Goduil Logo

Privacy Policy

Introduction

This Privacy Policy explains exactly what information I collect, how I use it, and your rights regarding your personal data.

Information I Collect

Account Information

When you create an account on my platform, I collect:

  • Email address (required for account creation and authentication)
  • Password (securely encrypted using industry-standard hashing and never stored in plain text)
  • Profile information you optionally choose to provide:
    • Display name (defaults to email username if not provided)
    • Bio or description
    • Age
    • Gender
    • Profile picture (avatar)
    • Availability status
    • Personality trait choices (e.g., chill, energetic, outgoing, adventurous, supportive, consistent, talkative, competitivec, etc)

User Activity Data

When you use my services, I store:

  • Activities and businesses you bookmark to join with others
  • Optional personal notes you add to your bookmarked activities
  • Information you provide when you communicate with other members

Preferences and Settings

I store your preferences to personalize your experience:

  • Email notification preferences
  • Message notification preferences
  • Marketing email preferences
  • Theme preference (light or dark mode, stored in your browser's local storage)

Analytics and Technical Information

I use Google Analytics to understand how my platform is used and to improve my services. Google Analytics automatically collects:

  • Pages you visit on my platform
  • Time spent on pages
  • Browser type and version
  • Device type (desktop, mobile, tablet)
  • Operating system
  • Approximate geographic location (country/city level based on IP address)
  • Referring website (how you arrived at my platform)

Additionally, I collect:

  • Authentication session data (stored securely in cookies with "sb-" prefix)
  • Theme preferences (stored in your browser's local storage)

Information I Explicitly Do NOT Collect

To be completely clear, I do NOT collect:

  • Your precise location or GPS coordinates - I never access your device's location services or track where you are
  • Your search queries - When you search for activities, I do not store or track what you searched for
  • User IDs during searches - Your searches are not associated with your account
  • Browsing activity on other websites - I only track your activity on my own platform
  • Personal identification documents (driver's license, passport, etc.)
  • Financial information
  • Phone numbers
  • Social security numbers or government-issued IDs
  • Biometric data
  • Health information

How I Use Your Information

I use the information I collect for the following specific purposes:

  • Create and maintain your account with secure authentication
  • Authenticate your identity when you sign in
  • Display your public profile information to other users (only the information you choose to make public)
  • Enable you to bookmark activities
  • Store your personal notes on bookmarked activities
  • Facilitate communication between members
  • Send you notifications based on your preferences (you control these settings)
  • Remember your theme preference (light or dark mode)
  • Analyze how my platform is used through Google Analytics to improve my services
  • Understand which features are most popular and identify areas for improvement
  • Detect, prevent, and address technical issues and security vulnerabilities
  • Comply with legal obligations if required

I do NOT:

  • Sell your personal information to anyone
  • Share your email address with third parties
  • Use your data for advertising purposes
  • Share your bookmarked activities or notes with anyone
  • Track your location or monitor your activity outside my platform

Information Sharing and Disclosure

I do not sell your personal information to anyone, ever. Here's exactly how your information is shared:

Public Information

The following profile information is publicly visible to all users and visitors of my platform (you control what you share):

  • Display name
  • Profile picture
  • Bio
  • Age and gender (if you choose to provide them)
  • Availability status
  • Personal vibes/interests

Private Information

The following information is kept completely private and is never shared publicly:

  • Email address - Never visible to other users or made public
  • Your bookmarked activities and personal notes - Only you can see these
  • Your notification and email preferences - Private settings

Third-Party Service Providers

I use the following third-party services to operate my platform:

  • Supabase: Provides database, authentication, and file storage services. All your account data, profiles, posts, and bookmarks are stored on Supabase's secure infrastructure. Supabase has access to this data to provide the service but does not use it for any other purpose. Supabase Privacy Policy
  • Google OAuth: If you choose to sign in with Google, Google may receive confirmation that you used their service to authenticate. I only receive your name, email, and profile picture from Google. Google Privacy Policy
  • Google Analytics: Collects anonymous usage statistics to help me understand how people use my platform. This includes page views, time spent, browser information, and approximate location. Google Analytics does not have access to your email, profile information or bookmarked activities. Google Privacy Policy
  • Google Fonts: Loads font files to display text properly. Google may log font requests but this data is not linked to your account. Google Privacy Policy

Important: I do not share your email address, bookmarks, or notes with any third parties, including analytics services.

Legal Requirements

I may disclose your information only when legally required, such as:

  • To comply with valid legal processes or government requests
  • To protect the rights, property, or safety of my platform, users, or the public
  • To prevent fraud or abuse of my services
  • In connection with a business transfer, merger, or acquisition (you would be notified)

Data Security

I implement appropriate technical and organizational security measures to protect your personal information:

  • All passwords are encrypted using industry-standard bcrypt hashing
  • Data transmission is protected using HTTPS/TLS encryption
  • Row-level security (RLS) policies ensure users can only access their own data
  • Authentication sessions are securely managed with encrypted cookies
  • Profile pictures are stored in a secure storage bucket with controlled access
  • Database hosted on Supabase with enterprise-grade security

However, no method of transmission over the internet is 100% secure. While I strive to protect your data, I cannot guarantee absolute security.

