Thoughtful by design
A little care.
A clear choice.
Your visit should feel comfortable. Here’s what the shop saves, what stays optional, and how you can change your mind.
Privacy notice · Updated
No location needed.
No sign-in needed
to have a look around.
Google verifies you.
We receive your basic Google identity—not your Google password or inbox.
Your details are optional.
A contact name, number, or address is yours to save, edit, or clear.
Location is your choice.
No visit or GPS record is created before you explicitly opt in.
A familiar way to sign in.
Customer sign-in uses Google and Supabase Authentication. Google verifies your email, and your Google name and email are associated with your customer account. We do not receive your Google password, and we do not ask permission to read your inbox.
A protected session cookie lets the shop recognise your signed-in browser on a later visit while that session remains valid. It is HttpOnly, so ordinary page scripts cannot read it. You may still need to sign in again after signing out, clearing cookies, or when the session expires.
You can browse without an account. Signing in does not require sharing a visit record or location.
A little less typing next time.
After signing in, you can choose to save a contact name, phone number, and address in your account. These fields are optional, saved privately for your account, and separate from location analytics. The contact number is not verified.
Your Google name and email remain your sign-in identity. Entering a different contact name does not rename that identity. A saved address is information you type yourself, not a GPS reading.
To remove an optional detail, clear its field and select Save details. These details are not subject to the visit table’s 30-day expiry: they remain available until you edit or clear them, or ask us for removal.
Care for your parcel. Care for your details.
Your basket saves product references and quantities in this browser, not your address or payment details. Product prices are refreshed from the catalog. Signing in lets you see only orders belonging to your verified account.
When online checkout is enabled, an order needs a recipient name, contact number and complete delivery address. These are used to fulfil that order, separately from the optional details saved in your account. The order’s email and address are encrypted by the shop before database storage. Approved shop editors can access them to prepare and support your delivery.
Delivery-rate checks use the destination PIN and packed parcel details. Fulfilment may require sharing delivery details with the delivery service. With manual merchant UPI, you pay through your own UPI app and can privately submit the transaction reference for review. The reference is encrypted before storage; it does not automatically confirm payment. An approved shop editor must check the actual receiving bank and record the verified amount, reference and their editor identity before the order is marked paid.
The shop generates its payment QR locally, without sending your details to an external QR service. It does not ask for or store your UPI PIN, OTP, bank password or card information, and this manual workflow does not automatically read the shop’s bank account. Your chosen UPI app and bank have their own privacy terms.
Order records, item prices, payment references and delivery status are separate from optional visit records and their 30-day expiry. Removing visits or clearing saved profile fields does not cancel an order or erase its transaction record. Contact the shop about an order-data request; do not include a password, payment PIN or sign-in code.
In your address section. On your terms.
The optional visit table helps us understand visits to the shop. There is no visit or GPS record before an explicit opt-in, and no privacy popup when the shop first opens. Location is offered only beside the address field after you sign in to your account. You can browse, shop, and save your details without it.
Share approximate location
The separate button below your address saves a visit timestamp and, if you allow the browser’s location request, one approximate latitude and longitude pair linked to your Google display name and email. It does not fill in or change your typed address.
Save a visit without location
An optional choice in the saved-visit controls below. It saves a visit timestamp with no coordinates. A signed-in visit includes your Google display name and email.
Don’t share / remove saved visits
The address section lets you decline or remove saved visits without changing your contact details. The saved-visit controls below offer the same withdrawal, including after sign-out. Both remove visits linked to this browser’s current privacy cookie.
If you are not signed in, an opted-in visit is shown as Unknown user, without a customer name or email. Times and signed-in identity are checked by the server; the visit form does not supply a customer identity.
A one-time reading, not a journey.
GPS is requested only after you select “Share approximate location” beside your address. Opening a page, signing in, typing or focusing the address, and selecting “Save details” never request GPS or record a visit. Coordinates are rounded to three decimal places—roughly 100 metres, depending on latitude. This is a single reading, not continuous tracking. An approximate location can still reveal your general area.
If permission is denied or a location cannot be obtained, the explicitly opted-in visit is saved without coordinates. Use “Cancel location request” while waiting to ignore the result without sending a new visit. You can always keep entering and saving your address without sharing GPS.
The visit table does not store passwords, IP addresses, URL query strings, or device fingerprints. Separate hosting and security systems may keep technical logs, including IP addresses; those logs are distinct from this optional visit table.
Manage saved visits
Visits are optional. If you choose to save one, its timestamp is kept for 30 days; your Google name and email are linked when signed in. Browsing and signing in do not save a visit.
Location is only requested using the optional control in your account’s address section. Removing saved visits does not remove your contact details.
No new visit has been sent. Removing saved visits only affects visits linked to this browser’s current privacy cookie.
You can change your mind.
Visit records expire after 30 days and are removed by scheduled cleanup that runs every minute. For earlier withdrawal, use Manage saved visits on this page and select Remove saved visits. This removes saved records associated with your browser’s current privacy cookie, even if you have since signed out.
Withdrawing visits does not sign you out or erase your optional account details. Those are separate controls. Browser withdrawal also cannot identify records from a different browser or device, or after the relevant cookie has been cleared. Contact us if you need help with those records or your account.
Let’s keep things clear.
For questions about your account, information saved on another device, or a removal request, email hello@gopiloops.com. Please don’t send a password or sign-in code.