Privacy

Trivela is a joint initiative of Goalsverse and GOALS Pro League. It is not a company. The people who run those two services run Trivela together and are jointly responsible for how your data is handled here — in the words of the GDPR, they are joint controllers.

For anything on this page, one address reaches them: dpo@trivela.team. You do not need to work out which of the two to ask.

Only what is listed under “What Trivela stores” in the terms: your Discord account details, your handle and sessions, your connections to services, the values you enter or that services report about you, a picture if you upload one, and your GOALS email address if you ask Trivela to remember it. Nothing is collected from any other source, and nothing is bought, inferred or profiled.

Everything Trivela does with your data falls under one of three reasons:

• To provide the account you asked for. Signing you in, keeping you signed in, holding your handle and your connections, and handing a service the ticket that links you. Without this there is no Trivela. (GDPR: performance of a contract.)
• Because you chose it. Passing a value on to a service, connecting your GOALS account, uploading a picture, and remembering your GOALS email are each switched on by you and can be switched off by you. (GDPR: consent, which you withdraw by turning the thing off.)
• To keep the service working and safe. Recording the IP address and browser a session started from, so a stolen session can be recognised, and counting handle changes so the check for a free handle cannot be hammered. (GDPR: legitimate interest — ours, in not being abused, and yours, in your account not being taken.)

There is no advertising, no analytics, no tracking and no selling of data, so none of those need a basis.

Three kinds of party see some of your data, and none of them see all of it:

• Services you connect. Each is told your handle, its own identifier for you, and the resolved value of any field it is registered to receive and you have not switched off. It is told which source a value came from and when, and nothing else about any other service. What a service does with what it receives is governed by that service’s own terms.
• Discord and GOALS, as the places you sign in through. Discord learns that you signed in to Trivela. GOALS learns that a sign-in code was requested for your email address, and sees the one fetch Trivela makes with it.
• Hosting providers, who process data on Trivela’s instructions and for no purpose of their own: Vercel, which serves the site and stores uploaded pictures; Hetzner, on whose server the database runs and whose storage holds its backups; and Bunny, which holds a second copy of those backups.

Nobody else. Trivela does not share data with anyone for marketing, and will not hand it over to a third party except where the law requires it.

Everything Trivela stores is held in the European Union: the database is on a server in Falkenstein, Germany, both copies of its backups are in Germany, and uploaded pictures are in Stockholm, Sweden.

The site itself is served by Vercel, a US company, which means a request you make may be handled by a server outside the EU for the moment it takes to answer it. That is a transfer under EU rules and it is covered by Vercel’s standard contractual clauses. Discord is also a US company; when you sign in with it, its own privacy policy governs what it holds.

Trivela keeps things until you remove them, and does not quietly expire them behind your back. In particular:

• Your account and everything attached to it stay until the account is deleted.
• A sign-in session expires by itself after a period of inactivity and is removed when you sign out. Expired sessions are not currently cleared on a schedule; they go when the account does.
• A service connection you disconnect is kept, marked as ended, so that reconnecting later has a history. The values that service reported are kept, marked as withdrawn, for the reason given in the terms.
• A pending link request expires within minutes of being made whether or not you confirm it.
• A picture you remove is deleted from storage at that moment. Your remembered GOALS email is removed when you untick the box.
• Backups of the database are kept for a rolling window of a few weeks and then expire, so something you delete disappears from them as that window passes. The second copy at Bunny cannot currently be expired automatically and is cleared by hand; until it is, it may hold a deleted record for longer.

Deleting the account removes everything above at once; see the next section for how.

Most of this you can do yourself on your account page: see everything held against you, change or clear any value you entered, choose which source a field takes, switch sharing on or off, disconnect a service, remove your picture, and sign out. What the page shows is what the database holds; there is no hidden copy.

Beyond that, you have the rights the GDPR gives you, and you exercise them by writing to dpo@trivela.team:

• Access — a copy of everything stored about you.
• Correction — of anything wrong that you cannot fix yourself.
• Erasure — deletion of the account and everything attached to it. There is no self-serve delete button yet, so this is done by request. Copies a connected service already received are that service’s to remove, and you should ask it directly.
• Portability — the data you provided, in a machine-readable form.
• Objection — to the processing done on the basis of legitimate interest, described above.

Requests are answered within a month. If you think Trivela has handled your data unlawfully and you are not satisfied with the answer, you can complain to the data protection authority in the EU country you live in.

Trivela sets one cookie: the session that keeps you signed in. It is strictly necessary for the service to work, which is why there is no cookie banner. There are no advertising, analytics or third-party cookies.

You need a Discord account to use Trivela, so Discord’s minimum age applies here too. Trivela does not knowingly hold data about anyone below it; if you believe it does, write to dpo@trivela.team and it will be removed.

When this changes in substance, the text and the date at the top change with it. A change that would let Trivela do more with your data than this page says is not made quietly.