s printable poster contains neither your username nor any other personal data: its QR code leads to your personal invitation link.
Your chat messages are visible to all current members of the group, including those who join later; a member who leaves the group no longer sees them. The WeGoat team reads messages only when they are reported to it. Chat notifications never contain the text of the messages.
Your private messages are read only by the person you are writing to. You can only write to the members of a group you share; if you no longer share a group, the conversation remains readable but no one can write in it anymore. A member you block can no longer write to you and is not notified of it. The WeGoat team reads your private messages with another member only when they are reported to it, for moderation; it may then delete them. Your conversations with the team are read by the team’s administrators, who reply on behalf of the “WeGoat team”. Private message notifications never contain the text of the messages, except the email that tells you about a reply from the team: it quotes that reply.
Your email address is never shown to other players.
Your country is visible only to you (My profile) and to the WeGoat team, never to other players.
Your language, time zone and interests are visible only to you and to the WeGoat team, never to other players.
Your phone number is visible only to you (My profile) and to the WeGoat team, never to other players.
Your messages sent with “Suggest an improvement or report a bug” are read only by the WeGoat team: they reach it by email, and its reply reaches you at your account’s address.
Result votes are never visible by name: players only see counts.
The WeGoat team accesses your data when necessary (support, moderation, security).
The photos of competition contestants (shows, contests) are published by the WeGoat team or by the creator of the competition, from an official press kit or with the person’s consent: they are not players’ data. A person who wants their photo removed can write to us (see “Your rights”).

5. Processors

Supabase: Database, authentication and storage of photos. Data hosted in the European Union (Paris).
Vercel: Hosting and delivery of the app, technical logs and anonymous audience measurement (Vercel Web Analytics) (United States, global network).
Resend: Sending of sign-in emails, notifications and announcements, and of your messages to the team (“Suggest an improvement or report a bug” form) (European Union). Emails are sent from bonjour@wegoat.fr or, for members who use WeGoat in English, from hello@wegoat.app; your replies go to contact@wegoat.fr. The Resend company (Plus Five Five, Inc.) is established in the United States.
ImprovMX: Receiving of emails sent to an @wegoat.app address (for example hello@wegoat.app) and forwarding to the team’s mailbox (contact@wegoat.fr): the sender’s address, the message and the forwarding logs are sent to it. ImprovMX Incorporated (United States; servers in the European Union and the United States).
Twilio: Sending of the sign-in code by SMS or WhatsApp (Twilio Verify). Your number and the code are sent to it with each code request; Twilio keeps its delivery logs according to its own policy (United States; standard contractual clauses, Data Privacy Framework).
WhatsApp (Meta Platforms Ireland Limited): Only if you choose to receive the code by WhatsApp: your number and the code go through Twilio, then through WhatsApp, which delivers the message to your WhatsApp app. Meta Platforms Ireland Limited (Ireland) processes this data under the terms and privacy policy of WhatsApp, which you accepted when you created your WhatsApp account. If you don’t want WhatsApp to be involved, receive the code by SMS when this option is offered, or sign in by email, Google or Apple.
OVHcloud: Hosting of the team’s mailbox (contact@wegoat.fr), which receives your messages sent through this form or directly to this address (France).
Browser push services (Google, Apple, Mozilla, Microsoft): Deliver push notifications to your devices, depending on the browser you use. The content of each notification reaches them encrypted: only your device can read it.
App notification services (Apple, Google): Deliver the notifications of the apps for iPhone, iPad and Mac (Apple Push Notification service) and of the Android app (Firebase Cloud Messaging, Google): the device token and the title and text of the notification are sent to them. Firebase is used only for these notifications: no audience measurement, no advertising.
API-Sports (API-Football and its services for the NFL, NBA, NHL and MLB): Sports data (schedules, scores, data used for the win chance indicators, team logos). No personal data is sent to it: logos are copied by our servers, and your device never connects to it.
Anthropic: Automatic checking of the results of questions in the official catalog (Claude, with web search). Only the question, its possible answers, the competition and the dates are sent to it: no personal data, never your email, your username, your groups or your picks. Questions from competitions created by players are never sent to it.

