Privacy policy

Who we are

Goodword is testimonial software. There are two different relationships in it, and they matter for this policy.

• If you have a Goodword account, we are the data controller for your account.
• If you submitted a testimonial through someone’s collection form, the business that sent you the link is the controller. We are their processor. We store your words on their behalf and act on their instructions. If you want your testimonial changed or removed, ask them first, and hello@goodword.site if that goes nowhere.

What we store

For an account holder:

• Your email address.
• A scrypt hash of your password with a per-account random salt. The password itself is never stored and cannot be recovered from the hash.
• A session token in an httpOnly cookie called gw_session, valid for 30 days.
• Your spaces, forms, widget settings and their appearance.
• A daily count of how many times each widget was viewed. No visitor is identified.

For someone submitting a testimonial:

• The name, role, company, link, rating and words you typed into the form.
• A photo, if you attached one. It is decoded, stripped of EXIF metadata including any GPS coordinates, cropped square, resized to 160 pixels and re-encoded as WebP before it is stored. The original file is never kept.
• A video link, if you gave one. We do not host video.
• The date you submitted.

We also keep short-lived counters to stop flooding of the sign-up, sign-in and submission forms. These are stored as a SHA-256 hash of the IP address, never the address itself, and they are deleted once the window expires.

What we do not store

• No third-party analytics and no advertising trackers. There is no Google Analytics, no Meta pixel and no session recorder on this site or in the embedded widget.
• No cookies except the sign-in one. There is no consent banner because there is nothing to consent to: gw_session is strictly necessary and is only set when you log in.
• No card details. Billing is not connected, so there is no payment processor in the picture at all.
• No email sending. We do not send invitations, reminders or newsletters, because that feature does not exist yet.

The embedded widget

When a Goodword widget loads on someone else’s website, the visitor’s browser requests a JavaScript file and any avatar images from us. That request carries an IP address and user agent, as every HTTP request does. We use it to serve the file and to increment a per-day view count for the widget. We do not set a cookie, do not fingerprint the visitor, and do not build a profile across sites.

Legal bases

• Contract. Running your account and serving your widgets.
• Consent. Publishing a testimonial. The tick box on the collection form is the consent, it is not pre-ticked, and the form cannot be submitted without it.
• Legitimate interests. Keeping the service up and stopping abuse, which is what the rate-limit counters are for.

How long we keep it

Testimonials and account data are kept until they are deleted, because a testimonial is content our customer is actively using on their site. You can delete any testimonial from the dashboard at any time, and it is removed from the database rather than flagged as hidden. Sessions expire after 30 days. Rate-limit counters last minutes to an hour. Ask us to close your account and we will delete it and everything in it.

Getting your data out

Every space has a JSON and a CSV export in the dashboard, available on the free plan, with no cap and no waiting period. That is deliberate: the entire premise of this product is that your testimonials are yours. You do not need to make a formal request to get them.

Who else can see it

Two suppliers, and no one else. Hosting is Vercel, and the database is hosted libSQL run by Turso. We do not sell data, and we do not share it with advertisers or data brokers. Data may be processed outside the UK by those two suppliers under their standard contractual clauses.

Your rights

Under UK GDPR you can ask for a copy of your data, ask for it to be corrected or deleted, ask us to restrict how it is used, and object to processing. Write to hello@goodword.site. If you are not satisfied you can complain to the Information Commissioner’s Office.

Security, stated plainly

Passwords are scrypt-hashed and compared in constant time. Sessions are random 32-byte tokens held in an httpOnly cookie and checked against the database on every request. Uploaded images are re-encoded rather than served back as supplied. Public endpoints are rate limited.

What we will not claim: Goodword has not been penetration tested, is not certified against any standard, and is run by one person. If that is not an acceptable risk for the data you were going to put in it, do not put it in.

Changes

If this policy changes materially we will change the date at the top and, for account holders, say so in the dashboard. See also our terms of use.