The plain version.
We collect the minimum amount of information necessary to compose your audit and process your payment. We do not have a marketing engine, an analytics suite, a data warehouse, or a desire for any of these.
What we collect.
- From you, at intake
- Your shop URL, your one-sentence goal, the platform you sell on, your email address.
- From your payment provider
- Confirmation that you paid and the last four digits of your card. We never see the full card number.
- From your visit to this site
- Strictly nothing. No analytics. No cookies, except one strictly necessary cookie used for the checkout session itself, which deletes when you close the tab.
What we do with it.
- Use it to compose your audit.
- Email it back to you with the PDF attached.
- Keep a copy in our records for two years, in case you ask a follow-up question or request a re-issue.
- Delete it after two years, or sooner on your request.
What we do not do with it.
- Sell it.
- Share it with anyone other than our payment processor and our email-sending service.
- Use it to train any model, ours or otherwise.
- Re-target you. The Goblin does not have a Facebook account.
Your rights.
You may, at any time, write to goblin@shopgoblin.shop and ask for: a copy of what we hold about you, a correction, or its complete deletion. We will action your request within thirty days. Under GDPR you have additional rights of objection and portability; we honour them in full.
Sub-processors.
We use, at the time of writing, exactly three third-party services. Each is a regulated business with its own published privacy policy.
- Payment processor
- Lemon Squeezy (or Stripe, depending on your region). They handle the card, the receipt, the tax, and the merchant of record.
- Email delivery
- Postmark. They deliver the audit PDF and any reply correspondence.
- File storage
- Cloudflare R2. The PDF lives on R2 for two years, then is purged.
Cookies.
One. A session cookie set by the payment processor at checkout, strictly necessary, set only when you press “Pay nineteen dollars and summon”. It expires when you close the tab. We do not set any other cookie. There is no banner because there is nothing to consent to.