If you sign in with Google or Apple, these companies process the sign-in as separate controllers, under their own policies. The same applies to Apple (App Store) and Google (Google Play) when you download a WeGoat app.

Some providers are established in the United States (Vercel, Supabase, Resend, ImprovMX, Twilio, Anthropic). Any transfers are governed by the European Commission’s standard contractual clauses and, where the provider participates in it, by the EU–U.S. Data Privacy Framework. If you receive the code by WhatsApp, WhatsApp may also transfer your number and the message outside the European Union, in particular to the United States, under its own privacy policy.

6. Retention periods

Account, profile, country, language and time zone, interests, mobile app usage, picks, points, XP, memberships: as long as your account exists. They are erased immediately when you delete it.
Invitations (referrals): your personal invitation token and the identity of the member who invited you to a group are kept as long as your membership of that group exists; they are erased with your account, with the account of the member who invited you, or with the group if it is permanently deleted. Removal from “Members of the month”: as long as your account exists, or until you ask to appear in it again.
Phone number: as long as your account exists; erased when you remove it from My profile or delete your account. Records of SMS or WhatsApp code requests: 48 hours.
Result votes and content reports: kept with no link to your account after its deletion (anonymized), for the accuracy of results and the follow-up of moderation. Your result reports are erased.
Chat messages: until they are deleted. You can delete your messages at any time; the group’s organizer and admins, or the team, can delete a message that breaks the rules (its text is then erased and “Message deleted” is displayed). They are erased with your account, and with the group if it is permanently deleted.
Private messages: until they are deleted. You can delete your messages at any time (their text is erased and “Message deleted” is displayed); the team can delete a reported message that breaks the rules. A conversation is erased entirely, for both people, as soon as one of them deletes their account; the team’s replies remain in your conversation with the team as long as your account exists.
Private competitions and photos you created: they remain in their group, without mentioning their author, and are erased with it. Profile photo: deleted as soon as you choose another avatar, and with your account.
Push subscriptions: until you turn off notifications on the device, or as soon as the push service indicates that the subscription no longer exists. Notification log: 90 days. Announcement log: as long as your account exists; when it is deleted, only an anonymous count of the sends remains.
Messages to the team (“Suggest an improvement or report a bug” form): 12 months, then erased automatically; erased immediately with your account. The email received by the team follows the rule for exchanges with the team (below).
Inactive accounts: an account with no sign-in for 3 years may be deleted, after a warning email.
Technical logs: a few days, 30 days at most, depending on the hosts.
Backups: the backup copies of the database are replaced on a rotating basis, 30 days at most.
Exchanges with the team (emails): 3 years after the last exchange.

7. Your rights

You have the rights of access, rectification, erasure, restriction, portability and objection, the right to withdraw your consent at any time, and the right to set instructions regarding what happens to your data after your death.

Your username, color, language, country, interests and notifications can be changed directly in My profile; every notification email also contains a link to stop receiving that type of email, and every announcement a link to stop receiving announcements.
Deletion: My profile, then “Delete my account”. Deletion is immediate and permanent.
For other requests (a copy of your data, objection, removal from the “Members of the month” leaderboard, changing your email address if you have difficulty): write to contact@wegoat.fr from your account’s address. We respond within one month.

If you believe that your rights are not being respected, you can file a complaint with the CNIL, the French data protection authority (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

8. Cookies and local storage

WeGoat uses no advertising, audience measurement or social media cookies. Only technical cookies, with no advertising or tracking, are set: they are used for your sign-in, for the proper operation of the service and to remember the display choices you make (language, time zone, display order), which is why no banner is shown to you.

To count visits, WeGoat uses Vercel Web Analytics, an audience measurement tool without cookies and without identifiers: it does not recognize a visitor from one visit or one day to the next and is used only for overall statistics (pages viewed, referrer, country, device type, and a few sign-up steps such as the sign-in method chosen or a code being sent, without email address or number). The addresses sent are anonymized: invitation codes, personal invitation link tokens, group names and sign-in parameters are removed from them. Visits to the app’s share link (wegoat.fr/app) are also counted, anonymously: date, device type (iPhone, Android or other) and the share button they came from, with no IP address, cookie or identifier.

