Privacy at Xgoals
Xgoals works without an account and keeps nothing about you unless you choose a feature that needs it. Here is exactly what is kept, why, and for how long.
Last updated: 7 November 2026
Who we are
Xgoals (xgoals.io), the football livescore with live xG, is run by Media Pro Holdings Ltd (“we”), which decides how the data described here is used (the “controller” under the EU General Data Protection Regulation, GDPR).
Registered office: Martinegkou 44-48, 115 24 Athens, Greece. Contact for anything about your data: contact [at] xgoals [dot] io, or the contact form. More about us in the legal notice.
In short
- No sign-up, no account needed. Xgoals works fully without telling us anything about you.
- Nothing about you by default. Your Favourites and settings stay in your own browser.
- Analytics only with your yes. Nothing from Google loads unless you accept.
- We never sell your data or share it for advertising.
What we keep, why, and for how long
| What | What we keep | Why, and on what basis | How long |
|---|---|---|---|
| Visiting Xgoals | Nothing. Our web server keeps no log of visitors. Your browser's address (IP) is used only to send you the pages. | To show you the site. | Not kept. |
| Your settings and Favourites | Nothing on our side: followed matches, favourite teams, players and leagues, pins and screen settings stay in your own browser (its local storage). | To remember your choices. | Until you clear them in your browser. |
| Google Analytics (only if you accept) | Google counts your visit and which parts of Xgoals you use (pages, opened matches and tabs, settings you switch), with its own cookies. | To see what helps and what does not. Basis: your consent (GDPR art. 6(1)(a)). | At most 14 months at Google. Declining stops it from the next page. |
| Goal notifications (only if you turn them on) | Your browser's notification address and the matches and teams the notifications cover. | To send you the notifications you asked for. Basis: your consent. | Until you turn them off, or your browser ends the address; then deleted at once. |
| My xGoals on all your devices (optional) | A random account number, your passkey's public key, the matches, teams, players and leagues you follow, your choice of Light or Dark and of page width, the time of each change, and a fingerprint of each device's sign-in cookie. No name, email, password or IP address. | To show your Favourites and your choices on all your devices. Basis: the service you ask for (art. 6(1)(b)). | Until you delete it (“Delete my xGoals data” in My xGoals: removed at once). A removed item is remembered 120 days so all devices drop it; the nightly backup copy is kept 3 days. |
| Contact form and email | Your message, the topic, the page it is about and, if you give it, your email address. | To answer you. Basis: our legitimate interest in answering messages (art. 6(1)(f)). | Not stored on the website: it reaches our mailbox by email and is deleted when dealt with, at the latest after 12 months. |
Cookies and local storage
You choose about analytics in the banner on your first visit; Cookie settings (also in every footer) brings the choice back at any time.
| Name | Set by | What for | When |
|---|---|---|---|
| xgs (cookie) | Xgoals | Keeps this device signed in to My xGoals on all your devices. Strictly necessary for that service. | Only if you turn it on; one year, or until you sign out. |
| _ga, _ga_* (cookies) | Google Analytics | Counts visits (see above). | Only if you accept; up to 14 months. |
| xg.* (local storage) | Xgoals | Your Favourites, pins, leagues and screen settings, and your cookie choice. Never sent to us, except what you sync with My xGoals or the matches of your notifications. | Until you clear them. |
Who helps us
These companies handle data for us, under their data processing terms:
- Hetzner Online GmbH, Germany: our servers, where the website and the My xGoals data are kept (in the EU).
- Microsoft (Microsoft 365): our email, where contact messages arrive.
- Google Ireland Limited: Google Analytics, only if you accept. Google may process data in the United States, under the EU-US Data Privacy Framework.
- Your browser's push service (Apple, Google, Mozilla or Microsoft): delivers notifications, only if you turn them on.
Bookmakers and odds
Xgoals shows pre-match odds and may show bookmakers' banners and links. We may receive a commission when a visitor opens an account with a bookmaker through them. We do not pass your data to bookmakers: if you follow a link, the bookmaker's own privacy policy applies from there. Betting is for adults only (18+).
Your rights
Under the GDPR you can ask to see the data we keep about you, get a copy, correct it, delete it, limit or object to its use, and withdraw a consent at any time (which does not affect what was done before). Most of this you can do yourself: Cookie settings for analytics, your browser's settings for notifications, and “Delete my xGoals data” in My xGoals. For anything else, write to contact [at] xgoals [dot] io; we answer within one month.
You can also complain to a data protection authority, in particular in the EU country where you live or work.
Children
Xgoals shows betting odds and is meant for adults. We do not knowingly keep data about anyone under 18.
Security
Every page is served over an encrypted connection (HTTPS). My xGoals uses passkeys, so there is no password to steal; we keep only a passkey's public key, which cannot sign anyone in. Our servers are in the EU, accept only key-based administrator sign-in and are updated automatically.
Changes to this page
When what we keep changes, this page changes first, with a new date at the top.
Odds and alerts are shown for information only. 18+ · Please gamble responsibly.