Make one

DRAFT — requires review by a qualified lawyer before launch. Not legal advice.

PRIVACY

Last updated 29 October 2026

Who runs this

GOODGES is made and run by Hayder, who is responsible for the data described here. Write to hayder@hey.com about anything on this page.

The short version

The Wall

If you tick “Put my badge on the Wall” and confirm your email, we store a small copy of your finished badge (never the original photo), the name you chose, your phrase and style, and your LinkedIn link if you added one. They are public on the Wall. Names and phrases get a quick automatic check before going up (see processors). You can pause your face, change the link or delete it from your account at any time; pausing or deleting takes it off the Wall immediately, and deleting removes the image from our storage.

The news list

If you tick “Tell me when the job board opens”, we keep a note of that consent and when you gave it. We email you about launches, once a month at most. Every email lets you unsubscribe in one click, and you can also leave from your account. This consent is separate from the Wall: you can have one without the other.

Anonymous counts

To know whether anyone uses this, we count events per day: page views, photos added, downloads by format, translations, joins. With page views we also count the site you came from (just the domain, like linkedin.com), your country (from our host’s network) and whether you’re on a phone or a computer. These are totals per day. We don’t set cookies for this, don’t store your IP address and don’t keep anything that links a count to you. If your browser sends “Do Not Track” or Global Privacy Control, we don’t count you at all.

In your browser

While you design, your draft (including a downscaled copy of your photo) lives in this tab’s session storage so it survives a reload. Closing the tab clears it. If you sign in, a session cookie keeps you signed in; it’s strictly necessary and used for nothing else. A few preferences (sound on or off, the music player) are kept in local storage on your device.

Live camera and GOODGES Cam

GOODGES Live (on this site) and the GOODGES Cam browser extension put the badge on your camera picture. Your camera only opens when you ask for it, and everything happens on your device: the face tracking runs in your browser, with its models served from our domain or packed in the extension, and no camera frame is sent to us or anyone else. A clip is only recorded when you press record, and stays on your device until you share or download it. The extension only works on video-call sites, adds “GOODGES Cam” to their camera list and changes nothing until you pick it; its settings (phrase, colour, style) are kept in your browser’s extension storage, synced by your browser if you have sync on. It collects no data, has no analytics and, unless you turn games on, makes no network requests.

Games with the others in a call are off until you turn them on. Then the extension joins a room on our real-time server (Supabase) named by a scrambled code made from the call’s address (the address itself never leaves your browser), under a random id that changes every call. It sends only game moves, like “a round started” or “the potato was thrown left”, and that you’re there. No picture, sound, name or email; nothing is stored, and the room is gone when the call ends.

Your rights

You can see, change, pause or delete what you gave us from your account, and delete the whole account with everything in it. You also have the rights of access, rectification, erasure, objection, restriction and portability under the GDPR, and the right to complain to your data protection authority (in Spain, the AEPD). For anything else, write to hayder@hey.com.

Processors

Hosting (Vercel). Database, sign-in and file storage (Supabase). Claude by Anthropic, for the headline translator (it receives the text you type) and for the quick check on Wall names and phrases (it receives the name and phrase, never the image); neither is stored by us beyond the Wall entry itself. Email delivery (Resend), for sign-in codes and, if you asked, launch news. No payment processor is connected; the coffee button opens a third-party tip page, and anything you pay there is between you and them.