Privacy Policy

1. Who this covers

This policy explains what GoldTix collects, why, and who can see it. It applies to goldtixapp.com and to any account you create there.

GoldTix is an independent, student-built project. It is not affiliated with, endorsed by, or connected to Purdue University or Purdue Athletics, and Purdue does not receive your GoldTix data from us.

2. What we collect

Information you give us: your Purdue email address, your first and last name, your phone number, and — if you choose to add them — your Instagram handle and LinkedIn URL. You also create a password.

Information created by using GoldTix: the games you list tickets for, your asking prices, whether a listing is active, sold, relisted, or removed, and any reports you file about another user.

Records of agreement: the date and time you accepted our Terms of Service, and which version you accepted.

Technical information: our hosting provider records standard server logs, including IP addresses and request times, for security and reliability.

We never collect or store payment card numbers, bank details, or payment app credentials. GoldTix does not process payments at all — money moves directly between you and the other student.

3. Your password

Your password is handled by our authentication provider and stored as a cryptographic hash. It is never stored in readable form, and no one operating GoldTix can see it.

4. What other students can see — read this one

This is the part that makes GoldTix different from a normal website, so it deserves plain language.

While you have an active listing, your first and last name, email address, phone number, and any social handles you added are visible to other signed-in Purdue students who open your listing. That is the entire purpose of the platform: a buyer cannot reach you otherwise.

When you have no active listing — because you sold, removed, or never created one — your profile is not readable by other users.

Your asking prices contribute to the market price ranges shown on each game page, but those are shown as aggregate numbers, not attributed to you by name.

If you are not comfortable with fellow students seeing your phone number, do not create a listing. Browsing does not expose your contact details.

5. Why we use your information

To let you sign in and prove you are a Purdue student.

To show your listing to potential buyers and give them a way to contact you.

To show market price ranges so students can judge whether a price is fair.

To investigate reports, enforce our Terms, and remove people who scam or harass others.

To keep the service running and secure.

We do not use your information for advertising, and we do not build advertising profiles.

6. Who we share it with

Other students, as described in section 4.

Our service providers, who process data on our behalf and are not permitted to use it for their own purposes: Supabase (database and authentication) and Vercel (hosting). If we later add an email delivery provider, it will be listed here.

Law enforcement and Purdue University, where we receive a legitimate request, or where we believe disclosure is necessary to address fraud or a safety risk.

We do not sell your personal information, and we do not share it with data brokers or advertisers.

7. Reports are confidential

If you report someone, they are not shown who reported them. Reports are readable only by the person who filed them and by GoldTix administrators.

This is deliberate: telling a scammer who reported them would invite retaliation against a fellow student.

8. Cookies

GoldTix sets only the cookies needed to keep you signed in and to keep your session secure. Removing them would make accounts impossible.

We do not use advertising cookies, tracking pixels, or third-party analytics. There is no cross-site tracking to opt out of.

9. How long we keep things

Your profile is kept while your account exists.

Listings are retained after they are sold or removed so that market price history stays meaningful and so we can investigate disputes.

Reports are kept while they may still be needed to enforce our Terms, including to identify repeat offenders.

Server logs are retained on our hosting provider's standard schedule.

10. Your choices and rights

You can view and edit your name, phone number, and social handles from your dashboard at any time.

You can remove your listings at any time, which stops other students from seeing your contact details.

You may request a copy of your data, correction of inaccurate data, or deletion of your account and data. Contact us and we will act on it within a reasonable period.

Depending on where you live, you may have additional rights under state privacy law, including in Indiana and California. We honour these requests regardless of whether a given law applies to us by its own thresholds.

Some information may be retained after deletion where we need it to resolve a dispute, prevent fraud, or comply with a legal obligation.

11. Security

Data is transmitted over HTTPS and stored with database-level access rules that restrict who can read what — for example, profiles of students with no active listing are not readable by other users.

No system is perfectly secure, and we cannot guarantee that your information will never be accessed improperly. Use a password you do not reuse elsewhere.

Once you share your phone number or social handle with another student, we have no technical control over what that person does with it.

12. Age

GoldTix is for Purdue students aged 18 or older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

13. Changes

We may update this policy as GoldTix changes. Material changes will appear here with a new effective date and version. If a change materially affects how your information is shared, we will make that clear rather than quietly editing this page.

14. Contact

For privacy questions, data requests, or account deletion, email the GoldTix team at support@goldtixapp.com.