Privacy Policy

1. Who this covers

This policy explains what GoldTix collects, why, and who can see it. It applies to goldtixapp.com and to any account you create there.

GoldTix is an independent, student-built project. It is not affiliated with, endorsed by, or connected to Purdue University or Purdue Athletics, and Purdue does not receive your GoldTix data from us.

2. What we collect

Information you give us: your Purdue email address, your first and last name, your phone number, and — if you choose to add them — your Instagram and Snapchat handles. You also create a password. (Accounts made earlier may also have a LinkedIn URL; we no longer ask for one, and you can clear it from your dashboard.)

How you heard about us: an optional answer when you sign up. If you pick “Somewhere else” you can type where in your own words. It is used only to understand which channels reach students, it is never shown to other students, and leaving it blank changes nothing about your account.

Information created by selling: the games you list tickets for, your asking prices, whether a listing is active, sold, relisted, or removed, and any reports you file about another user. When you mark a ticket sold we ask whether the sale happened through GoldTix, and occasionally how you would rate the experience out of five; both are optional, are used only to understand how the marketplace is working, and are never shown to other students.

Information created by buying: when you open a seller's contact details or tap to text them, we record that you did, which listing it was, and when — including if you do it again later. This is how the marketplace knows a listing may be gone; without it, sold tickets sit around wasting other students' time. We do not ask you to confirm whether you bought anything.

Records of agreement: the date and time you accepted our Terms of Service, and which version you accepted.

Moderation records: if someone reports you, we keep a copy of your email address alongside that report as evidence, so the report still means something if the account later disappears. We also record which accounts have administrator access.

Technical information: our hosting provider records standard server logs, including IP addresses and request times, for security and reliability. Our own error logs may include your account's internal ID. We also collect page-view and page-loading measurements, described in section 8.

We never collect or store payment card numbers, bank details, or payment app credentials. GoldTix does not process payments at all — money moves directly between you and the other student.

3. Your password

Your password is handled by our authentication provider and stored as a cryptographic hash. It is never stored in readable form, and no one operating GoldTix can see it.

4. What other students can see — read this one

This is the part that makes GoldTix different from a normal website, so it deserves plain language.

While you have an active listing, your first and last name, email address, phone number, and any social handles you added are visible to other signed-in Purdue students who open your listing. That is the entire purpose of the platform: a buyer cannot reach you otherwise.

When you have no active listing — because you sold, removed, or never created one — your profile is not readable by other students. Listings also come down automatically once their game has been played, which ends that exposure without you having to do anything.

GoldTix administrators can read any profile. That access exists to investigate reports and keep the marketplace safe. Administrators are a small number of named people who run GoldTix.

Your asking prices contribute to the market price ranges shown on each game page, but those are shown as aggregate numbers, not attributed to you by name.

If you contact a seller, they are told how many students have tapped to contact that listing and when the most recent one was — never who you are or how to reach you.

If you are not comfortable with fellow students seeing your phone number, do not create a listing. Browsing listings does not expose your contact details to anyone.

5. Why we use your information

To let you sign in and prove you are a Purdue student.

To show your listing to potential buyers and give them a way to contact you.

To show market price ranges so students can judge whether a price is fair.

To ask a seller, a day after a buyer tapped to contact them, whether the ticket sold — so listings that already sold stop appearing as available.

To investigate reports, enforce our Terms, and remove people who scam or harass others.

To keep the service running and secure.

We do not use your information for advertising, and we do not build advertising profiles.

6. Who we share it with

Other students, as described in section 4.

Our service providers, who process data on our behalf and are not permitted to use it for their own purposes: Supabase (database and authentication), Vercel (hosting, plus the Speed Insights and Web Analytics measurement described in section 8), and Resend (email delivery — it handles the sign-in and password-reset emails we send you, so it receives your email address and the code inside them).

Law enforcement and Purdue University, where we receive a legitimate request, or where we believe disclosure is necessary to address fraud or a safety risk.

We do not sell your personal information, and we do not share it with data brokers or advertisers.

7. Reports are confidential

If you report someone, they are not shown who reported them. Reports are readable only by the person who filed them and by GoldTix administrators.

This is deliberate: telling a scammer who reported them would invite retaliation against a fellow student.

8. Cookies

GoldTix sets only the cookies needed to keep you signed in and to keep your session secure. Removing them would make accounts impossible.

We do not use advertising cookies or tracking pixels, and nothing here follows you to other websites. There is no cross-site tracking to opt out of.

We do use two measurement tools from Vercel, our hosting provider. Speed Insights records how fast pages load. Web Analytics counts visits and page views, so we can see which pages students actually use and roughly how many people are on the site. Both record the page being viewed, along with your browser, device type, and country.

Neither sets a cookie, neither identifies you, neither follows you to other websites, and neither is used for advertising. We see totals and trends rather than individual people — we cannot look up what any particular student browsed.

9. How long we keep things

Your profile is kept while your account exists.

Listings are kept after they are sold or removed so we can investigate disputes and identify repeat problems. They stop being visible to other students immediately; only the price ranges drawn from currently active listings are shown anywhere.

Reports are kept while they may still be needed to enforce our Terms, including to identify repeat offenders.

Server logs are retained on our hosting provider's standard schedule.

10. Your choices and rights

You can view and edit your name, phone number, and social handles from your dashboard at any time.

You can remove your listings at any time, which stops other students from seeing your contact details.

You can delete your account yourself from the Account Details tab of your dashboard. That removes your profile, your contact details, your listings, and your record of contacting sellers. Two exceptions, both deliberate: if one of your listings is currently under review after being reported, deletion is blocked until that is resolved, so that a report cannot be erased by deleting the account; and where you were reported, a copy of your email address stays attached to that report as evidence, along with the text of any reports you filed about other people, which remain but are no longer linked to you.

You may also request a copy of your data or correction of inaccurate data. Contact us and we will act on it within a reasonable period.

Depending on where you live, you may have additional rights under state privacy law, including in Indiana and California. We honour these requests regardless of whether a given law applies to us by its own thresholds.

Some information may be retained after deletion where we need it to resolve a dispute, prevent fraud, or comply with a legal obligation.

11. Security

Data is transmitted over HTTPS and stored with database-level access rules that restrict who can read what — for example, profiles of students with no active listing are not readable by other students, and a buyer's record of contacting a seller is readable only by that buyer. Administrators are the exception described in section 4.

No system is perfectly secure, and we cannot guarantee that your information will never be accessed improperly. Use a password you do not reuse elsewhere.

Once you share your phone number or social handle with another student, we have no technical control over what that person does with it.

12. Age

GoldTix is for Purdue students aged 18 or older. We do not knowingly collect information from anyone under 18. If you believe a minor has created an account, contact us and we will remove it.

13. Changes

We may update this policy as GoldTix changes. Material changes will appear here with a new effective date and version. If a change materially affects how your information is shared, we will make that clear rather than quietly editing this page.

14. Contact

For privacy questions, data requests, or account deletion, email the GoldTix team at support@goldtixapp.com.