Last updated: 19 September 2026 · Operated by Cervo Analytics, Oklahoma, United States · Contact: noreply@cervoanalytics.com
Plain English first, then the detail. If the two ever disagree, tell us — that's a bug in this document.
These terms are between you and Cervo Analytics ("we", "us"), the operator of Endcap Goblins ("the Service"). By creating an account you accept them. If you do not accept them, do not create an account.
You must be at least 13 years old to use the Service, and at least 16 if you are in the UK or the EEA. If you are under 18, you should have a parent or guardian's permission. The Service publishes locations you visit; we do not consider it suitable for younger children.
You choose a screen name when you sign up. You may change it exactly once, after which it is fixed. This is not a paid limit and there is no way to buy another change. It exists because your screen name is the byline shown on every find you post, and a name that keeps moving makes the board harder to read and makes a report about an account point at somebody who no longer exists under that name. Changing your name updates the byline on your existing posts.
You own your content. Photos you take, notes you write and the records you create remain yours.
By posting to the shared board you grant us a non-exclusive, worldwide, royalty-free licence to store, reproduce and display that content for the purpose of operating the Service — showing it in the feed, on the map, in search results, and on any share link you create. This licence exists so the app can function; it does not let us sell your photos or license them onward. It ends when you delete the content, except for copies already sitting in backups or in share links you handed out.
A photograph taken in a shop can catch more than the item you meant to record. Look at what is actually in the frame before you post it — a magazine rack, a shelf behind the one you are photographing, a stranger's face. If you are not sure, crop it or leave it out.
Finds posted by other people are theirs. Use them to go looking — that's the point of the app. Do not scrape the board, republish it in bulk, or present another member's find as your own. Bulk share links you create only ever contain your own finds, by design.
Any member can report a find. Staff can hide a reported find, which removes it from the board while leaving the owner's own copy intact — hiding is reversible.
There is no suspension tier. A ban is permanent. A banned account cannot sign in, cannot read the board, cannot post, and its existing finds are removed from the feed and the map immediately. Its data is retained rather than destroyed, so that a ban issued in error can be reversed by us — but reinstatement is at our discretion and is not something you should count on.
We may ban an account for breaking these terms, and we may do it without prior warning where the conduct is serious — doxxing, threats, counterfeits, sexually explicit material, contraband, or content involving minors. Where a ban follows something less clear-cut we will normally tell you what it was. To appeal, write to noreply@cervoanalytics.com.
Creating a new account to get around a ban is itself a breach, and the new account will be banned too.
A find you post carries the coordinates recorded when you tagged it. That is precise, not approximate, and it is what makes the map useful. Two consequences you should hold in mind:
Prices, availability and condition recorded in the app are one person's observation on one day. They are not offers, appraisals, authentications or investment advice, and we do not verify any of them. Deals you arrange with other members are entirely between you and them.
Endcap Goblins exists to point you at a shelf. It is not a marketplace, not a trading platform, not a dating or social app, and not a tool for arranging to meet people. There is no messaging between members, and there is no feature for agreeing a time and a place — those omissions are deliberate, not gaps waiting to be filled.
Accordingly, you must not:
If you choose to meet someone anyway, you do so entirely at your own risk. We do not verify anybody's identity, age or intentions, we run no background checks, and we have no involvement in and no responsibility for anything that happens between members away from the app. Nothing here is a promise that other members are who they say they are, or are safe to be around.
Should you decide to meet another person regardless, meet in a busy public place in daylight, tell somebody where you are going, and do not go to or invite anyone to a private address. Many police departments provide monitored exchange locations for this purpose, and they are free to use. We say this because the advice is worth having, not because it makes such a meeting something we endorse or take part in.
The Service is provided "as is". We do not promise it will be uninterrupted or error-free, and we may change or discontinue features. Where a change materially reduces what you get, we'll give notice in the app where we reasonably can.
You may stop using the Service at any time and delete your account from Settings → Account. We may terminate an account for breach of these terms as described above. Before deleting, export your data — deletion is immediate and irreversible.