Session cookies (sb-…-auth-token): Keep your sign-in active and secure. Set when you sign in, deleted when you sign out; maximum duration of 400 days.
Sign-in verification cookie (sb-…-code-verifier): Protects sign-in with Google, Apple or an email link. Deleted as soon as sign-in is complete.
App Apple sign-in cookie (wegoat_apple_nonce): In the app for iPhone, iPad and Mac, protects sign-in with Apple. Duration: 10 minutes, deleted as soon as sign-in is complete.
Country cookie (wegoat-country): Avoids checking your country on every page: it only records that the day’s check has been done (a short fingerprint of your account, with no location data at all). Duration: 24 hours.
Language cookie (wegoat-lang): Remembers the language you chose (French, English, Spanish, Italian or Portuguese), or the language of the link you arrived through. No other data. Duration: 1 year.
Time zone cookie (wegoat-tz): Only if you use WeGoat in a language other than French: remembers your device’s time zone (for example “America/Chicago”) so that times are displayed at your local time. Duration: 1 year.
Display order cookies (wegoat_jouer_ordre, wegoat_cercles_ordre): Remember the order you chose for the lists in Play and My groups. No other data. Duration: 1 year.
Device local storage: Your browser or the app also keeps a few settings on your device: the number of times you were offered to turn on notifications, the dismissal of the update banner and, in the apps, the device’s notification token. This information stays on your device and is cleared along with the site’s or the app’s data.
Cache of the installed app: Your browser keeps a copy of the interface files (styles, fonts, images, “offline” page) to display faster. It contains no personal data and is cleared along with the site’s data.

9. Security

Exchanges are encrypted (HTTPS). Access to data is limited by rules enforced by the database itself: each player can only read what concerns them. No password is stored by WeGoat.

10. Minors

The service is open from age 15, or younger with a parent’s consent (see the terms of use). A parent can request the deletion of their child’s account at contact@wegoat.fr.

11. Changes

This policy may change, in particular when new features are introduced. The date of the last update appears at the top of the page; in the event of a significant change, you will be informed in the app.

WeGoat collects the minimum data needed to run a prediction game among friends. No advertising, no trackers, no resale of data.

1. Data controller

OPEN (SARL), 85 avenue Niel, 75017 Paris, the publisher of WeGoat. For any question about your data or to exercise your rights: contact@wegoat.fr.

