Privacy Policy

The data controller is [OPERATOR LEGAL NAME] of [OPERATOR POSTAL ADDRESS]. Privacy questions and data requests go to [CONTACT EMAIL].

Mind Goblin is self-hosted. Your account and all of your study data sit on a server the operator runs, not on a third-party platform.

Creating an account stores:

Signing in creates a server-side session and sets one cookie. Mind Goblin also keeps a short audit trail of security-relevant events.

This is the data the product exists to keep. It is stored per account on the operator’s own server, is not shared with anyone, and is never sold.

Card details never reach this server. Subscribing redirects you to a checkout page hosted by Stripe, and managing your subscription opens Stripe’s billing portal. Card numbers, expiry dates, and security codes are entered on Stripe’s pages and held by Stripe. Mind Goblin has no code that could receive them.

What Mind Goblin does store for billing:

Your email address and your account identifier are sent to Stripe when a customer record is created, so that your receipts reach you and so an incoming Stripe webhook can be matched back to your account.

Mind Goblin sets one cookie, atlas_session. It holds a random session token, is httpOnly so page scripts cannot read it, is marked Secure in production, and is sent only to this site. It exists so you stay signed in; it is not used to profile you.

The session lasts up to 30 days of use and the token is replaced with a fresh one every 24 hours, which limits what a stolen cookie is worth. A session cannot be renewed past 90 days from when it was created, so even a browser in daily use is signed out eventually. Signing out revokes the session on the server, not just in your browser.

There are no other cookies. No analytics cookie, no advertising cookie, no cross-site tracker.

Mind Goblin loads no third-party analytics, no advertising pixels, and no tracking scripts. There is no Google Analytics, no tag manager, no session recorder, and no social media embed. Nothing about your study session is shared with an advertising network, because nothing is collecting it.

This is enforced as well as stated: the site’s Content Security Policy restricts scripts, fonts, frames, and network connections to this origin, so a third-party tracker could not load even if one were added by mistake.

The server keeps ordinary request logs — method, path, status, duration, and a correlation id — which the operator reads to diagnose faults. They are not used to build a profile of you.

Mind Goblin sends email for exactly two reasons: confirming your email address after registration, and resetting a forgotten password. There is no marketing email, no newsletter, and no list to be added to.

Mail is sent through the SMTP server the operator configures: [SMTP PROVIDER, IF ANY]. If no SMTP server is configured on this instance, those links are written to the server log for the operator instead of being emailed — so on an instance without mail, an administrator can see a password-reset link. Separately, Stripe emails you receipts and payment notices for your subscription.

• Stripe — payment processing. Receives your email address, your Mind Goblin account identifier, and the payment details you give it directly. Stripe is the only third party that receives your personal data in the normal running of the service.
• Cloudflare — the site is reached through a Cloudflare Tunnel, so your requests pass through Cloudflare’s network in transit and your IP address is visible to it, as it would be to any CDN or reverse proxy.
• The hosting the operator uses — [HOSTING / DATA CENTRE LOCATION]. The database, cache, and your study files all live there.

Your data is not sold, rented, or shared with advertisers, data brokers, or analytics vendors.

Account data, study data, and billing records are processed to perform the contract you enter into when you subscribe. Session records, IP addresses, and the security audit trail are processed in our legitimate interest in keeping accounts secure and the service available. Tax and accounting records held by Stripe are kept to meet a legal obligation.

Whether this framing applies to you depends on where you live: [APPLICABLE DATA PROTECTION LAW — e.g. UK GDPR, EU GDPR, CCPA].

Mind Goblin has a built-in export. On the progress centre, Export everything downloads a single JSON file containing your settings, progress, study history, mastery analysis, bookmarks, and the email address and account id on the account. The file is generated on request — there is no queue and nothing to ask for.

The export endpoint requires an account with current access, so take a copy before a trial or subscription lapses if you want one.

Account deletion is in the app, under your account page. It asks for your email address and your password, then permanently removes your account row, every session, your subscription records, your quiz and lab history, and your entire data directory on the server. It runs immediately and cannot be reversed.

If a subscription is still current, deletion is refused until you cancel it, so that deleting the account cannot leave Stripe billing you for a subscription you can no longer use.

Records Stripe holds for its own tax and accounting obligations survive the deletion of your Mind Goblin account; Stripe is the controller of those. Server request logs are also not reached by account deletion and age out on their own rotation schedule.

• Account and study data: until you delete the account. Mind Goblin does not automatically delete inactive accounts.
• Sessions: expired and revoked sessions stop working at once; no session survives 90 days from creation.
• Email verification and password-reset tokens: stored only as hashes, single-use, and valid for 72 and 2 hours respectively.
• Security audit events and server logs: [LOG RETENTION PERIOD].

Depending on where you live you may have the right to access, correct, export, or erase your personal data, to object to or restrict certain processing, and to complain to a supervisory authority. Access, export, and erasure are all available to you directly in the app, as described above. For anything else, write to [CONTACT EMAIL].

The supervisory authority you can complain to is [SUPERVISORY AUTHORITY].

Mind Goblin is aimed at adults studying for a professional certification and is not designed for children. The minimum age that applies here depends on jurisdiction: [MINIMUM AGE].

Material changes will be announced at the email address on your account before they take effect. The “last updated” date at the top always reflects the current version. The subscription terms themselves are in the terms of service.