Privacy Policy

This policy applies to goloporim.com, operated by Goloporim, an independent mobile app marketing and attribution consultancy with its office at 11801 Domain Boulevard, Suite 300, Austin, TX 78758, United States. Goloporim is the data controller for personal data described here. For anything in this policy, write to info@goloporim.com.

This policy covers the website only. Personal data we process on behalf of a client under a services agreement is governed by that agreement and its data processing terms, where we act as a processor and the client as controller.

Very little, and we would rather be specific than reassuring.

• No cookies. This site sets no cookies of its own and uses no third-party cookies.
• No analytics and no advertising pixels. There is no Google Analytics, no Meta pixel, no session recording, no heatmapping and no A/B testing script on these pages. We do not know you visited.
• No third-party scripts, fonts or embeds. Everything the pages load — including the typeface — is served from this domain, so loading a page does not disclose your visit to anyone else.
• No account, no login, no local storage of personal data.

The form on our contact page does not submit to a server. When you press send, your browser assembles what you typed into an ordinary email message and opens it in your own email client, addressed to info@goloporim.com. Nothing is transmitted to this website, and nothing you type is stored by it. You see the message before it leaves, and you are the one who sends it.

When that email arrives, we hold what you chose to put in it — typically your name, work email address, employer, role, the apps you are asking about, your measurement setup, a spend band and your description of the problem. We use it only to answer your enquiry and, if it goes further, to scope and deliver the work. We do not use it for unrelated marketing, we do not add you to a newsletter, and we do not sell, rent or share it with anyone.

The site is static files served from a content delivery network. Like every web server, the hosting infrastructure writes short-lived technical logs of requests — IP address, timestamp, the file requested, user agent and response status — which exist to deliver the page, keep it available and defend it from abuse. We do not use these logs to profile visitors, we do not join them to anything else, and we do not attempt to identify you from them.

Our email is handled by our mail provider, which processes messages sent to the address above in order to deliver and store them.

Where the UK or EU GDPR applies, we rely on: legitimate interests for operating and securing the website and for replying to a business enquiry you initiated; and performance of a contract, or steps prior to entering one, where we are scoping or delivering services for you.

• Enquiries that do not become work: up to 12 months, then deleted, so we have context if you come back.
• Client correspondence and records: for the engagement and for as long afterwards as tax, accounting and legal obligations require.
• Hosting logs: retained briefly by the provider for operational and security purposes, then rotated out.

Depending on where you live, you may have the right to ask for a copy of the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent where consent was the basis. California residents additionally have the rights to know, delete, correct and opt out of sale or sharing under the CCPA as amended — we do not sell or share personal information, and we have not in the preceding twelve months. Exercising any right will never cause us to treat you differently.

Write to info@goloporim.com and we will respond within 30 days. Because we hold almost nothing, a deletion request is usually satisfied by deleting an email thread, which we will confirm in writing. If you are in the EEA or UK you may also complain to your local data protection authority.

We are based in the United States, so an email you send us is processed there. Where personal data moves from the EEA or UK to the US in the course of a client engagement, the transfer is covered by the standard contractual clauses or another valid mechanism in the relevant data processing agreement.

This is a business-to-business website and nothing on it is directed at children. We do not knowingly collect personal data from anyone under 16.

The site is served over HTTPS only. Enquiry email is held in access-controlled mailboxes with multi-factor authentication, and client data we are given access to is accessed under named users in the client’s own systems rather than copied into ours wherever that is possible.

If this policy changes we will update the date at the top. Material changes affecting people who have already contacted us will be notified by email to the address they wrote from.