Privacy Policy
Last updated September 14, 2026
Goalie is a daily goal tracker built and run by one person. The short version: it stores the goals you create and the basic profile on your Google account, so that it can show your score back to you. Nothing is sold, and there is no advertising and no analytics.
What Google shares when you sign in
Signing in asks Google for your name, email address and profile picture, and nothing else. Goalie cannot read your Gmail, Drive, Calendar or Contacts, and cannot act on your behalf in your Google account. Sign-in is brokered by Supabase, so Goalie never sees your Google password.
Goalie’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
What Goalie stores
- Your name, email address and profile picture URL, from Google.
- The goals you create: name, emoji, whether the goal counts up or down, its time of day, and its point value.
- Your tallies — how many times you logged each goal, on which day.
- Your daily points target.
- Your device’s time zone, so that a day rolls over on your clock rather than at UTC midnight.
That is the whole list. There is no location data, no contact list, no device identifier, and no free-text field beyond the names you give your own goals.
Cookies
A sign-in cookie from Supabase keeps you signed in between visits, and two small cookies remember your colour theme and background choice. Those two hold only the option you picked and cannot be read by JavaScript. There are no advertising or tracking cookies of any kind.
Who else handles your data
- Google — sign-in.
- Supabase — the database your goals live in, and the service that manages sign-in.
- Vercel — hosting, which means it processes the web requests your browser makes.
- Animal photo sources — if a background is switched on, your browser loads a photo straight from cataas.com, dog.ceo, randomfox.ca or random-d.uk, so that site sees your IP address and browser the way any website you visit would. It receives nothing about your account or your goals. Cat photos are on by default; Settings → Background → None turns this off.
Your data is not sold, rented, or shared for advertising, and it is not used to train AI models. Nobody else is sent your goals.
How long it is kept, and how to delete it
Your data is kept as long as your account exists. Goalie has no in-app delete button yet, so email goalie@thepackage.com from the address you signed in with and your account, along with every goal, tally and target attached to it, will be deleted. You can also ask for a copy of what is stored about you.
Security
Every table is protected by Postgres row level security, so a query runs as you and can only ever return your own rows — the app has no administrative key that could read across accounts. Traffic is encrypted in transit. No system is perfectly secure, and Goalie makes no guarantee against a breach.
Children
Goalie is not intended for children under 13, and their data is not knowingly collected.
Changes to this policy
If this policy changes, the date at the top of this page changes with it.
Contact
Questions, or a deletion request: goalie@thepackage.com. See also the Terms of Service.