Home›Privacy policy
Privacy policy
What we collect, why, and what we don't do with it.
Last updated 14 October 2026
The short version
We collect an email address if you give us one to send you the newsletter, and standard, anonymised traffic analytics to see which pages are actually being read. We don't sell data, we don't run ad-network trackers, and we don't share your email with anyone outside the service that sends the newsletter.
What we collect
- Newsletter signups. Your email address, the date and time you ticked the consent box, the form you used and the wording you agreed to, and when you confirmed. Used only to send the newsletter. An unconfirmed signup is deleted automatically after 48 hours; a confirmed subscription is kept until you unsubscribe, and the one-click link in every email removes you from our list and our email provider's list straight away. To stop abuse we keep a one-way hash of your IP address (never the address itself) for up to one hour.
- Our newsletter emails may include a tracking pixel and tracked links, through our email provider Resend, so we can see in aggregate how many people open an email or click a link. We don't build individual profiles. Confirmation and unsubscribe emails are never tracked.
- Review requests. If you use the request-a-review form, we store the brand, product, URL, your email address and the evidence links you send. We keep them for 365 days and use them only to follow up on your request.
- Site analytics. Aggregated, non-identifying data about which pages are visited, for how long, and from roughly where (country/region level) — used to decide what to write next and to check the site is working. We use a standard analytics tool for this; it does not, to our knowledge, build an advertising profile of you, and we don't use the data for advertising.
- Google Analytics 4. We use Google Analytics 4 (GA4) to count page views and see which pages are read. It also records these events:
newsletter_signupwhen a newsletter signup succeeds;form_submitwhen the contact or request-a-check form is accepted, with only the form's name; andoutbound_clickwhen you follow a link to another website, with only that site's domain and page path (no query string). Each event also includes the path of the page you were on. We never send form contents or email addresses to Google Analytics. - Server logs. Our hosting provider keeps standard technical logs (IP address, browser type, page requested) for security and reliability, in line with its own policy.
Google Analytics 4 is run by Google. Google, as the analytics provider, receives the information described above, along with the general web-request information that reaches any external service, such as your IP address. We don't control what Google does with that information beyond the settings available to us.
What we don't do
- We don't sell or rent your data to anyone.
- We don't run third-party advertising trackers.
- We don't share your email outside the service we use to send the newsletter.
Cookies
This site uses Google Analytics 4 to count visits and see which pages are read. Google Analytics sets first-party analytics cookies in your browser (named _ga and _ga_ followed by an ID). We don't set cookies for advertising, and we don't sell data. You can block or delete these cookies in your browser settings, or use Google's opt-out add-on at tools.google.com/dlpage/gaoptout.
Your choices
Unsubscribe from the newsletter at any time using the link in every email. To ask what we hold about you, or to have it deleted, contact us via the details on the About page — corrections and privacy requests both go to the same address, and we respond to both.
Changes to this policy
If this policy changes materially, we'll update the date above and note what changed, in keeping with the corrections policy we hold everyone else to.