Privacy

Last updated 7 September 2026

This page describes what the site actually does today, measured from the running site rather than copied from a template. Where a practice is undecided, it says so instead of guessing.

What this site does not do

No cookies. The site sets none. Verified against the live server response.
No analytics or tracking scripts. There is no Google Analytics, no Tag Manager, no Meta pixel, no session recorder, no A/B testing tool.
No advertising network. No ad tags, no retargeting, no audience sharing.
No account system. There is nothing to sign into, so there is no profile to build.
No IP address stored with your clicks. See below.

What the server records

Like any web server, ours writes access logs — the page requested, the time, the browser's user-agent string, and the connecting IP address. These are ordinary operational logs used to keep the site up and to investigate abuse.

We keep these only as long as is reasonably necessary for those purposes and for any applicable obligations. We are deliberately not quoting a fixed number of days here, because no automatic deletion schedule is currently configured and publishing a period we do not actually enforce would be exactly the kind of unverifiable claim this site exists to call out. If and when a retention period is set, this page will state it.

What an affiliate click records

When you click a link that goes through /go/, we record: which product the link was for, which page and position it was on, the time, your browser's user-agent and referring page, and a short burst key used to spot automated traffic.

The burst key is not your IP address and cannot be turned back into one. It is a keyed hash whose secret is generated randomly, held only in memory, and rotated every day — the secret is never written to disk. So the key can distinguish two requests within a single day and nothing more. It cannot be linked to you, to another day, or to any other site.

We keep this to tell which comparisons genuinely help people. It is not sold, shared, or used to build a profile.

Who else sees your visit

Two third parties are involved in loading a page, and you should know about both:

Google Fonts (fonts.googleapis.com, fonts.gstatic.com). The typefaces are fetched from Google's servers, so Google receives your IP address and browser details when a page loads. We do not send them anything else, and we receive nothing back.
The retailer you click through to. Once you follow an affiliate link you are on their site under their privacy policy, not ours. They will typically set their own cookies.

Forms on this site

The newsletter sign-up and the search box are disabled. They cannot be submitted, nothing is transmitted, and no email addresses are being collected at all. They are shown as unavailable rather than removed, because they are coming.

Before the newsletter is switched on, this page will be updated first — naming the service that will receive subscriber addresses, and saying what happens to yours. We will not start collecting addresses and document it afterwards.

Children

This site is not directed at children and we do not knowingly collect information from them.

Your rights and how to reach us

You can ask what we hold about you and ask us to delete it. Because we set no cookies and store no IP address against clicks, in most cases there is nothing tied to you to retrieve — but ask, and we will tell you honestly.

Write to contact@theevidencestack.com and we will answer.

Changes to this page

When the site's behaviour changes — a newsletter provider added, an analytics tool adopted, a retention schedule configured — this page is updated before the change goes live, not after. The date at the top tells you when it was last revised.