Privacy Policy

Last updated: July 16, 2026

Introduction

Golden Digital ("we," "our," or "us") operates this website and provides free marketing tools for D2C ecommerce brands. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our website and services.

By using our tools and services, you agree to the collection and use of information in accordance with this policy.

Information We Collect

Information You Provide

When you use our calculators and tools, we may collect:

  • Email address (when you request reports or analysis)
  • Name and contact information (when you book calls or submit forms)
  • Business metrics you enter into our calculators (ad spend, revenue, conversion rates, etc.)
  • Website URL (for our audit tool)
  • Company name and industry information
  • Contact information when you reach out to us

Automatically Collected Information

When you visit our website, our hosting and security infrastructure processes basic technical information — such as your IP address, browser type, and the date and time of your request — in server logs to deliver pages, prevent abuse, and diagnose errors.

If (and only if) you opt in to analytics via the cookie banner, Google Analytics 4 also collects:

  • Browser type and version
  • Device information (type, operating system, screen resolution)
  • Pages visited, time spent on pages, and navigation paths
  • Referring website or source
  • Date and time of visits
  • Approximate geographic location (country, region, city based on IP)

How We Use Your Information

We use the information we collect to:

  • Provide and deliver the free tools and services you request
  • Send you analysis reports and recommendations via email
  • Improve our tools and user experience
  • Respond to your inquiries and provide customer support
  • Send you marketing communications (with your consent)
  • Analyze usage patterns and optimize our website (only if you opt in to analytics)
  • Prevent fraud and ensure security

We do not use your information for advertising: we run no ad campaigns through this site, build no custom audiences, and deliver no personalized advertising on third-party platforms.

Cookies & Analytics

Technologies We Use

We keep tracking to a minimum. This is the complete list of technologies this site uses:

Essential Cookies & Local Storage

Required for the website to function properly, such as session state and security tokens. Your cookie consent decision itself is stored in your browser's local storage (under the key gd_cookie_consent) — it is not a cookie and is not transmitted to us or anyone else.

Analytics Cookies (GA4) — Optional, Off by Default

We use Google Analytics 4 to understand how visitors use our tools — and nothing else. Analytics is disabled by default: we run Google Consent Mode v2 with a default of "denied," so GA4 sets no cookies and sends no analytics data unless you opt in through the cookie banner. If you decline, or simply never respond to the banner, no analytics data is collected.

Google Analytics 4 (GA4)

Purpose: Aggregate website analytics — which pages and tools get used, and how visitors navigate the site

Data collected (only after you opt in): Page views, session duration, device and browser information, approximate geographic location, user journey paths

Retention: 14 months (Google Analytics' default)

Consent: Required — analytics stays off until you accept it in the cookie banner

What We Don't Use

This site contains no advertising technology. Specifically, we do not use:

  • Google Ads tags, conversion tracking, or remarketing
  • Google Tag Manager
  • Facebook/Meta Pixel or any other social media pixels
  • Cross-site or cross-device advertising tracking
  • Custom audiences, lookalike audiences, or hashed-email matching

We do not share your data with advertising partners — we don't have any.

Global Privacy Control (GPC) & Do Not Track

We honor Global Privacy Control and Do Not Track signals. Because analytics is off by default and only runs after you explicitly opt in — and because we never sell or share personal information for advertising — visitors sending a GPC or DNT signal are never tracked unless they themselves choose to accept analytics. That is stricter than what these signals require.

Your Analytics Choices

Analytics never runs until you opt in, and you can change your mind at any time:

  • Decline in the cookie banner: Choose "decline" (or simply ignore the banner) and no analytics data is ever collected
  • Withdraw consent later: Clear this site's data in your browser settings — your consent record lives in local storage (gd_cookie_consent), so clearing it resets analytics to off and the banner will re-appear
  • Google Analytics opt-out: Install the GA opt-out browser add-on to block Google Analytics everywhere, including here
  • Browser settings: Adjust your browser to refuse cookies or alert you when cookies are being set
  • Marketing emails: Every marketing email we send includes an unsubscribe link

Cookie Retention Periods

  • Session cookies: Deleted when you close your browser
  • Analytics cookies (GA4): Up to 14 months — and only set if you opt in
  • Consent preference (local storage): Kept until you clear your browser's site data

Service Providers & Subprocessors

We rely on a small set of service providers to run this site. Each receives only the data it needs to do its job:

  • Supabase — database and serverless functions. Stores lead information, form submissions, and tool results.
  • Vercel — website hosting and content delivery.
  • Sentry — error monitoring. Email addresses and IP addresses are scrubbed from error reports before they are sent.
  • Klaviyo — email marketing. Receives your contact details and lead information when you request a report or opt in to emails.
  • Resend — transactional email delivery (audit reports, calendar emails, and contact form messages).
  • Firecrawl — website scraping for the store audit tool. Receives the store URL you submit and fetches that store's public pages.
  • OpenRouter / Anthropic (Claude) — AI analysis powering the store audit, marketing calendar, and ad concept tools.

