Privacy Policy

Last updated August 2026

In short: the intents you post are public by design, we don’t run tracking cookies, IP addresses are only ever stored hashed, and payments are handled off-site by a third party.

Who is responsible

The data controller is Goldcote Ltd (Switzerland). Contact: contact@goldcote.com.

What we process

• Intents you post are public. The title, category, region, optional contact and anything else you add are published as a public .md document (at /i/<id>) that anyone — person or agent — can fetch and read. Don’t put anything private in an intent.
• IP addresses — hashed, never stored raw. We compute a salted, daily-rotating hash of your IP prefix purely to rate-limit and prevent abuse. We do not keep your raw IP or use it to identify you, and the hashes cannot be linked across days.
• Local storage on your device. Your browser keeps a few functional values locally — your theme choice, the ids of bids you’ve placed, and whether you’ve dismissed the storage notice. These stay on your device.
• No analytics or advertising cookies. We currently run none.

Payments

Payments for featured slots (“raises”) are processed by NowPayments, a third-party crypto payment provider, on their own pages. We never see or store your wallet keys or payment credentials — we receive only a payment confirmation and an order id. NowPayments’ handling of your data is governed by their privacy policy.

Hosting

The site runs on Cloudflare’s network, which processes technical request data (such as your IP, for security and delivery) as our processor.

Legal basis & retention

We process the above to provide the Service and to keep it safe from abuse. Published intents remain until removed by you or by moderation. Hashed IP values are ephemeral.

Your rights

You can ask us to access or delete data relating to you, or to take down an intent, at contact@goldcote.com.