Privacy policy

Last updated

What we collect

This site has no user accounts, no comment system and no mailing list, and it does not ask you for personal information anywhere. It is operated from Belgium by a sole trader, and EU data-protection law (GDPR) applies to how it is run.

The one thing the site records is outbound-click data, described below. Standard server logs (IP address, user agent, requested page) may also be produced by our hosting provider for security and reliability; we do not use them to profile visitors.

Cookies and click tracking

When you click a link to a retailer, you pass through an internal route (/go/…) that generates a random click identifier, records the time, the page you clicked from, and — if you arrived via an advertisement — the ad platform's click reference (such as Google's gclid or Microsoft's msclkid). That identifier is passed to the retailer's affiliate network so a purchase can be attributed to this site. It contains no name, no email address and nothing typed by you.

The retailer and its network set their own cookies on their own sites under their own policies once you leave ours; we don't control those and their policies apply from the moment you land there.

Third parties

Outbound commercial links on this site lead to the advertisers named on the page, via their affiliate network (Everflow-based). If we run advertising for this site on platforms such as Google or Microsoft, those platforms attach their own click references, which we receive and store as part of the click record described above.

We do not sell, rent or share click records with anyone beyond the attribution flow described here.

Your rights

Under the GDPR you have rights of access, rectification, erasure, restriction and objection over personal data we hold. In practice the site holds almost nothing about you — but if you believe we hold data connected to you (for example, a click record from your IP address), write to hello@thesheetreport.com and we will handle the request within a month.

You also have the right to complain to a supervisory authority; for this site's operator that is the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données).