Skip to main content

TheGoodRoster · San Diego. Not a lender. Your inquiry goes only to the person you choose.

Privacy Policy

Last Updated: April 2026

TheGoodRoster ("we," "us," or "our") is operated by TheGoodRoster. This Privacy Policy describes how we collect, use, share, and protect the personal information of visitors to our website at https://thegoodroster.pages.dev (the "Site"). By using our Site, you agree to the practices described in this policy.

Our Site connects prospective homebuyers in San Diego County with licensed mortgage professionals. We are not a lender, broker, or financial advisor. When you submit information through our forms and tools, that information may be shared with third-party mortgage professionals as described below.

1. Information We Collect

Information You Provide Directly

When you use our contact forms, readiness quiz, or other interactive tools, we may collect the following personal information:

  • Full name
  • Email address
  • Phone number
  • ZIP code
  • Estimated annual household income range
  • Estimated credit score range
  • Estimated down payment range
  • Loan type(s) of interest (e.g., FHA, VA, Conventional)
  • First-time homebuyer status
  • Military or veteran status
  • Homebuying timeline

Information Collected Automatically

When you visit the Site, we automatically collect certain technical and usage data, including:

  • IP address and approximate geographic location
  • Browser type and version, operating system, device type, and screen resolution
  • Usage data such as pages visited, time spent on pages, referring URLs, and click patterns
  • Cookies and similar technologies used by our analytics and security providers

This data is collected through Google Analytics 4 (GA4) and Cloudflare Web Analytics. See Section 4 below for details on these providers.

2. How We Use Your Information

We use the information we collect for the following purposes:

  • To match you with mortgage professionals: Your contact information and financial profile data are used to connect you with licensed mortgage professionals who may be able to assist you. This is the primary purpose of data collection on our Site.
  • To communicate about your inquiry: We may contact you by email or phone to confirm your submission, provide additional resources, or follow up on your request.
  • To improve our tools and content: We use aggregated and anonymized usage data to improve our calculators, guides, and educational resources.
  • For analytics and performance monitoring: We use analytics data to understand how visitors use the Site, identify technical issues, and optimize performance.
  • For security and fraud prevention: We use Cloudflare Turnstile and other measures to prevent spam submissions and protect the integrity of our services.

3. How We Share Your Information

We share and may sell your personal information with third-party licensed mortgage professionals. This is a core function of our Site. When you submit your information through our readiness quiz, contact form, or other lead-generation tools, we share the following data with one or more participating mortgage professionals:

  • Your name, email address, and phone number
  • Your ZIP code
  • Financial qualification data you provided, including income range, credit score range, down payment range, loan type interest, first-time buyer status, military status, and homebuying timeline

These professionals are independent third parties. Once your information has been shared with a mortgage professional, that professional's own privacy policy governs their use, storage, and protection of your data. We encourage you to review the privacy policy of any professional who contacts you.

Recipients

The Community Partners who may receive your information are:

  • [PARTNER_1_NAME] (NMLS #[PARTNER_1_NMLS]), [PARTNER_1_LEGAL_ENTITY] (Entity NMLS #[PARTNER_1_ENTITY_NMLS]), [PARTNER_1_ADDRESS]
  • [PARTNER_2_NAME] (NMLS #[PARTNER_2_NMLS]), [PARTNER_2_LEGAL_ENTITY] (Entity NMLS #[PARTNER_2_ENTITY_NMLS]), [PARTNER_2_ADDRESS]
  • [PARTNER_3_NAME] (NMLS #[PARTNER_3_NMLS]), [PARTNER_3_LEGAL_ENTITY] (Entity NMLS #[PARTNER_3_ENTITY_NMLS]), [PARTNER_3_ADDRESS]

We do not share your information with the other Community Partners you did not select, with any other mortgage professional, with a network or aggregator of lenders, or with marketing partners for purposes of mortgage solicitation.

We do not control and are not responsible for the privacy practices of third-party mortgage professionals who receive your information. We may receive compensation when you connect with a listed professional.

4. Third-Party Service Providers

We use the following third-party service providers in the operation of our Site:

  • Cloudflare: Provides website hosting (Cloudflare Pages), DNS, DDoS protection, web application firewall, Cloudflare Web Analytics, and Cloudflare Turnstile (anti-spam/bot verification). Cloudflare may process your IP address and browser information. See Cloudflare's Privacy Policy.
  • Google Analytics (GA4): We use Google Analytics 4 to collect anonymized usage statistics about how visitors interact with our Site. Google may use cookies and collect IP addresses. See Google's Privacy Policy.
  • Webhook automation provider: When you submit a form, your data is transmitted to our backend systems via webhook. This data transfer is secured using HTTPS and HMAC signature verification to ensure data integrity.

5. Your California Privacy Rights (CCPA)

If you are a California resident, the California Consumer Privacy Act (CCPA), as amended by the California Privacy Rights Act (CPRA), provides you with specific rights regarding your personal information:

  • Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which it was collected, the business purpose for collecting or selling it, and the categories of third parties with whom we share it.
  • Right to Delete: You have the right to request that we delete the personal information we have collected from you, subject to certain exceptions permitted by law.
  • Right to Opt-Out of Sale/Sharing: You have the right to opt out of the sale or sharing of your personal information. As described in Section 3, we share your personal information with third-party mortgage professionals, which may constitute a "sale" or "sharing" under the CCPA. See the "Do Not Sell My Personal Information" section below for instructions on how to opt out.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise any of these rights, please contact us at [CONTACT_EMAIL]. We will verify your identity before processing your request. We will respond to verifiable consumer requests within 45 calendar days of receipt. If we require additional time (up to an additional 45 days), we will inform you of the reason and the extension period in writing.

Do Not Sell My Personal Information

Under the CCPA, the sharing of your contact and financial profile data with third-party mortgage professionals — as described in Section 3 of this policy — may constitute a "sale" of personal information. We want to be transparent about this practice. We honor Global Privacy Control (GPC) signals automatically.

You have the right to opt out of this sale/sharing. To exercise this right, please email us at [CONTACT_EMAIL] with the subject line "Do Not Sell My Personal Information." Include the name and email address associated with your submission so we can locate your records.

If you opt out, we will not share any future form submissions with third-party mortgage professionals. Please note that opting out does not affect data that has already been shared prior to your request. If you have already been contacted by a mortgage professional, you will need to contact that professional directly regarding their use of your information.

6. Data Retention

We retain lead data — including your name, contact information, and financial profile data submitted through our forms — for a period of 24 months from the date of submission. After this retention period, your personal information is permanently deleted from our systems.

Analytics data collected via Google Analytics and Cloudflare Web Analytics is retained according to the default retention policies of those respective services. We do not independently store raw analytics data beyond what these providers retain.

7. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including:

  • HTTPS encryption: All data transmitted between your browser and our Site is encrypted using TLS/SSL.
  • Cloudflare security: Our Site is protected by Cloudflare's web application firewall, DDoS mitigation, and bot management services.
  • Database encryption: Lead data stored in our Cloudflare D1 database is encrypted at rest.
  • Webhook verification: Data transmitted via webhooks is verified using HMAC signatures to prevent tampering and unauthorized access.

While we strive to protect your personal information, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

8. Children's Privacy

Our Site is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If we become aware that we have collected personal information from a child under 13, we will take steps to promptly delete that information. If you believe that a child under 13 has provided us with personal information, please contact us at [CONTACT_EMAIL].

9. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will update the "Last Updated" date at the top of this page. We encourage you to review this Privacy Policy periodically to stay informed about how we protect your information.

10. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us: