Privacy Policy

Last updated: 10 October 2026

Goldie! is made by one developer. This policy covers the Goldie! app and this website. It is written to be read, and it describes what the game actually does — nothing here is boilerplate.

The short version: you can play the whole game without an account. No ads, no tracking across other apps, no analytics companies, and your data is never sold. The game sends us simple play stats — how long you play and how far you get — so we can make it better, and you can switch that off in Settings. An account exists only so you can publish levels and appear on leaderboards — and you can delete it, and everything with it, from inside the app.

Playing without an account

Every level ships inside the app and plays offline. Without an account, we never learn who you are: no name, no email, no contacts, no location. The app contains no advertising and no third-party analytics or tracking of any kind. The only thing it sends is the play stats described next.

Play stats

To learn which levels are too hard and when players stop playing, the app sends us a few facts about how it is played. They go to our own database (the Supabase service listed below) — never to an analytics company.

A random ID for this install — made by the app on your phone the first time it opens. It is not your phone's advertising ID or any other ID of the device, and it is never shared with anyone.
When you play — when a session starts and roughly how long it lasts.
Each level you try — which level, whether you cleared it, fell or quit, how long the try took and the stars you earned, and when you skip a level.
About the app and the phone — the app version, the kind of system (iOS or Android) and its version, the language setting, the phone's model (for example "Galaxy S24"), its screen size and refresh rate, its memory and graphics chip, and its time zone.
How smoothly it runs — how long the app takes to start, and how smoothly each level played (frames per second).
Which screens you open — for example the shop, the builder or the settings, counted per day, so we know what to improve.

If you are signed in, these stats are linked to your account. Only the developer can see them, through an admin page in the app; no player can. Detailed stats are deleted automatically — each level try after 35 days, each session after 100 days, and everything about an install that has not played for 13 months — leaving only daily totals that name nobody.

Switching it off: Settings → Share play stats. The app stops sending them at once and asks our server to delete everything already recorded for this install.

If you create an account

Accounts exist for the community features: publishing levels, liking, commenting, following makers and racing leaderboards. When you create one, we store:

Your email address and a password — used to sign you in and, if you ask, to reset your password. Your email is never shown to other players and is never publicly readable; only the game's administrator can see it.
The year you were born — so we know the ages of the people who play. Only the game's administrator can see it, and it is deleted with your account.
The moment you accepted the terms — recorded by the server when the account is created.

If you use Continue with Google, there is no password. Google tells us your email address and a number that identifies your Google account, and the sign-in service also keeps the name and the profile picture link that come with your Google account. The game never shows them: other players only ever see the display name you pick. You still pick that name, give your date of birth and accept the terms before the account exists — if you are under 13, nothing is created. If you already have an account with the same email address, Google signs you in to that one.

If you use Continue with Apple (on iPhone), there is no password either. Apple tells us an email address — your own, or the private address Apple forwards to you if you chose Hide My Email — and a number that identifies your Apple ID. Apple does not give us your name. You pick a display name, give your date of birth and accept the terms the same way before the account exists.

Signing up asks for your date of birth to check you are old enough. That check happens on your device. Only the year is sent to us; the day and month are never stored and never sent.

Your public profile

Your display name, your chosen title and character, and your star counts are public — they are the byline other players see under your levels. Nothing else about you is.

Things you make and do

Published levels are public, under your display name, along with their like counts, play counts and leaderboards.
Comments you leave on levels are public.
Likes — the count on a level is public; the list of who liked it is not readable by anyone.
Follows — who you follow is visible only to you. Nobody can see who follows them, and there are no follower lists.
Blocks — visible only to you, and undetectable by the person you blocked.
Drafts — while you are signed in and Back up my drafts is on, levels you are still building are uploaded to your account so they survive a new phone. They stay private until you publish them.
Best times you set on community levels and on the game's own levels appear on that level's public leaderboard under your display name.
Your tries — each try at one of the game's own levels (which level, whether you cleared it, fell or quit, and how long it took) and how many times you played, cleared or quit each community level are recorded against your account. They keep leaderboards and play counts honest and show us which levels are too hard. No other player can see them.
Gems — your gem balance, a record of every gem you earn or spend, the items you unlock with them and your Lucky Spin plays are kept on your account, so they cannot be lost or faked. Only you can see them.
Where runs end on a community level is counted into an anonymous heat-map for its maker — a tally per spot on the level, never linked to any player.
Cloud save — whenever you are signed in, your campaign progress is stored against your account so it can follow you to a new phone. Only you can read it.

Asking for the app on this website

The "Get the app" form on our home page asks for your email address and which phone you have. We use them to send you the link to install Goldie! and for nothing else. We keep the request until the link has been sent, and you can ask us to delete it at any time by writing to the address below.

Who else touches this data

These services, each acting only on our instructions:

Supabase hosts the database and sign-in service that hold everything described above.
Resend delivers email — password resets, and the notice that tells us someone asked for the app. It sees your email address in order to deliver to it.
Google — only if you choose Continue with Google. It confirms who you are to us, and it knows you use Goldie! with your Google account. It gets nothing else from the game.
Apple — only if you choose Continue with Apple. It confirms who you are to us, and it knows you use Goldie! with your Apple ID. It gets nothing else from the game.

That is the whole list. There are no advertising networks, no analytics SDKs, and no data brokers. Your data is never sold or shared for marketing.

Deleting your account

Settings → Account → Delete account, in the app, or sign in at goldiegame.com/account and delete it there. It takes effect immediately and removes your account, profile, published levels, drafts, likes, follows, blocks, comments, leaderboard entries, tries, gems and unlocks, cloud save, inbox, and the play stats of every phone signed in to it.

If you signed in with Apple, deleting the account also tells Apple to stop Goldie! from using your Apple ID, and the game leaves the list in your iPhone's Settings → your name → Sign in with Apple. That step needs Apple's own sheet, so an account that uses Apple is deleted in the app on an iPhone, or by writing to us.

If you signed in with Google, deleting the account also removes what the sign-in service kept from Google. To also remove Goldie! from your Google account's list of connected apps, open your Google Account → Security → Your connections to third-party apps & services.

One exception, kept deliberately: reports. If another player reported something you made, the report is kept for moderation. It holds what was reported (the comment's words, or the level's name) and the internal number of the account it came from, which no longer leads to any name or email. Reports you filed yourself are kept too, with your account removed from them. Deleting an account must not be a way to erase the evidence of abuse.

Security

Every table in the database enforces per-account permissions on the server itself — what the app may read and write is decided by the server, never by the app. Passwords are handled by the sign-in service and are never visible to us.

Children

You must be at least 13 years old to create an account. The game itself — including the level builder — is playable at any age without one.

Changes

If this policy changes in a way that matters, the date at the top changes with it, and a meaningful change will be called out in the app's "What's new" card.

Contact

Questions, or a privacy request: see the support page.