Privacy policy

Draft — not in force. This text has not yet been reviewed and approved, and nothing on it is binding. It describes what the site does today, but it is not a published policy until the owner says so.

Short version: this is a static site with no accounts, no comments and no working submission form. We set no cookies and store nothing in your browser. Two companies see that you requested a page — our host and our analytics, which are the same company — and neither of them, and neither do we, builds a profile of you.

What we collect directly: nothing

We have no accounts, no login, no comment threads and no newsletter. There is no form on this site that works — the review submission form is deliberately inert, with every field disabled and no destination to send to, so nothing you type into it leaves your browser.

We set no cookies. Not analytics cookies, not preference cookies, not "essential" cookies. We use no local storage, no session storage and no fingerprinting. If a browser extension tells you this site set a cookie, we would like to know about it.

What our host and analytics see

The site is hosted on Cloudflare Pages and uses Cloudflare Web Analytics. Cloudflare is therefore a processor for us, and the only third party involved in serving you a page.

Serving the page. Like any web host, Cloudflare receives your IP address and user-agent as part of the request, and uses them to deliver the page and to block abuse. We do not have access to raw server logs and do not keep our own.
Analytics. Cloudflare Web Analytics is cookieless and stores nothing in your browser. It reports which pages were viewed, referrer, load performance, and coarse country / browser / device type derived from the request. It does not assign you an identifier and does not follow you to other sites.
What we see. Aggregate counts only — page views, referrers, rough country. We cannot identify an individual visitor from it, and we do not try.

The analytics script is loaded from static.cloudflareinsights.com. It is the only external request any page on this site makes: no ad networks, no tag managers, no embedded fonts, no social widgets, no third-party images.

If you'd rather not be counted at all, any content blocker that blocks cloudflareinsights.com stops it, and the site works identically without it.

What we do not do

We do not sell, rent or share personal data. There is none to sell.
We do not run advertising or advertising trackers.
We do not use tag managers, session recording, heatmaps or A/B testing tools.
We do not email you. We have no mailing list.

Affiliate links

We currently have no affiliate relationships at all — see the affiliate disclosure, which is generated from our database and cannot drift out of date. If that changes, following such a link takes you to the retailer's own site, and what they collect is governed by their privacy policy, not this one. The link itself sets nothing on our side.

When review submissions open

None of this is in effect yet. The submission form is not connected to anything. This section describes what we intend to collect when it opens, so that the commitments are on the record before the code is written rather than after.

At that point a submitted report would involve:

Your email address, used once to verify the report is from a real person. Stored as a hash, never published, never sold, never shared.
An optional display name, published with your report if you give one. Leave it blank and the report is anonymous.
The report itself — bike, miles achieved, rider weight bracket, terrain, assist level, reliability notes. This is the data the site exists to publish, and it is published.
A hashed IP address and user-agent, used only to detect spam and duplicate submissions, and discarded on a schedule.
Any photo you upload, with EXIF metadata stripped before storage.

Why the EXIF point is not boilerplate. A photo of a bike taken in someone's garage usually carries their home GPS coordinates in its metadata. Stripping that has to be a property of the upload code, not a sentence in a policy — which is exactly why we would rather not accept photos at all until that code exists and has been tested.

Before submissions open, this section will be replaced with a description of what the system actually does, along with retention periods, how to request deletion or a copy of your data, and our position under GDPR / UK GDPR and the CCPA.

Children

This site is not directed at children and we knowingly collect nothing from anyone. When submissions open they will be limited to adults.

Changes

If this policy changes materially we will say what changed and when, on this page, rather than silently updating a date. The current version is the one you are reading.

Contact

Questions about anything on this page, including a request to see or delete anything we hold: hello@ebikemetrics.com.