2. Data collected

Account: email address or mobile number, technical identifier, sign-in method (link or code by email, code by SMS or WhatsApp, Google or Apple), sign-up and last sign-in dates. With Google or Apple, we only receive your email address and, where applicable, your name (which is used to suggest a username).
Phone number: if you sign in by SMS or WhatsApp, or add your number in My profile, your mobile number. It is used only to send you a sign-in code, by SMS or, if you choose, by WhatsApp: never shown to other players, never used for advertising or for other messages. To limit abuse, we keep a record of each code request (number, date, delivery method, encrypted fingerprint of the IP address) for 48 hours, then only monthly totals, with no personal data.
“Find my account”: if, from a new account that is still empty, you recover your old account, the new account is deleted and its phone number (or its email address, if the old account doesn’t have one) moves to the old account. To limit abuse, we keep a record of each code sent by email for this operation (requested address, date, number of attempts) for 48 hours, then only the date and the method used (email or phone).
Mobile app: platform (Android, or iOS for iPhone, iPad and Mac), dates of first and last opening.
Country: the country of your connection, inferred from your IP address by our host (we keep only the country code, never the IP address or the city), or the one you choose in My profile. It is also used to suggest a language to you (French in French-speaking countries; Spanish in Spain and the Spanish-speaking countries of the Americas; Italian in Italy, San Marino and the Vatican; Portuguese in Brazil, Portugal, the Portuguese-speaking countries of Africa and East Timor; English elsewhere) and to preselect your interests. For a visitor without an account, the country of the connection is read on each visit, without being stored, to suggest their language: a first-time visitor to wegoat.fr connecting from a non-French-speaking country is directed to wegoat.app.
Language and time zone: the language you choose (French, English, Spanish, Italian or Portuguese), stored with your account and, in your browser, in a cookie; if you use WeGoat in a language other than French, your device’s time zone (for example “America/Chicago”), so that times are displayed, and emails and notifications are sent to you, at your local time. In French, times are always Paris time. Until you make a choice, the suggested language depends on the site you use (wegoat.fr: French; wegoat.app: English, Spanish, Italian or Portuguese) and on the country of your connection (failing that, your browser’s language); in any language other than French, the time zone may also be guessed by our host from your connection, without being stored.
Interests: the competitions you choose to show or hide (the “Your interests” step at sign-up, then “My interests” in My profile). By default, the boxes are checked according to your country: everything in French-speaking countries; elsewhere, everything except a few shows and competitions reserved by default for France.
Profile: username, avatar (initials color, illustration, club logo, or profile photo if you upload one), notification preferences, date and version of the accepted terms. The profile photo is cropped and reduced (256 × 256 pixels), without its metadata (location, device); it is optional.
Notifications: settings for each notification (push, email, none); for each device on which you turn on push notifications, the technical subscription address assigned by your browser’s push service (Google, Apple, Mozilla or Microsoft), its encryption keys and the browser type; in the app for iPhone, iPad and Mac, the device token assigned by Apple’s notification service (APNs); in the Android app, the one assigned by Google’s notification service (Firebase Cloud Messaging); a log of the notifications sent (type, channel, date, group concerned) to avoid duplicates; a log of team announcements (date sent to your address, delivery status) so that we never send you the same one twice.
Game: groups joined or created (role, join and leave dates), picks, points and leaderboards; groups finished in 1st place; WeGoat XP (total, XP for the month, level, breakdown by source, level-ups); if you asked for it, your removal from the “Members of the month” leaderboard.
Invitations (referrals): your personal invitation token for each group (“?ref=”, 10 randomly generated characters, unrelated to your username or identifier) and, if you joined a group through another member’s personal link, that member’s identity (who invited you), the group and the date.
Results: result entries, confirmations and votes, arbitration decisions.
Chats: messages written in your groups’ chat (text, date, author), the date you last read each chat (unread messages).
Private messages: messages you exchange with another member or with the WeGoat team (text, date, author), the date you last read each conversation, and the list of members you have blocked.
Reports: content or results reported and the reason entered.
Messages to the team: with the “Suggest an improvement or report a bug” form, the message type (improvement or bug) and its text, your username, your account’s email address and identifier, and technical information attached to help us: the page you are writing from, platform (website, iPhone or Android app), app version, the device’s browser and operating system (user agent), screen size; the date sent and the delivery status of the email to the team.
Content created: competitions, questions, photos, group dares and texts that you add.
Technical logs: IP address, browser type, pages requested, date and time, errors, recorded by our hosts for security and the proper operation of the service.

