Privacy
Short version: we don't know who you are. We don't want to.
> Last updated: May 2026.
Who we are
Goblinaut is a coming-soon application built by Potca Digital. Data controller: Mia Biberović. For privacy-related questions: hello@goblinaut.com
Company details
POTCA DIGITAL društvo s ograničenom odgovornošću za izdavanje softvera (POTCA DIGITAL d.o.o.), Sljemenska 2, 31000 Osijek, Croatia. OIB (VAT/Tax ID): 03657644253. Commercial register no. (MBS): 030321431, Commercial Court in Osijek. Board members: Mia Biberović and Sanja Radić. Email: hello@goblinaut.com
What we collect
The public website does not collect personal data through registration or login. If you email us, we receive the information you choose to send.
Privacy-first by design
Goblinaut is designed to collect as little data as possible. Everyday support data stays local wherever possible. No advertising, no third-party behavioural tracking, no behavioural-data sales, and no detailed parent surveillance. Any research data in a formal pilot would be collected only under an approved protocol, with consent and assent and strict data-minimisation rules.
Children and parents
Goblinaut is designed for children and teens aged 6 to 16, with children's privacy as a core principle. We do not ask children for age, name, diagnosis, or personal information through this website.
Analytics and tracking
The public website does not use advertising pixels or behavior tracking scripts. It uses Lovable's built-in visitor analytics, which is enabled by default on published Lovable sites and works without adding any script or cookie. It records aggregated traffic data only: page views, visits, visit duration, referral source, device type and country (derived from the browser time zone). It sets no advertising cookies, builds no visitor profiles and does not track individuals across visits or across other websites, so no cookie banner is required. We also use Google Search Console, which reports anonymous, aggregated search statistics collected by Google's search engine rather than by scripts on this site.
Language preference stored on your device
The website stores one entry in your browser's local storage to remember whether you prefer Croatian or English. It contains no identifier, is never sent to us, and can be cleared at any time through your browser settings. This is a strictly necessary setting, so no cookie banner is required.
Service providers
The website is hosted and served through Lovable and Cloudflare, which process technical request data such as IP addresses for delivery and security. Email sent to hello@goblinaut.com is routed by Cloudflare Email Routing and delivered to a Google (Gmail) mailbox. These providers act as processors or independent recipients for that limited purpose only.
Legal basis and retention
If you write to us, we process your message on the basis of our legitimate interest in answering it (Art. 6(1)(f) GDPR), or to take steps at your request before entering an agreement (Art. 6(1)(b) GDPR). We keep email correspondence only as long as needed to handle the conversation, normally up to 24 months, then delete it.
Device permissions
The public website does not request access to the camera, microphone, contacts, location, or other sensitive device permissions.
Your rights (GDPR)
You have the right to access, rectify, erase, restrict, or object to the processing of your personal data, and the right to data portability. For any request, contact hello@goblinaut.com. You may also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr.
Changes to this policy
If the product or website changes in ways that affect privacy, we will update this page and note the date.
Contact
hello@goblinaut.com