Privacy Policy
Last updated: 30 August 2026
Goldie! is made by one developer. This policy covers the Goldie! app and this website. It is written to be read, and it describes what the game actually does — nothing here is boilerplate.
Playing without an account
Every level ships inside the app and plays offline. Without an account, no personal information is collected at all. The app contains no advertising and no third-party analytics or tracking of any kind.
If you create an account
Accounts exist for the community features: publishing levels, liking, commenting, following makers and racing leaderboards. When you create one, we store:
- Your email address and a password — used only to sign you in and, if you ask, to reset your password. Your email is never shown to other players and is never publicly readable.
- The moment you accepted the terms — recorded by the server when the account is created.
Signing up asks for your date of birth to check you are old enough. It is used once, on your device, and is never stored and never sent to us.
Your public profile
Your display name, your chosen title and character, and your star counts are public — they are the byline other players see under your levels. Nothing else about you is.
Things you make and do
- Published levels are public, under your display name, along with their like counts, play counts and leaderboards.
- Comments you leave on levels are public.
- Likes — the count on a level is public; the list of who liked it is not readable by anyone.
- Follows — who you follow is visible only to you. Nobody can see who follows them, and there are no follower lists.
- Blocks — visible only to you, and undetectable by the person you blocked.
- Best times you set on community levels appear on that level's public leaderboard under your display name.
- Where runs end on a community level is counted into an anonymous heat-map for its maker — a tally per spot on the level, never linked to any player.
- Cloud save — your campaign progress is stored against your account so it can follow you to a new phone. Only you can read it.
Who else touches this data
Two services, both acting only on our instructions:
- Supabase hosts the database and sign-in service that hold everything described above.
- Resend delivers account email — password resets and nothing else. It sees your email address in order to deliver to it.
That is the whole list. There are no advertising networks, no analytics SDKs, and no data brokers. Your data is never sold or shared for marketing.
Deleting your account
Settings → Account → Delete account, in the app. It takes effect immediately and removes your account, profile, published levels, likes, follows, blocks, comments authorship, leaderboard entries, cloud save and inbox.
One exception, kept deliberately: if your content was reported by another player, the report itself is retained for moderation — with your account identifiers removed. Deleting an account must not be a way to erase the evidence of abuse.
Security
Every table in the database enforces per-account permissions on the server itself — what the app may read and write is decided by the server, never by the app. Passwords are handled by the sign-in service and are never visible to us.
Children
You must be at least 13 years old to create an account. The game itself — including the level builder — is playable at any age without one.
Changes
If this policy changes in a way that matters, the date at the top changes with it, and a meaningful change will be called out in the app's "What's new" card.
Contact
Questions, or a privacy request: see the support page.