3. Purposes and legal bases

Creating and managing your account, running the groups, picks, results and leaderboards: Performance of the contract (the terms of use you accept).
Sending you sign-in emails: Performance of the contract.
Sending you a sign-in code by SMS or WhatsApp, if you choose this method: Performance of the contract.
Limiting SMS or WhatsApp code requests (preventing abuse, controlling their cost): The publisher’s legitimate interest in protecting the service and controlling its cost.
Displaying the service, emails and notifications in your language and at your local time; suggesting a language and interests based on your country: Performance of the contract.
Calculating your WeGoat XP and your level, and awarding “invited players” XP to the member whose personal link brought you into a group: Performance of the contract (rules of the game, Section 5 of the terms of use).
Showing your username, avatar, level and XP for the month in “Members of the month”, and your username, avatar and points in the podiums of the official groups in Play: The publisher’s legitimate interest in running the game among all its members. You can object at any time, without giving a reason: write to contact@wegoat.fr to no longer appear in “Members of the month”; leave the official group to no longer appear in its podium.
Reminders and notifications (email, push notifications on your devices): Your consent, given and withdrawn at any time from My profile (type by type, and device by device for push), or through the unsubscribe link in every notification email. The “Picks to make” and “Results and points” emails are exceptions (below).
Reminding you by email, before they lock, of the picks you haven’t made yet (“Picks to make”), by default: The publisher’s legitimate interest in making sure that every member can make their picks on time in the groups they take part in, even if you have turned off the other email notifications. You receive at most one reminder email per day, for all your groups combined. You can object at any time, without giving a reason: the “Picks to make” setting in My profile, or the unsubscribe link in every reminder email (one-click unsubscribe).
Sending you your results and points by email after each round (“Results and points”), and a congratulations email (“Bravo”) if you win a group, by default: The publisher’s legitimate interest in keeping every member informed of their results and their ranking in the groups they take part in, even if you have turned off the other email notifications. You receive at most one results email per day, for all your groups combined; the “Bravo” email is sent only once per group won. You can object at any time, without giving a reason: the “Results and points” setting in My profile, which also covers the “Bravo” email, or the unsubscribe link in every results email (one-click unsubscribe).
Informing you of important WeGoat news (for example a new app) by email: The publisher’s legitimate interest in letting its members know about major changes to the service, a few times a year, even if you have turned off email notifications. You can object at any time, without giving a reason: the “Stop receiving WeGoat announcements” link in every announcement (one-click unsubscribe), or the “WeGoat news” setting in My profile.
Understanding the use of the mobile apps (number of members on Android and on iPhone): The publisher’s legitimate interest in tracking the adoption of its apps in order to improve them.
Knowing members’ countries (number of members per country): The publisher’s legitimate interest in tracking the distribution of its members by country. You can correct your country at any time in My profile.
Reading and replying to your messages sent with “Suggest an improvement or report a bug”, fixing the problems reported and improving the service: Your request (the message you choose to send us) and the publisher’s legitimate interest in fixing and improving WeGoat.
Moderation, handling reports, preventing abuse and fraud, security: The publisher’s legitimate interest in offering a safe and fair service.
Keeping result votes anonymously after an account is deleted: Legitimate interest: keeping results and leaderboards accurate for the other players.
Responding to requests from the authorities: Legal obligation.

4. Who sees your data

The members of your groups see your username, your avatar, your points and, after a question locks, your picks. A profile photo is published at a public address that is hard to guess; it can be reported by a member and removed by the team. In a public group, other players can see the name of the group and the number of members; the same applies to a keyword group, for anyone who types its exact keyword. If you ask to join an “On request” group, its organizer and its admins see your username, your avatar and the date of the request.
When you make a pick on a competition that has an official WeGoat group, you join that group automatically and your pick is copied there: your username, your avatar and your points then appear in that public leaderboard, visible to its members. If you are in the top three, your username, your avatar and your points also appear in that group’s podium, shown to all WeGoat members in Play, and any member can share the image of that podium. You can leave the group at any time from the group’s page; you are then never added automatically again.
WeGoat XP: your level appears next to your username in your groups’ leaderboards. If you are among the top players of the month, your username, your avatar, your level and your XP for the month appear in “Members of the month”, visible to all signed-in members. The breakdown of your XP is visible only to you (My profile) and to the WeGoat team. On simple request to contact@wegoat.fr, you no longer appear in “Members of the month”; your XP continues to be calculated.
Invitations: who invited you to a group is visible only to the WeGoat team, never to other members. The member who invited you only sees, in their XP breakdown, the number of invited players who became active, never their names. A group’s printable poster contains neither your username nor any other personal data: its QR code leads to your personal invitation link.
Your chat messages are visible to all current members of the group, including those who join later; a member who leaves the group no longer sees them. The WeGoat team reads messages only when they are reported to it. Chat notifications never contain the text of the messages.
Your private messages are read only by the person you are writing to. You can only write to the members of a group you share; if you no longer share a group, the conversation remains readable but no one can write in it anymore. A member you block can no longer write to you and is not notified of it. The WeGoat team reads your private messages with another member only when they are reported to it, for moderation; it may then delete them. Your conversations with the team are read by the team’s administrators, who reply on behalf of the “WeGoat team”. Private message notifications never contain the text of the messages, except the email that tells you about a reply from the team: it quotes that reply.
Your email address is never shown to other players.
Your country is visible only to you (My profile) and to the WeGoat team, never to other players.
Your language, time zone and interests are visible only to you and to the WeGoat team, never to other players.
Your phone number is visible only to you (My profile) and to the WeGoat team, never to other players.
Your messages sent with “Suggest an improvement or report a bug” are read only by the WeGoat team: they reach it by email, and its reply reaches you at your account’s address.
Result votes are never visible by name: players only see counts.
The WeGoat team accesses your data when necessary (support, moderation, security).
The photos of competition contestants (shows, contests) are published by the WeGoat team or by the creator of the competition, from an official press kit or with the person’s consent: they are not players’ data. A person who wants their photo removed can write to us (see “Your rights”).