To the fullest extent the law allows, we are not liable for indirect or consequential loss, lost profits, or loss of data, arising from your use of the Service. Nothing here limits liability for death or personal injury caused by negligence, for fraud, or for anything else that cannot lawfully be excluded. Some jurisdictions do not allow certain exclusions, in which case those exclusions do not apply to you.
We may update these terms. Material changes will be announced in the app before they take effect. Continuing to use the Service after that means you accept the new version. The "last updated" date at the top always reflects the current version.
These terms are governed by the laws of Oklahoma, United States, and the courts of Oklahoma, United States have exclusive jurisdiction, without affecting any mandatory consumer rights you have where you live.
Last updated: 19 September 2026 · Data controller: Cervo Analytics, Oklahoma, United States · Contact: noreply@cervoanalytics.com
The honest summary: the app is a shared board, so most of what you put in it is meant to be seen. This page is about what we hold, who can see it, and how to get rid of it.
| What | Why | Who can see it |
|---|---|---|
| Email address | To sign you in and contact you about your account | You and our staff. Never shown on the board. |
| Screen name | The byline on your posts | Everyone |
| Password | Sign-in | Nobody — stored as a hash, never in readable form |
| Sign-in provider (Google / Facebook / Apple) | To sign you in where you chose that route | You and our staff |
| Finds: title, category, store, price, condition, notes, tags, photos, coordinates, address, listing links | The purpose of the app | Everyone, unless you mark the find private |
| Wishlist | To alert you when a matching find is posted | You only |
| The days you opened the app | To count active users and measure whether people come back | Our staff, only as aggregate numbers |
| App timings: how long a launch, sync or upload took, and whether it failed | To find out if the app is slow or broken for real people | Our staff, only as aggregate numbers |
| Reports you file about content | Moderation | Our staff |
We do not collect: your contacts, your browsing outside the app, your device identifiers for advertising, or background location.
This is the part worth reading twice.
Public to every signed-in member: every find you post that is not marked private — its title, category, store, price, condition, photos, tags, notes, street address and precise coordinates — along with your screen name.
Private to you: your email address, your password, your wishlist, your reminders, your settings, and any find you mark private. A private find and its photos are invisible to other members and to our own staff: the database has no rule that grants staff access to it, and the photo storage rule checks the find's own privacy flag on every request.
Public to anyone with the link: anything you deliberately share using the share feature. Share links do not require an account. Some link types carry the data inside the URL itself and cannot be revoked once sent; the app tells you which kind you are creating.
Visible to staff for moderation: a find that another member has reported. That is the only route by which staff can see a find that isn't public, and it exists so reports can actually be assessed.
Your device's location is read only at moments you choose: when you tap Tag GPS while logging a find, and while Hunt Mode is switched on. It is never read in the background, and the app cannot read it when it is closed.
If you turn on Look up addresses in Settings, the coordinates of a find are sent to OpenStreetMap's Nominatim service to be turned into a street address. Map tiles are also fetched from OpenStreetMap, which reveals the approximate area you are looking at to them. Both are third parties operating under their own privacy terms. Turn the setting off and coordinates are never sent anywhere but our own database.
We do not sell personal data and we do not share it for advertising. Data reaches these parties only:
Depending on where you live, you may have the right to access, correct, delete, restrict or object to processing of your data, and to receive it in a portable format. The app implements the important ones directly, without you having to ask anyone:
For anything else — including a complaint — write to noreply@cervoanalytics.com. If you are in the UK or EEA you also have the right to complain to your local data protection authority.
Our legal basis for processing is performance of a contract (running the account and showing your finds), legitimate interests (keeping the service working, safe and measurable), and consent where you switch something on, such as address lookups or notifications.
No system is perfectly secure. If we discover a breach affecting your personal data we will notify you and the relevant authority as required by law. To report a vulnerability, write to noreply@cervoanalytics.com.
The Service is not directed at children under 13 (under 16 in the UK and EEA). We do not knowingly collect their data. If you believe a child has created an account, contact us and we will remove it.
Our provider stores data in the United States. If you are outside that region, your data is transferred there, protected by standard contractual clauses or an equivalent safeguard.
We'll announce material changes in the app before they take effect, and the date at the top will always tell you which version you are reading.