What we collect, what we don't, and what GDPR rights you have over it.
We collect the minimum data needed to run the site and understand how it's used. We don't sell personal data. We don't run advertising cookies beyond the affiliate tracking required to credit operator signups to us. We use Plausible for analytics, which is cookie-free and GDPR-compliant. You have GDPR rights over any data we hold on you — listed below.
Server logs. When you load a page, our server logs the request — IP address, user agent, requested URL, timestamp, referrer. Standard web-server behaviour. Used for security and site health. Retained for 30 days then deleted.
Analytics. We run two privacy-friendly tools side-by-side: Plausible Analytics and Vercel Analytics. Both are cookie-free by design and neither collects personally identifiable information. Plausible records page views, referrers, and country-level location derived from IP (not stored per-user). Vercel Analytics records page views and basic device/region metadata for performance monitoring; it uses no cookies and no cross-site identifiers.
Affiliate tracking. When you click an affiliate link to an operator, that click is recorded by the operator's affiliate platform so our referral can be credited if you sign up. The data shared is your click timestamp and the referring URL; no personal information is transmitted by us. The operator's own privacy policy then governs what happens to your data on their platform.
Contact form submissions. When you email us via the contact page addresses, your email address and message content are stored in our inbox. Used only for responding to you. Retained as long as the conversation is active plus 12 months for audit, then deleted.
We don't use cross-site tracking cookies. We don't run Google Ads, Facebook pixels, or similar retargeting infrastructure. We don't build profiles of individual readers. We don't sell data to data brokers. We don't enrich our data with third-party databases.
We use only strictly-necessary technical storage — one localStorage flag (cgh-cookie-consent-v1) so the cookie notice doesn't reappear after you've dismissed it. No marketing or advertising cookies. Both analytics tools (Plausible + Vercel Analytics) are cookie-free. Full breakdown on the dedicated cookie policy page.
You can configure your browser to refuse cookies entirely. This will not significantly affect your experience of the site.
Right of access. You can request a copy of any personal data we hold on you. We will provide it within one month.
Right to rectification. If you believe data we hold is inaccurate, you can request correction.
Right to erasure. You can request deletion of any personal data we hold on you. We will delete within one month, subject to overriding legal obligations (e.g. preserving a record of editorial correspondence if legal proceedings are possible).
Right to restrict processing. You can request we pause processing of your data pending resolution of a complaint.
Right to object to processing. You can object to processing that uses your data for purposes beyond those described here.
Right to lodge a complaint. If you believe we have misused your data, you can complain to your national data-protection authority.
To exercise any of these rights, email our privacy address in the contact page.
The site is not directed at anyone under 18. We do not knowingly collect data on minors. If you believe a minor has interacted with the site, contact us and we will delete any associated data.
We may update this policy. Material changes will be reflected in the 'last updated' date and, where substantive, called out in the footer for a reasonable period.