Your Rights and Choices

You have complete control over your personal information. Here are your rights:

  • Access Your Data: You can view all your profile information, bookmarks, and settings in your account dashboard at any time.
  • Correct Your Data: You can update your profile information, preferences, and settings whenever you want through your account settings.
  • Delete Your Account: You can permanently delete your account and all associated data through your profile settings. This action cannot be undone and will immediately remove:
    • Your profile and all profile information
    • Your bookmarked activities and personal notes
    • Your communication history
    • Your notification preferences
    • Your account credentials
  • Control Notifications: You can manage email and message notifications in your settings at any time.
  • Opt Out of Marketing: You can opt out of marketing emails at any time through your settings.
  • Opt Out of Analytics: You can opt out of Google Analytics tracking by using the Google Analytics Opt-out Browser Add-on or enabling Do Not Track in your browser.
  • Export Your Data: You can request a copy of your data by contacting me through my contact page. I will provide your data in a commonly used format within 30 days.
  • Withdraw Consent: If you previously consented to certain data processing, you can withdraw your consent at any time by updating your settings or deleting your account.

Cookies and Tracking Technologies

I use cookies and browser storage technologies for the following purposes. When you first visit my website, you'll see a cookie consent banner that allows you to choose which cookies you want to accept.

Essential Cookies (Always Active)

These cookies are necessary for the website to function and cannot be disabled:

  • Authentication Cookies: Keep you signed in securely (prefixed with "sb-"). These are first-party cookies set by my domain and are essential for the platform to function.
  • Theme Preference: Stores your light/dark mode preference in browser local storage (not a cookie).
  • Consent Preferences: Remembers your cookie consent choices so I don't ask you again on every visit.

Analytics Cookies (Optional - Requires Your Consent)

These cookies help me understand how visitors use my website. They are only loaded if you consent to analytics tracking:

  • Google Analytics Cookies: These third-party cookies track your usage of my platform to help me understand visitor behavior. Google Analytics sets cookies like _ga, _gid, and _gat. These cookies are only set after you accept analytics tracking in my cookie consent banner.

Managing Your Cookie Preferences

You have complete control over which cookies I use:

  • Cookie Consent Banner: When you first visit my site, you'll see a banner allowing you to accept all cookies, reject optional cookies, or customize your preferences.
  • Change Preferences Anytime: You can modify your cookie preferences at any time by clicking the "Cookie Preferences" link in the footer of any page.
  • Browser Settings: You can also control cookies through your browser settings:
    • Block all cookies (note: this will prevent you from signing in)
    • Delete existing cookies
    • Set preferences for third-party cookies
  • Google Analytics Opt-out: Install the Google Analytics Opt-out Browser Add-on to prevent Google Analytics from tracking your activity across all websites.

Note: Disabling essential authentication cookies will prevent you from staying signed in and using account features. Analytics cookies can be disabled without affecting the functionality of my platform.

Consent Records

I maintain records of your consent choices to comply with privacy regulations like GDPR and CCPA. These records include:

  • Which cookie categories you accepted or rejected
  • When you made your consent choices
  • Anonymized technical information (browser type and partially masked IP address for verification purposes)

These records are stored securely and used solely for compliance and audit purposes.

Third-Party Links

My platform displays information about local businesses and activities. When you visit their websites or contact them directly, you will be subject to their privacy policies. I am not responsible for the privacy practices of these third parties.

International Data Transfers

Your information is stored and processed on servers provided by Supabase and may pass through Google's infrastructure for analytics. These services operate globally and may transfer your data across borders:

  • Supabase: Your account data is hosted on Supabase's infrastructure, which may be located in various countries. Supabase complies with international data protection standards.
  • Google Services: Google Analytics and Google Fonts data may be processed in the United States and other countries where Google operates.

By using my services, you consent to the transfer of your information to these locations. These providers maintain appropriate safeguards to protect your information in accordance with applicable data protection laws.

Data Retention

I retain your personal information for as long as your account is active or as needed to provide you services. Here's what happens to your data:

When Your Account is Active

  • All your account data, profile, preferences, and bookmarks are retained
  • You can access and modify this data at any time through your account settings

When You Delete Your Account

When you delete your account through your profile settings, the following happens immediately:

  • Your profile and all profile information are permanently deleted from my database
  • Your bookmarked activities and personal notes are permanently deleted
  • Your notification preferences are removed
  • Your account credentials are deleted

Data That May Remain After Deletion

  • Google Analytics data: Anonymous usage data collected by Google Analytics may be retained according to Google's data retention policies (typically 26 months). This data is not linked to your account and cannot be used to identify you.
  • Legal records: I may retain minimal records if required by law or for legitimate legal purposes.
  • Backup systems: Deleted data may remain in backup systems for a short period (typically 30-90 days) before being permanently removed.

Changes to This Privacy Policy

I may update this Privacy Policy from time to time to reflect changes in my practices or for legal, operational, or regulatory reasons. I will notify you of any material changes by:

  • Posting a notice on my platform
  • Sending you an email notification (if you have opted in to email communications)

I encourage you to review this Privacy Policy periodically to stay informed about how I protect your information.

Contact Me

If you have any questions about this Privacy Policy or my privacy practices, please contact me through my contact page.

You can also reach out to me if you would like to:

  • Request a copy of your data
  • Report a privacy concern
  • Ask questions about how your data is used
  • Request deletion of your account