The short version
There are no accounts, no newsletter, no advertising network and no tracking pixels. The site is a set of static pages. What follows is everything it records, and why.
Analytics
Page views are counted with Vercel Web Analytics. It records the page, the referrer, the country and city, the operating system, the browser and the device type, and a hash made from the request that Vercel discards after 24 hours. It sets no cookie and does not identify you. We use the counts to see which engines people look up.
The territory cookie
The buying links on a record depend on where you are. On your first visit the site asks its own server which country the request came from and stores the result in a cookie called ep_territory. It holds a two-letter territory code such as UK or US, nothing else, and lasts a year. Changing the territory with the switcher on any record page rewrites it. The country itself is not stored anywhere.
Buying links
Some buying links are affiliate links. Amazon links carry our Associates tracking tag: as an Amazon Associate we earn from qualifying purchases. The product images on the shop page load directly from Amazon's servers rather than ours, so Amazon sees your IP address as soon as the page opens, whether or not you click anything. Frost links go through the Awin network. Once you click through, the retailer's own privacy policy applies, and the retailer or network may set cookies in your browser to attribute a purchase to this site. We see totals, never who bought what. An affiliate link never changes which product we name as the closest match; the measurement does that.
Corrections
The corrections form asks for the record, what is wrong and what is right, and optionally your name and an email address. Before it is sent, Cloudflare Turnstile checks that you are not a script; Cloudflare processes browser signals for that and its privacy policy covers what it holds. The correction is then filed as an issue in this site's repository on GitHub, where it stays as the record of the change. If we apply the correction, the record's history and the changelog cite the issue. Your email address is used only to ask you about the correction and is never published. If you would rather not be named, leave the name blank.
Hosting
The site is served by Vercel, whose edge servers keep standard request logs for a short period for security and debugging. Those logs include your IP address. We do not use them to identify visitors.
Your rights
Under UK data protection law you can ask what we hold about you, ask for it to be corrected or deleted, and complain to the Information Commissioner's Office. In practice the only personal data we may hold is a name and email address you gave us with a correction. Ask through the corrections form, or by the contact route on the About page, and we will deal with it.