Privacy policy

Effective September 28, 2026

whosgoated.com (“goat”) is published by Metric Media. We collect as little as we can. You don’t need an account to vote, and we don’t ask for your name to use the site.

What we collect

• Your account, if you make one. Signing in with an emailed link stores your email address. Signing in with Google also stores the name and profile picture Google shares (we don’t show them). We keep a session cookie so you stay signed in (up to 90 days), and the handle you pick. Your handle, your top-10 ballot, and the cases you write are public on your profile page; your email is never shown. Sign-in emails are sent through Resend.
• Your votes and ballot. When you vote or cast a top-10 ballot, we store it (including the cases you write) with a random ID kept in a cookie named goat_voter (lasts two years). It lets you change your picks and keeps it to one ballot per person. Until you sign in, it isn’t linked to your name or email; when you sign in, votes cast in that browser move to your account.
• A scrambled network ID. To stop ballot-stuffing and spam, we store a salted one-way hash of your IP address with votes and messages. We don’t store the IP itself.
• Messages you send us. If you use the contact form, we keep what you write and, if you give them, your name and email, so we can reply and keep a record of corrections and copyright notices.
• Page views. We use Vercel Web Analytics to count visits. It doesn’t use cookies or identify you.

Advertising

goat shows ads from Google AdSense. Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites. Google’s use of advertising cookies enables it and its partners to serve ads to you based on your visits to this site and/or other sites on the Internet. You can opt out of personalized advertising in Google’s My Ad Center, and learn more in how Google uses cookies in advertising. Where the law requires it, we ask for your consent before ad cookies are used.

Videos and sharing

Moment videos come from YouTube. Nothing loads from YouTube until you press play, and then YouTube’s privacy-enhanced player is used; once playing, Google’s privacy policy applies. Share buttons only open your device’s share sheet or X when you tap them.

Who processes data for us

Vercel hosts the site and provides analytics. Neon stores accounts, votes, and messages. Resend sends sign-in emails. Google provides ads, videos, and Google sign-in. Each handles data under its own terms. We don’t sell your data.

Your choices

If you have an account, delete it, with your profile, ballot, and every vote, from your account page. Otherwise, delete every vote and ballot tied to this browser, and its voter ID, here. You can also clear your cookies at any time.

To ask about or delete a message you sent, contact us.

Children

goat isn’t directed to children under 13, and we don’t knowingly collect their information.

Changes

If we change this policy, we’ll update it here and change the effective date above.