Privacy policy
Who is responsible
The controller of personal data on GolVote is the site owner named in the Legal notice. You can contact us about privacy at the email address shown there.
What we collect
When you vote, GolVote stores the duel, your choice, the date and a one-way hash of your IP address combined with a secret key. We cannot turn the hash back into your IP address. There are no user accounts, and we do not collect names, emails or any other data.
Why and on what legal basis
The hash is used only to allow one vote per duel per day and to keep the ranking free of manipulation. The legal basis is our legitimate interest in fair voting (Article 6(1)(f) GDPR; Article 7, IX LGPD).
How long we keep it
Vote hashes are deleted automatically after 48 hours. Aggregated results (vote counts and ratings) contain no personal data and are kept.
Cookies
GolVote does not use cookies for tracking, analytics or advertising, so no cookie banner is needed. Cloudflare Turnstile may use strictly necessary technical data to tell people from bots.
Services we use and transfers
The site runs on Cloudflare (hosting, Turnstile bot protection and cookieless Web Analytics). Player photos load from Wikimedia (upload.wikimedia.org), which receives your IP address when your browser loads an image. Cloudflare may process data outside your country, including in the United States, under the EU-US Data Privacy Framework and Standard Contractual Clauses.
Your rights
You can ask for access to, correction or deletion of your data, object to its processing or ask us to restrict it. Because we only keep a hash for 48 hours, in most cases there is nothing left to identify you. You can also complain to your data protection authority: in Spain the AEPD (aepd.es), in Brazil the ANPD (gov.br/anpd), or the authority in your country.
Children
GolVote does not knowingly collect personal data from children and does not need any to work.
Changes
If this policy changes, the update date on this page changes too.
Updated: . Legal notice