Privacy policy
Short version: we collect as little as possible, and we don't sell personal data.
Analytics
Aggregate traffic figures come from Vercel Analytics, which sets no cookies and records no personal identifiers. We see that a page was viewed, not who viewed it.
Affiliate clicks
Outbound links to merchants route through our own/go/ redirect so we can count which pages send clicks. Each click records the page you clicked from, the destination merchant, the referring URL, your browser's user-agent string, the country the request came from, and a once-per-day hash of your IP address and user-agent that lets us collapse repeat clicks in reporting.
We do not store the IP address itself, and none of this is linked to your email address or to any other record we hold. It is pseudonymous rather than anonymous: we are describing it precisely so you can judge that for yourself.
Email signups
If you submit the water test guide form, we store your email address, the page you signed up from, the date, the exact consent wording shown beside the form at the time, and the IP address the submission came from. The consent wording and IP exist so we can prove a signup was genuine if it is ever disputed; they are not used for tracking or targeting.
We collect the address in order to send you the guide and occasional updates about the data on this site. We do not sell it, rent it, or share it with merchants or advertisers.
Nothing is being emailed yet. No mail provider is connected, so signing up sends you no message at all: the guide is delivered as a link on the page the moment you submit the form. Your address sits in the list until sending begins, and when it does it will be for the purposes above and nothing else.
Every email we send will carry a one-click unsubscribe link, and that link keeps working indefinitely, because we never rotate it. Unsubscribing marks the record inactive; ask us to delete it outright and we will remove the row entirely.
Contacting us
Unsubscribing is self-service: the link in any email we send removes you immediately and permanently. For access, correction, or outright deletion of a record, we need a published contact address, which is being set up alongside email sending.