Privacy at Gmoo Links
Version dated November 7, 2026.
Gmoo Links is operated by Goalmoon Tecnologia LTDA, Brazilian company registration (CNPJ) 19.875.719/0001-02, with an address at Avenida Ayrton Senna da Silva, 200 - loja 11, Gleba Fazenda Palhano, Londrina - PR, CEP 86050-460. This notice covers account holders and page visitors. For privacy questions or requests, email contato@goalmoon.com.
1. Account and published content
We process your name, email, account identifier, authentication data, preferences, and profile photo if provided to create and maintain your account. Supabase provides authentication, database, and storage services. Resend delivers transactional messages, including invitations, confirmations, email changes, and password recovery. We do not treat these messages as permission to send marketing emails.
Others can access the revision you publish at the page address. Publishing does not expose your draft, account profile photo, or statistics. Images placed on the public page are part of its content. Review your materials and avoid exposing other people's data without a need or appropriate authorization.
We also process support requests and administrative records needed to protect accounts, publishing, and moderation. Keep medical records, identity documents, passwords, and other sensitive data out of page content and initial support requests.
2. Page statistics and technical records
The app counts visible page loads and link clicks. An event contains the page and revision, time, link where applicable, and a random event identifier to prevent duplicate submissions. The event table does not store IP addresses, cookies, or persistent visitor identifiers. Counts honor Global Privacy Control (GPC) and Do Not Track (DNT) and separate tests marked as QA. Counts do not identify unique people or verify purchases.
Infrastructure providers keep separate technical logs. Your browser sends data needed for the connection, which may include IP address, time, request characteristics, and device details. Vercel, Supabase, and other providers may retain logs to deliver the service, investigate failures, and protect infrastructure. Omitting IP addresses from Gmoo's metrics table does not mean IP addresses are absent from all processing.
3. Sources in outbound links
Links keep the destination set by the owner by default. The owner can enable advanced visitor attribution for a link or featured item. With your consent and no DNT or GPC signal, this option uses a recognized incoming source and medium to set attribution parameters at the destination. The owner chooses the campaign, creative, and precedence between fixed parameters and the observed source.
The recognized source is stored in the browser session per page for up to 30 minutes of activity. It contains no personal identifier. We do not indiscriminately copy the incoming query string, full referrer, email, or search terms. Missing, hidden, and unrecognized sources remain unknown.
Without a permitted source, available storage, or JavaScript, links in this mode identify only Gmoo as the intermediary in addition to fixed parameters explicitly set by the owner. This does not establish that the visitor came from a social network. Identified tests are marked as QA. External destinations can read the parameters and apply their own privacy practices.
4. Analytics and launch attribution
Google Analytics measurement on eligible Gmoo pages requires your consent. The tag loads after acceptance. Access screens and the app do not load Analytics tags. Accepting source attribution on a customer page does not automatically install Google Analytics there.
With consent, we can measure visits and call-to-action clicks and associate the campaign source with a confirmed account and first publication. We use a pseudonymous Analytics identifier and a first-party attribution cookie valid for up to 30 days. These events do not include your name, email, password, or page content. Pseudonymous identifiers can still be personal data.
QA tests are kept separate and are not exported as real conversions. External measurement is disabled on localhost. Launch metrics do not verify revenue. We do not present clicks as paying customers.
5. Your choices and browser storage
Use “Privacy and measurement” to accept, decline, or withdraw consent while keeping access to the links. We honor DNT and GPC even if you previously accepted. Withdrawing clears this browser's source session and our attribution cookie and stops related pending submissions. It does not retroactively delete events already received by a provider. You can exercise your rights using the contact in this notice.
Session and recovery cookies are needed to operate your account. Your measurement preference is stored in your browser and in a cookie valid for 30 days. The source session is separate from the campaign attribution cookie and lasts for 30 minutes of activity. Authorized Google Analytics cookies follow Google's own retention periods. You can also clear site data in your browser settings.
6. Gravatar and other providers
If a usable profile photo is unavailable, the profile may query Automattic's Gravatar using a SHA-256 hash of the normalized email address. The hash can be associated with an identity and does not guarantee anonymity. Your browser requests the image and supplies technical data needed for the connection. Uploading a usable profile photo avoids this lookup as the first option.
We use Supabase for accounts and data, Vercel for hosting, Resend for transactional email, Google for optional measurement, and Gravatar for the photo lookup described above. Shared data depends on each service's purpose. Providers can operate in other countries. Transfers must comply with Brazil's LGPD and applicable safeguards. Contact us for details about specific processing.
Page links lead to third-party services under their own responsibility. We will disclose external abuse protection before activating it. Invite-only access currently does not require Cloudflare Turnstile.
7. Purposes and legal bases
We process data needed for accounts and the service to fulfill our relationship with the account holder. We rely on consent for optional measurement and source attribution described here. Security, abuse prevention, and continuity may require strictly necessary processing based on legitimate interests, subject to necessity, proportionality, and individual rights. Legal obligations and the regular exercise of rights may require retaining specific records. These purposes do not authorize unrestricted collection.
Sponsored advertising is currently inactive. Future permission from a page owner to display an ad will not serve as visitor consent for tracking. Any change of purpose or use of advertising networks or pixels requires separate disclosure and assessment.
8. How long we keep data
We keep account data, content, and administrative records as long as needed for operations, support, and the stated purposes, subject to deletion requests and legal obligations. Technical logs and backups also follow provider cycles. After a deletion request, support will explain any necessary retention and its reasons.
The app's visit and click history currently has no automatic time-based deletion. The dashboard date range is a filter. You can request deletion of data associated with your page through support. We do not promise that this history is discarded after 30 days.
The processing routine removes internal campaign attribution records older than 90 days when it runs. This is not an exact deletion deadline. Retention in Google reports and provider logs follows separate rules. Contact us to clarify retention or request deletion of data associated with you.
9. Your rights and how to contact us
You may request confirmation of processing, access, correction, information on sharing, review of your choices, withdrawal of consent, and anonymization, blocking, or deletion as provided by the LGPD. Portability applies where available. Declining optional measurement does not block the links.
Email contato@goalmoon.com and identify the account, page, or processing at issue. We may request minimal information to verify ownership and protect your data. Keep your password private. We will respond with relevant limitations and legal time frames. We will communicate material changes to this notice and obtain an appropriate choice for new processing that requires consent.