Privacy policy

In short: no advertising cookies, no cross-site tracking, no selling of data. If you never click a product link and never subscribe, we hold nothing that identifies you.

What we collect

Affiliate link clicks

When you click a product link, you pass through our own /go redirect. We record the link clicked, which page it was on, the country your request came from (as reported by our CDN at country level only), and the time. We do not record your IP address, and we do not set a cookie to do it. These records are not linked to any individual and cannot be traced back to you.

The purpose is to know which recommendations people find useful. It is the only commercial measurement on the site.

Newsletter

If you sign up, we store your email address, the segment you chose, the page you signed up from, and the dates you confirmed and (if applicable) unsubscribed. We use double opt-in: nothing is ever sent to an address that has not confirmed by clicking a link.

We do not sell, rent or share the list. Every email has a one-click unsubscribe. You can ask us to delete your record entirely at any time and we will do it without asking why.

Analytics

We use privacy-preserving, cookieless analytics that record aggregate page views without fingerprinting visitors or building profiles. No personal data is collected and no consent banner is required, because there is nothing to consent to.

What we do not collect

• No advertising or third-party tracking cookies
• No user accounts — there is nothing to sign into
• No IP address logging in our own records
• No cross-site or cross-device tracking
• No payment information, ever — we do not sell anything directly

Third parties

When you follow a link to a merchant, you are on their site and their privacy policy applies. Merchants generally set their own cookies to attribute the referral. We have no control over and no access to that.

The site is hosted on Cloudflare and its database is hosted by Supabase. Both process requests on our behalf as service providers.

Your rights

Where the GDPR or UK GDPR applies to you, you have the right to access, correct, export or erase any personal data we hold — which in practice means your newsletter record, because it is the only personal data we have. Ask us and we will action it.

Retention

Newsletter records are kept until you unsubscribe or ask for deletion. Unconfirmed signups are removed after 30 days. Click records contain no personal data and are kept in aggregate.

Changes

If this policy changes materially, the updated date at the top changes and the change is described here rather than applied silently.