5. Processors

Supabase: Database, authentication and storage of photos. Data hosted in the European Union (Paris).
Vercel: Hosting and delivery of the app, technical logs and anonymous audience measurement (Vercel Web Analytics) (United States, global network).
Resend: Sending of sign-in emails, notifications and announcements, and of your messages to the team (“Suggest an improvement or report a bug” form) (European Union). Emails are sent from bonjour@wegoat.fr or, for members who use WeGoat in English, from hello@wegoat.app; your replies go to contact@wegoat.fr. The Resend company (Plus Five Five, Inc.) is established in the United States.
ImprovMX: Receiving of emails sent to an @wegoat.app address (for example hello@wegoat.app) and forwarding to the team’s mailbox (contact@wegoat.fr): the sender’s address, the message and the forwarding logs are sent to it. ImprovMX Incorporated (United States; servers in the European Union and the United States).
Twilio: Sending of the sign-in code by SMS or WhatsApp (Twilio Verify). Your number and the code are sent to it with each code request; Twilio keeps its delivery logs according to its own policy (United States; standard contractual clauses, Data Privacy Framework).
WhatsApp (Meta Platforms Ireland Limited): Only if you choose to receive the code by WhatsApp: your number and the code go through Twilio, then through WhatsApp, which delivers the message to your WhatsApp app. Meta Platforms Ireland Limited (Ireland) processes this data under the terms and privacy policy of WhatsApp, which you accepted when you created your WhatsApp account. If you don’t want WhatsApp to be involved, receive the code by SMS when this option is offered, or sign in by email, Google or Apple.
OVHcloud: Hosting of the team’s mailbox (contact@wegoat.fr), which receives your messages sent through this form or directly to this address (France).
Browser push services (Google, Apple, Mozilla, Microsoft): Deliver push notifications to your devices, depending on the browser you use. The content of each notification reaches them encrypted: only your device can read it.
App notification services (Apple, Google): Deliver the notifications of the apps for iPhone, iPad and Mac (Apple Push Notification service) and of the Android app (Firebase Cloud Messaging, Google): the device token and the title and text of the notification are sent to them. Firebase is used only for these notifications: no audience measurement, no advertising.
API-Sports (API-Football and its services for the NFL, NBA, NHL and MLB): Sports data (schedules, scores, data used for the win chance indicators, team logos). No personal data is sent to it: logos are copied by our servers, and your device never connects to it.
Anthropic: Automatic checking of the results of questions in the official catalog (Claude, with web search). Only the question, its possible answers, the competition and the dates are sent to it: no personal data, never your email, your username, your groups or your picks. Questions from competitions created by players are never sent to it.

