Your data
Privacy policy
Last updated 27 August 2026
What we collect, why, who sees it and how long we keep it. We do not sell personal data and we never see your card details.
In one line. We collect the email and listing details you give us, a payment reference from our processor, a two-letter country code so we can show the right currency, and basic analytics. We do not sell anything to anyone, and we do not store your card details at all.
Who we are
The controller of your personal data is [legal entity name], [registered address]. For any privacy question, or to exercise the rights below, write to [privacy@goatworld.io]. Our grievance contact is [name, privacy@goatworld.io].
What we collect
| Data | Why | Basis |
|---|---|---|
| Your name or brand name, email address | To create the listing, send the invoice and contact you about it | Performance of a contract |
| Listing content: name, description, link, image | To publish it on the board you bought | Performance of a contract |
| Payment reference, amount, currency, tax details | To take payment, issue an invoice and keep required records | Contract and legal obligation |
| A two-letter country code derived from your IP address | To choose which currency to display | Legitimate interest in showing correct pricing |
| Aggregate usage: page views, clicks on listings, referrer, approximate region, browser and device type | To report click counts to advertisers and to run the site | Legitimate interest |
| Your currency and theme preference, stored in your browser | To remember your choice between visits | Strictly necessary for a feature you asked for |
We do not knowingly collect data from anyone under 18, and the service is not directed at children. We do not collect special category data, and you should not put any into a listing.
Cookies and local storage
We do not use advertising or cross-site tracking cookies. The site stores two values in your browser's local storage — your chosen currency and your chosen light or dark theme. Clearing your browser data removes them. Analytics, where used, is configured without cross-site identifiers.
A note on the country lookup
To decide whether to show dollars or another currency, the site asks a geolocation service which country your IP address is in. Where the site is served through our own network edge, this happens without your address leaving our infrastructure. Where a fallback provider is used, your IP address is sent to [provider name] for that single lookup. We do not store your IP address for this purpose, only the resulting country code, in your browser.
Who we share it with
- Payment processors — to take payment and issue refunds. They receive your payment details directly; we never see full card numbers.
- Hosting and infrastructure — to serve the site.
- Email delivery — to send invoices and replies.
- Analytics — in aggregate form.
- Professional advisers and authorities — where we are legally required, or to establish or defend a legal claim.
We do not sell personal data, and we do not share it for anyone else's advertising.
International transfers
Our providers may process data outside your country. Where that happens we rely on appropriate safeguards, such as standard contractual clauses or an adequacy decision, depending on the countries involved.
How long we keep it
- Listing content: while the listing is live, and in archives and screenshots afterwards.
- Invoices and payment records: for as long as tax and accounting law requires, typically several years.
- Correspondence: up to [24] months after the last message, or longer if a dispute is open.
- Aggregate analytics: indefinitely, in a form that does not identify you.
Your rights
Depending on where you live, you may have the right to access your data, correct it, delete it, restrict or object to processing, receive a portable copy, withdraw consent, and complain to a supervisory authority. In India you may also nominate another person to exercise these rights on your behalf.
Write to [privacy@goatworld.io] and we will respond within the period the law allows, usually 30 days. One limit worth stating plainly: we cannot delete the record of a published placement where we need it for accounting, tax or the defence of a claim, though we can remove the listing from public view.
Security
We use encryption in transit, restrict access to the few people who need it, and keep payment handling with established processors. No system is perfectly secure; if a breach affects you and the law requires it, we will notify you and the relevant authority.
Changes
We will post any change here and update the date at the top. Material changes affecting how we use data you have already given us will be notified by email where we hold one.