Privacy Policy

Information we collect

Account information

When you create an account or sign in, Goodlah receives an account identifier, email address, and the username or basic profile name used to create your Goodlah profile. Authentication is provided through Supabase. If you use Google or Discord to sign in, that provider sends Supabase the basic account information you approve.

Rankings and activity

We store the rankings and entries you create or submit, including names, descriptions, images, audio links, invitations, and participation records. We also store shortlist selections, pairwise choices, completed personal rankings, and the results calculated from that activity.

Browser and operational information

Goodlah uses authentication cookies to keep you signed in. Your browser may also store your theme preference and unfinished shortlist locally on your device. Our infrastructure may process standard request and diagnostic information, such as IP address, browser type, timestamps, and error details, to operate and protect the service.

How we use information

• To create and secure your account.
• To let you create, join, complete, and compare rankings.
• To calculate personal and community results and highlights.
• To enforce ranking visibility, invitations, and access controls.
• To maintain, troubleshoot, and protect Goodlah.

Google user data

Google sign-in is used only to authenticate you and establish your Goodlah account. Goodlah may receive your Google account identifier, email address, name, and profile image through Supabase. Goodlah does not request access to your Google contacts, files, messages, or other Google services, and does not use Google user data for advertising.

What other people can see

Visibility depends on the ranking. Public rankings are discoverable, unlisted rankings are available to people with the link, and private rankings are limited to approved participants. Within a ranking, your username, submitted entries, completed ranking, comparisons, and related highlights may be visible to other people who are allowed to view that ranking's results.

Do not submit information or media that you do not want shared with the people who can access the ranking.

Service providers and external content

Goodlah uses Supabase for authentication and image storage. Goodlah also runs on infrastructure providers that process data as needed to host the application and database. Google and Discord process information when you use their sign-in services.

Entries can include links or media from other services. Spotify previews are displayed using Spotify's embedded player, and external images or links may connect your browser to their original provider. Those services process information under their own privacy policies. Goodlah does not sell your personal information.

Retention and your choices

We retain account information and ranking activity while they are needed to provide Goodlah and maintain the integrity of shared results. Ranking owners can delete rankings, and voters can restart their own ranking where that option is available. Some information may remain temporarily in backups or logs.

You can change your username from your profile. You can clear locally stored theme or shortlist information through your browser. To request deletion of your account or other personal information, contact the Goodlah operator using the support email listed on the sign-in consent screen.

Security

We use reasonable technical and organizational measures to protect information, but no online service can guarantee absolute security. Keep your account credentials private and report suspected unauthorized access.

Changes to this policy

We may update this policy as Goodlah changes. The effective date at the top of this page will be updated when material changes are published.