6. Retention periods

Account, profile, country, language and time zone, interests, mobile app usage, picks, points, XP, memberships: as long as your account exists. They are erased immediately when you delete it.
Invitations (referrals): your personal invitation token and the identity of the member who invited you to a group are kept as long as your membership of that group exists; they are erased with your account, with the account of the member who invited you, or with the group if it is permanently deleted. Removal from “Members of the month”: as long as your account exists, or until you ask to appear in it again.
Phone number: as long as your account exists; erased when you remove it from My profile or delete your account. Records of SMS or WhatsApp code requests: 48 hours.
Result votes and content reports: kept with no link to your account after its deletion (anonymized), for the accuracy of results and the follow-up of moderation. Your result reports are erased.
Chat messages: until they are deleted. You can delete your messages at any time; the group’s organizer and admins, or the team, can delete a message that breaks the rules (its text is then erased and “Message deleted” is displayed). They are erased with your account, and with the group if it is permanently deleted.
Private messages: until they are deleted. You can delete your messages at any time (their text is erased and “Message deleted” is displayed); the team can delete a reported message that breaks the rules. A conversation is erased entirely, for both people, as soon as one of them deletes their account; the team’s replies remain in your conversation with the team as long as your account exists.
Private competitions and photos you created: they remain in their group, without mentioning their author, and are erased with it. Profile photo: deleted as soon as you choose another avatar, and with your account.
Push subscriptions: until you turn off notifications on the device, or as soon as the push service indicates that the subscription no longer exists. Notification log: 90 days. Announcement log: as long as your account exists; when it is deleted, only an anonymous count of the sends remains.
Messages to the team (“Suggest an improvement or report a bug” form): 12 months, then erased automatically; erased immediately with your account. The email received by the team follows the rule for exchanges with the team (below).
Inactive accounts: an account with no sign-in for 3 years may be deleted, after a warning email.
Technical logs: a few days, 30 days at most, depending on the hosts.
Backups: the backup copies of the database are replaced on a rotating basis, 30 days at most.
Exchanges with the team (emails): 3 years after the last exchange.

7. Your rights

Your username, color, language, country, interests and notifications can be changed directly in My profile; every notification email also contains a link to stop receiving that type of email, and every announcement a link to stop receiving announcements.
Deletion: My profile, then “Delete my account”. Deletion is immediate and permanent.
For other requests (a copy of your data, objection, removal from the “Members of the month” leaderboard, changing your email address if you have difficulty): write to contact@wegoat.fr from your account’s address. We respond within one month.

If you believe that your rights are not being respected, you can file a complaint with the CNIL, the French data protection authority (cnil.fr, 3 place de Fontenoy, TSA 80715, 75334 Paris Cedex 07).

8. Cookies and local storage

Session cookies (sb-…-auth-token): Keep your sign-in active and secure. Set when you sign in, deleted when you sign out; maximum duration of 400 days.
Sign-in verification cookie (sb-…-code-verifier): Protects sign-in with Google, Apple or an email link. Deleted as soon as sign-in is complete.
App Apple sign-in cookie (wegoat_apple_nonce): In the app for iPhone, iPad and Mac, protects sign-in with Apple. Duration: 10 minutes, deleted as soon as sign-in is complete.
Country cookie (wegoat-country): Avoids checking your country on every page: it only records that the day’s check has been done (a short fingerprint of your account, with no location data at all). Duration: 24 hours.
Language cookie (wegoat-lang): Remembers the language you chose (French, English, Spanish, Italian or Portuguese), or the language of the link you arrived through. No other data. Duration: 1 year.
Time zone cookie (wegoat-tz): Only if you use WeGoat in a language other than French: remembers your device’s time zone (for example “America/Chicago”) so that times are displayed at your local time. Duration: 1 year.
Display order cookies (wegoat_jouer_ordre, wegoat_cercles_ordre): Remember the order you chose for the lists in Play and My groups. No other data. Duration: 1 year.
Device local storage: Your browser or the app also keeps a few settings on your device: the number of times you were offered to turn on notifications, the dismissal of the update banner and, in the apps, the device’s notification token. This information stays on your device and is cleared along with the site’s or the app’s data.
Cache of the installed app: Your browser keeps a copy of the interface files (styles, fonts, images, “offline” page) to display faster. It contains no personal data and is cleared along with the site’s data.

9. Security

Exchanges are encrypted (HTTPS). Access to data is limited by rules enforced by the database itself: each player can only read what concerns them. No password is stored by WeGoat.

10. Minors

The service is open from age 15, or younger with a parent’s consent (see the terms of use). A parent can request the deletion of their child’s account at contact@wegoat.fr.

Privacy policy

1. Data controller

2. Data collected

3. Purposes and legal bases

4. Who sees your data

5. Processors

6. Retention periods

7. Your rights

8. Cookies and local storage

9. Security

10. Minors

11. Changes

Privacy policy

1. Data controller

2. Data collected

3. Purposes and legal bases

4. Who sees your data

5. Processors

6. Retention periods

7. Your rights

8. Cookies and local storage

9. Security

10. Minors

11. Changes