Golden Encounters ("we," "us," or "our") respects your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services ("Service"). By using the Service, you consent to the practices described in this policy.
1. Information We Collect
When you submit an application through our website, we collect the following information:
- First name — to personalize your experience
- Email address — to communicate with you about your application and send your invite code
- Age — to verify you meet our minimum age requirement of 18
- City — to understand our user base geographically
- Newsletter preference — whether you opt in to receive launch updates
We also automatically collect anonymous, aggregated analytics data through Cloudflare Web Analytics (see Section 9).
2. How We Use Your Information
We use your personal information to:
- Process and review your application for early access
- Send you an invite code if your application is approved
- Send launch updates and news (only if you opted in)
- Prevent duplicate applications and fraudulent submissions
- Improve the Service based on aggregated, anonymized data
We do not sell, rent, or share your personal information with third parties for their marketing purposes.
3. Legal Basis for Processing (GDPR)
If you are located in the European Economic Area (EEA), UK, or Switzerland, we process your personal data on the following legal bases:
- Consent — By submitting your application, you consent to the collection and processing of your data for the purposes described above
- Legitimate interest — To prevent fraud, ensure platform security, and improve the Service
You may withdraw your consent at any time by contacting us (see Section 13).
4. Data Storage & Security
Your data is stored securely using industry-standard measures:
- Database: Supabase (hosted on AWS infrastructure) with encryption at rest and in transit (TLS)
- Website hosting: Cloudflare Pages with automatic HTTPS/TLS encryption
- Access controls: Database access is restricted to server-side operations only, using secure service keys that are never exposed to browsers
While we implement reasonable security measures, no method of electronic storage or transmission is 100% secure. We cannot guarantee absolute security of your data.
5. Data Retention
We retain your application data for as long as necessary to fulfill the purposes described in this policy. Specifically:
- Pending applications: Retained until reviewed and for up to 12 months after submission
- Approved applications: Retained for the duration of your use of the Service
- Rejected applications: Retained for up to 6 months, then deleted
You may request earlier deletion of your data at any time (see Section 6).
6. Your Rights (GDPR)
If you are located in the EEA, UK, or Switzerland, you have the following rights regarding your personal data:
- Right to access — Request a copy of the personal data we hold about you
- Right to rectification — Request correction of inaccurate or incomplete data
- Right to erasure — Request deletion of your personal data ("right to be forgotten")
- Right to restrict processing — Request that we limit how we use your data
- Right to data portability — Request your data in a structured, machine-readable format
- Right to object — Object to processing based on legitimate interest
To exercise any of these rights, contact us at privacy@goldenencounters.app. We will respond within 30 days.
7. California Privacy Rights (CCPA)
If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):
- Right to know — You can request information about the categories and specific pieces of personal information we have collected about you
- Right to delete — You can request that we delete your personal information
- Right to opt-out of sale — We do not sell your personal information to third parties
- Right to non-discrimination — We will not discriminate against you for exercising your CCPA rights
To exercise these rights, contact us at privacy@goldenencounters.app.
8. Children's Privacy (COPPA)
Golden Encounters is intended for users who are at least 18 years of age. We do not knowingly collect personal information from children under 18. Our application form requires an age of 18 or older, and we will reject applications that do not meet this requirement. If you believe we have inadvertently collected information from a person under 18, please contact us immediately so we can delete it.
9. Cookies & Tracking
We do not use cookies for analytics or user tracking.
Our website uses Cloudflare Web Analytics, a privacy-first analytics service that collects anonymous, aggregated data without using cookies, fingerprinting, or any client-side state. It does not track individual users or collect personal information.
The only cookie used on our website is an admin_token cookie, which is set exclusively for authenticated administrators accessing the admin dashboard. This cookie is httpOnly, secure, and not relevant to regular users or applicants.
10. Third-Party Services
We use the following third-party services to operate the Service:
- Supabase — Database and authentication services. Privacy Policy
- Cloudflare — Website hosting, CDN, and analytics. Privacy Policy
These services may process your data in accordance with their own privacy policies. We encourage you to review them.
11. International Data Transfers
Your data may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have different data protection laws. By using the Service, you consent to the transfer of your information to these countries. We take steps to ensure your data is treated securely and in accordance with this Privacy Policy.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date. We encourage you to review this policy periodically. Your continued use of the Service after changes are posted constitutes acceptance of the updated policy.
13. Contact Us
If you have questions or concerns about this Privacy Policy, or wish to exercise your data rights, please contact us at: