Privacy Policy
Controller
The controller under the General Data Protection Regulation (GDPR) is:
Josef Sobotta
Tile-Hagemannstr. 4
29525 Uelzen
Germany
Email: contact@sinusquell.com
Overview
Forever Goblin has no accounts, no forms, no ads and no tracking, and sets no cookies of its own. Personal data is processed only as described below, mostly your IP address when your browser loads a page.
Hosting and delivery
The site is hosted by Cloudflare, Inc. (USA). Every request to forevergoblin.trade goes through Cloudflare's network, which delivers the pages, runs the program that answers them and stores the price data. For this, Cloudflare processes your IP address and the technical data your browser sends with each request, such as the address requested, the time, the referring page, and the browser and operating system. This can take place on servers in the USA.
Cloudflare processes this data on my behalf under its data processing agreement (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework, for which the European Commission has decided that it ensures an adequate level of protection (Art. 45 GDPR).
Server logs
Cloudflare and the site's program log requests. These logs can contain your IP address, the address requested, the time and the browser. I use them only to find errors and keep the site running, and do not combine them with other data.
Security and request limit
Cloudflare protects the site against attacks and automated abuse. For this it checks requests and can run a short check in your browser. It may then set a cookie named cf_clearance, which records that the check was passed, so you are not checked again. This cookie is technically necessary and is not used for tracking.
The price data interface of the site accepts at most 100 requests in 10 seconds from one IP address. To count them, the IP address is used as a key for that short period. The site does not store it.
Local storage
The site keeps these entries in your browser's local storage. They stay on your device. The auction house you picked is part of the address of the price data your browser then requests:
fg.market: the auction house you picked
fg.watch: the items on your watchlist
fg.recent: the items you viewed last
You can delete them at any time in your browser's settings.
Item icons
Item icons are loaded from render.worldofwarcraft.com, a server of Blizzard Entertainment. Your browser connects to it directly, so Blizzard receives your IP address, the address of the image and the usual technical data of a request. This can include processing in the USA. Blizzard's privacy policy describes how it handles this data.
Statistics
I may use Cloudflare Web Analytics to count visits. It sets no cookies, stores nothing in your browser and builds no profiles of visitors. When it is switched on, your browser loads a small script from Cloudflare, which reports the page visited, the referring page, the browser, the country and how fast the page loaded.
Contact by email
If you write to me by email, I use your address and your message only to answer you.
Legal bases
The processing described here is based on Art. 6 (1) (f) GDPR: my legitimate interest in running a secure, working website, in showing item icons, in knowing how much the site is used and in answering messages. Storing and reading the cookie and the local storage entries described above is permitted under § 25 (2) No. 2 TDDDG, because they are strictly necessary for the security of the site and for the functions you use.
How long data is kept
The logs of the site's program are deleted after at most seven days. Cloudflare keeps its own logs as described in its privacy policy. The cf_clearance cookie stays in your browser until it expires, which can take up to a year, or until you delete it. The local storage entries stay until you delete them. Emails are deleted once the matter is settled, unless the law requires me to keep them.
Your rights
You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). To use them, write to the email address above.
You also have the right to lodge a complaint with a data protection supervisory authority (Art. 77 GDPR), for example in the country where you live. The authority responsible for me is the State Commissioner for Data Protection of Lower Saxony (Die Landesbeauftragte für den Datenschutz Niedersachsen).
As of 11 November 2026.