AI Processing

Our AI-powered tools (Shopify Store Audit, Marketing Calendar Planner, and Ad Concept Generator) work by sending the information you submit — your store URL, publicly available content scraped from that store, and the business details and metrics you enter — to Firecrawl (for scraping) and to Anthropic's Claude models via OpenRouter (for analysis). This data is processed as you entered it — it is not anonymized before being sent — so only submit information you are comfortable having processed by these providers.

Under OpenRouter's and Anthropic's API terms, data submitted through their APIs is not used to train their models. We do not use your submissions to train AI models either.

Data Sharing and Disclosure

We may share your information with:

  • Service Providers: The companies listed in "Service Providers & Subprocessors" above, solely to operate the website and deliver the tools you use
  • Legal Requirements: When required by law, subpoena, or to protect our rights
  • Business Transfers: In connection with a merger, acquisition, or sale of assets

We do not sell your personal information, and we do not share it with third parties for cross-context behavioral advertising. There are no advertising partners in our stack (see the CCPA section below).

Data Security

We implement appropriate technical and organizational security measures to protect your information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption, access controls, and regular security assessments. However, no internet transmission is 100% secure, and we cannot guarantee absolute security.

Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Specifically:

  • Lead information: Retained for up to 3 years from last interaction
  • Calculator data: Retained for up to 90 days
  • Audit results: Retained for up to 1 year
  • Analytics data (GA4): Retained for 14 months — and only collected if you opt in

Your Rights

Depending on your location, you may have the following rights:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete data
  • Deletion: Request deletion of your personal information
  • Opt-out: Unsubscribe from marketing emails at any time
  • Data Portability: Request a copy of your data in a structured format
  • Object to Processing: Object to certain types of data processing
  • Withdraw Consent: Withdraw consent where processing is based on consent

To exercise these rights, contact us at hello@goldendigital.co. We will respond within 30 days (or sooner if required by law).

California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Your California Rights

  • Right to Know: You can request disclosure of the categories and specific pieces of personal information we have collected about you
  • Right to Delete: You can request deletion of your personal information, subject to certain exceptions
  • Right to Correct: You can request correction of inaccurate personal information
  • Right to Opt-Out of Sale/Sharing: You can opt out of the "sale" or "sharing" of your personal information for cross-context behavioral advertising
  • Right to Limit Use of Sensitive Personal Information: You can limit our use of sensitive personal information to what is necessary for providing services
  • Right to Non-Discrimination: We will not discriminate against you for exercising your privacy rights

Notice of Sale/Sharing

We do not "sell" your personal information, and we do not "share" personal information with third parties for cross-context behavioral advertising as those terms are defined under the CCPA/CPRA. We use no advertising networks, pixels, or remarketing tags, so there is no sale or sharing to opt out of.

Opt-out preference signals: If your browser sends a Global Privacy Control (GPC) signal, it is honored. Analytics is off by default until you explicitly opt in, and no data is sold or shared for advertising regardless of any signal.

How to Exercise Your Rights

To submit a request, contact us at:

We will verify your identity before processing your request. You may also designate an authorized agent to make a request on your behalf.

Financial Incentives

We do not offer financial incentives for the collection of personal information.

European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

  • Legal Basis: We process your data based on consent (for analytics cookies and marketing emails), contract performance (for providing the tools you request), and legitimate interests (for security and improving our services)
  • Right to Lodge Complaint: You have the right to lodge a complaint with your local data protection authority
  • Data Transfers: Your data may be transferred to the United States. We rely on Standard Contractual Clauses and other appropriate safeguards for such transfers

Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child under 18, we will take steps to delete such information promptly.

International Data Transfers

Your information may be transferred to and maintained on servers located outside of your state, province, country, or other governmental jurisdiction where data protection laws may differ. If you are located outside the United States, your information will be transferred to the United States. We take appropriate safeguards to ensure your data is protected in accordance with this policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. For significant changes, we may also notify you via email. Your continued use of our services after any modifications constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: