Goulter Group Account privacy notice

Who operates Account

Brandon Goulter, operating Goulter Group, is based in California, United States. For privacy questions or requests, email privacy@goultergroup.com.

This notice covers the central Account service. Learning, Baseball, Beads and Market Intelligence have separate features and data practices. Account manages sign-in, access and the supported cloud privacy controls; information kept only on your device stays separate from these cloud controls.

Information and purposes

When you use Account, it processes account and profile information, including your display name, email address, password credentials, verification status, country and age band, and the access and sharing choices you make. A date of birth entered for eligibility is used to determine an age band; Account stores the resulting age band rather than that full date in the account policy.

Account uses this information to provide sign-in and account security, manage authorised access to connected services, process requested verification and password-reset messages, and handle supported export and deletion requests. Where family features are enabled, it also keeps guardian authority, consent, withdrawal and restricted-access records.

Security processing includes session and token records, IP and browser information used for authentication, rate limits and audit records. Privacy-operation records include request status, participating services and completion receipts. Beads cloud controls also keep records that prevent an old cloud session or request from restoring a deleted cloud collection.

Services and recipients

Cloudflare hosts and delivers Account, stores its cloud database and supports security and transactional email delivery. Cloudflare processes network and request information, which can include IP addresses and traffic information. Hosting and security processing continues when optional browser analytics is disabled.

Connected services receive the account identifiers, access permissions and request information needed for the features you use. A personal cloud export or full account deletion can involve Learning, Baseball, Beads and registered Market Intelligence participants. Managed child-profile operations are limited to their supported Learning and Baseball scope. The scope depends on the selected operation; completion waits for all services required for that operation.

Privacy-request emails are received in Gmail. We currently do not use this information for promotional emails, sell it or share it for targeted advertising.

Cloudflare and Google operate internationally. Information processed for hosting, security and privacy-request email may be processed outside the United States. Cloudflare Web Analytics measurements, where enabled, may also be processed internationally. See Cloudflare’s privacy policy and Google’s privacy policy for their processing.

Cookies and browser storage

Account uses cookies for sign-in, eligibility and security. The HTTPS Account session cookie, __Host-gg-account, supports a session of up to seven days, which may renew during continued use; a session-only option may end sooner. The eligibility cookie, __Host-gg-eligibility, lasts up to ten minutes. Restricted child sessions, when enabled, use __Host-gg-child for up to two hours. These cookies are limited to the Account host and are not optional analytics preferences.

Signing out or revoking a session removes its server authority. Blocking required cookies may prevent account functions from working. Downloaded exports and information saved locally by connected apps remain on your device until you manage them there.

Website analytics and browser signals

Where enabled for this site, Cloudflare Web Analytics uses a JavaScript beacon that can send page-use and performance measurements to Cloudflare. Cloudflare documents measurements such as page views, page paths, referring sites, country, browser and device type. See Cloudflare Web Analytics and its data dimensions.

Cloudflare says this product does not use cookies or local storage to collect usage metrics and does not fingerprint visitors for displaying analytics. This describes the analytics product; the site storage and hosting/security processing explained in this notice remain separate. See Cloudflare's description.

Cloudflare documents seven days of unsampled beacon data followed by sampled storage, and access to the previous six months of data. These are not promises that all analytics data or provider backups are deleted after six months. We have not established a complete deletion period for those records. See Cloudflare's analytics FAQ.

Privacy preferences provides information and does not turn analytics on or off or record a tracking choice. It does not sign you out, delete your account or clear saved work. Contact privacy@goultergroup.com about analytics or a privacy request.

Privacy preferences does not change how this site handles Do Not Track or Global Privacy Control signals. This panel offers no analytics switch. We currently do not sell information or share it for targeted advertising.

Retention and removal

Account keeps used accounts and saved activity until the applicable deletion process is completed. An inactivity marker after 180 days is informational and does not automatically delete saved work or disable sign-in. Eligible abandoned, unused and unverified signups are removed after 30 days; accounts with use or uncertain history are preserved.

Temporary cloud export data expires 24 hours after the export request is created. Expiring that temporary copy does not delete the original saved information or a file you already downloaded.

A deletion request can remain pending until every required service confirms completion. Security, consent, request-status and deletion-prevention records may remain separately from deleted content. There is no single fixed retention period for all of those records. Deletion from the active service may leave recoverable provider backup history or copies you downloaded or kept on your device.

Privacy-request emails remain in Gmail until manually deleted. There is no fixed retention period for these emails. Deleting an email does not necessarily remove every provider copy immediately.

Beads cloud controls

Deleting Beads cloud data is a separate action from deleting your whole Account. It keeps your Account and other services. The request revokes existing Beads cloud access and waits for the cloud service to confirm completion. Device-local projects and photos are not deleted by this cloud action; manage those copies in Beads.

Account retains completion and deletion-prevention records so an old session or request cannot reconnect the deleted cloud collection. Beads-containing exports are cancelled when required by a cloud deletion. A pending or cancelled request is not a completed export or deletion.

Children and family features

The account eligibility flow is for United States users. Under-13 users are directed to the parent flow. Family collection is currently disabled. This notice does not enable child enrollment, consent emails or child cloud collection.

If family features are enabled later, the supported child services require the applicable parent notice, authority and consent steps. Withdrawal of consent stops the relevant access; it is separate from a request to delete previously saved information. Beads cloud access is not available through restricted child sessions.

Your requests

Use Account’s supported export and deletion controls, or email privacy@goultergroup.com to request access, correction or deletion or to ask about a request. Brandon Goulter handles these requests and may ask for information needed to verify your identity or parental authority. Do not send your password.

Available rights and exceptions depend on the circumstances and applicable law. We will explain the supported scope and any limits when handling your request. Account cloud controls do not remove device-only copies or downloaded files.

Changes to this notice

Changes to this notice will be posted on this page. We will update the notice version and effective date when this notice changes. Material changes to family consent practices require the applicable notice and consent steps before those new practices begin.