Privacy Policy.

GrabYourDot is an independent directory site. This Privacy Policy explains what we collect when you visit, why, and what your choices are.

We aim to collect as little as possible. We are not in the data-selling business and we don't run user profiling for advertising.

When you visit the site, our servers and analytics may automatically log:

• IP address (used for geolocation country, then discarded or coarsened)
• Browser type, OS, and screen size
• Pages viewed, scroll depth, and outbound clicks
• Referring URL

If you sign up for the newsletter, we collect the email address you provide, plus optional name, plus the timestamp and IP of signup (for spam/abuse review).

We use the information above to:

• Operate, maintain, and improve the site
• Understand which providers and reviews are popular (to prioritize what we benchmark next)
• Send the newsletter, if you signed up
• Detect and prevent abuse, fraud, or bot traffic
• Comply with legal obligations

We use a small set of first-party cookies and localStorage entries for things like remembering theme preference (when applicable) and your newsletter-bar dismissed state. Third-party tools listed below may set their own cookies.

You can disable cookies in your browser. Some features (newsletter signup, analytics opt-out) may stop working if you do.

We use a server-side analytics pipeline plus a privacy-respecting client analytics provider to count page views and click-throughs in aggregate. We do not connect analytics events to your email address unless you've signed up for the newsletter and clicked a link in the newsletter.

When you click an outbound "Visit" link, our partner networks (such as the provider's affiliate program or aggregators like CJ, ShareASale, Impact) set their own cookies that attribute a future purchase back to us.

We do not receive your personal info from those programs — only an aggregated commission record. You can decline affiliate cookies by going to the provider directly without using our link.

Our infrastructure includes:

• Supabase — our database and authentication provider
• Digital Ocean / Vercel — server hosting
• Cloudflare — CDN and DDoS protection
• Google Fonts — webfont delivery
• Affiliate networks — listed in Section 06 above
• Email service provider — for sending the newsletter, if you've signed up

Each of these has their own privacy practices. We pick providers that take privacy seriously, but we don't control them.

• Newsletter subscribers: we keep your email until you unsubscribe, plus 30 days for unsubscribe-confirmation processing.
• Server logs: rotated weekly, deleted after 30 days.
• Analytics: aggregated event data is kept indefinitely; raw, identifiable events are not.

If you're in the EU/EEA, UK, California, or another jurisdiction with similar law, you have rights including:

• Access — request a copy of personal data we hold about you
• Correction — fix anything inaccurate
• Deletion — ask us to delete what we have
• Portability — get your data in a portable format
• Objection — opt out of processing that's based on legitimate interest
• Opt out of "sale" or "share" (CCPA) — we do neither, but the right exists

To exercise any of these, email privacy@grabyourdot.com.

The site is not directed at children under 13. We don't knowingly collect their information. If you believe we've received data from a child, please email us and we'll delete it.

Our servers are in the United States. If you visit from outside the US, your information is transferred to and processed in the US. By using the site, you consent to this transfer.

We may update this Policy as the site or applicable law evolves. The "Last updated" date at the top reflects the most recent revision. Material changes get a banner notice at the top of the site for at least 30 days.

Privacy questions or requests: privacy@grabyourdot.com.