Legal

Who we are, what we hold, and the terms

TrendGoblin holds an account for you, and may hold an API key. That means you are owed a named operator and a plain description of what happens to your data. Both are below.

Who operates this

Legal entity

1001545511 Ontario Limited, DBA Kinetic Labs

Jurisdiction

Ontario, Canada (Oakville)

CRA BN

794429175

DUNS

24-336-5499

Contact

[email protected]

Privacy

Your account. The dashboard needs one. We store the email address you sign up with, your name if you give one, and the date the account was created. Your password is never stored — only a scrypt hash of it, which cannot be reversed back into the password. If you sign in with Google or GitHub instead, we store the account identifier they return and your email address; we never receive your password for those services.

Your session. Signing in sets one cookie on your device so the dashboard knows it is you. It is httpOnly (page scripts cannot read it), Secure, SameSite=Lax, and it expires after 30 days. Signing out clears it. It is strictly necessary for a service you asked to log in to, so it sits outside the consent choice further down — the measurement cookie there is a different thing, and that one does ask.

What a session row does not contain. The sign-in library we use records a visitor's IP address and browser user-agent on every session by default. We switched both off, and both columns are written empty — because the paragraph below says we do not record your IP address and do not fingerprint, and we would rather change the software than the sentence.

Email we send you. Confirmation and password-reset messages are delivered by Resend, which means your email address is transmitted to them in order to send it. They are the only third party that receives anything you give us. You do not need to confirm your email to use the dashboard; it matters only if you later need to reset your password.

If you hold a paid API key. Attaching one on your account page sends it to our server, verified, and then held in an httpOnly cookie on your device for 90 days. The key itself is stored on our side only as a SHA-256 hash — we cannot read it back. We record the time a key was last used, so we can tell a working key from an abandoned one.

If you join the waitlist we store the email address you typed, anything you wrote in the note field, and the date. Nothing else. We use it to send you a key and to ask what you need. Ask us and we will delete it.

What we count. We count page loads, and only in aggregate. When you open a page, your browser tells our own server two things: which of our paths you opened, and the hostname of the site you came from, if any. We add one to a per-day counter and that is the entire record. A row in that table says "12 loads of /app on 30 September, 3 of them from google.com" — there is no identifier in it, because none is collected.

What we do not do. No advertising trackers, no third-party analytics, no session recording, no cookies for measurement, no fingerprinting, and no third-party scripts of any kind. We do not record your IP address, we do not store the full address of the page you came from (a full URL can carry someone's search query), and we do not link page loads to each other or to you. Fonts are served from our own domain specifically so that loading a page does not disclose your IP address to a font host.

One optional cookie, and only if you say yes. If you allow it, we set a first-party cookie holding a random 32-character number and nothing else. It lets us see whether the people who read the pricing page go on to join the waitlist — a question the aggregate counts above genuinely cannot answer. It is not shared, not sold, not sent anywhere else, and it is not linked to your name, your email, or your API key. If you decline, we set nothing and keep counting in aggregate as described above.

We honour Do Not Track and Global Privacy Control. If your browser sends either signal, we count nothing at all, we never set the cookie, and we never even show you the banner — asking you to opt in after you have already objected would make the signal meaningless. Both are widely ignored in practice, which is precisely why we say here that we do not ignore them.

Change your mind, right here. Withdrawing consent has to be as easy as giving it, so this is the control, not a paragraph telling you to clear your browser:

Checking…

Allow the cookie Turn it off and delete it

What leaves your browser anyway. The site is served through Cloudflare, so Cloudflare handles the connection and sees the usual request metadata. Outbound evidence links (to the Meta Ad Library, to storefronts, to search results) go to those third parties when you click them; we set rel="noreferrer" so they are not told which page you came from.

Data we publish. The index describes public things — search volumes, public ad-library records, public storefront catalogues. It is not about you.

Terms

What this is. TrendGoblin reports measurements and states how they were taken. A verdict is a description of evidence, not advice, and not a prediction. "Someone has paid to run this ad for 92 days" is a fact about an ad. It is not a claim that a business is profitable, and we say so on every response that carries one.

Do not rely on it as advice. Nothing here is financial, investment, legal or professional advice. Decisions you make with it are yours.

Accuracy. We publish the age of our own data and the limits of our own method, including the results that went against us. We do not warrant that the index is complete or current, because no such index is.

Fair use. The free tier is rate limited. Do not attempt to circumvent the limits, resell bulk exports as your own dataset, or use the service to break the terms of the sources it observes. We can withdraw a key that does those things.

Payment. Self-serve checkout is not live. Keys are issued by hand. If you have paid and are unhappy, write to us and we will refund you — there is no process to argue with, because there is no process yet.

Liability. To the extent the law allows, our liability is limited to what you paid us in the previous twelve months.

Governing law. Ontario, Canada.

Last updated 2026-09-30. Changes are published here; we do not email them.