Privacy
What we collect
Very little, and none of it identifies you. This page describes what the code actually does.
01
Analytics
This site uses Vemetric to count visits, and nothing else. It is cookieless and does not fingerprint your device, which is why this site sets no cookies and therefore has no cookie banner to click.
What is sent to Vemetric: the page you are on, your referrer, your approximate country and device type, and a small set of named events — the globe was explored, a parcel was opened, a brand page was viewed, a sponsor’s link was followed, a checkout was started. Where an event concerns a particular brand or parcel, its public slug goes with it. Not your name, not your email, not an identifier that follows you to another website.
There is no Google Analytics here, no advertising pixel, no session recorder and no cross-site tracking. Vemetric is the only third party that sees anything you do, and only in aggregate.
02
What we do not keep
We used to count all of the above a second time in our own database, a row per page view. We no longer do. There is no analytics table here: the figures on the statistics page and on each brand’s page are read back from Vemetric in aggregate when the page is built.
Our own database holds what was bought: brands, parcels, orders, and a record of ground changing hands. None of that describes a visitor.
We do not store your IP address, user agent, referrer, location or any device fingerprint. Your IP address is visible to our server while it handles a request, and is used only to apply rate limits within that request. It is never written down.
03
Following a sponsor's link
Links to a sponsor’s website go through /go/ on this site before they reach the sponsor. That hop exists to check the destination against the address the sponsor gave us at checkout, so a link on this site cannot be turned into a redirect to somewhere else.
The click itself is counted in your browser and sent to Vemetric with the sponsor’s public slug. Nothing about the click is stored here, and the sponsor is not told anything about you — they see a number, the same one shown publicly on their page.
04
If you buy a sponsorship
We store the brand name, tagline, description and website you submit — all of which are published — along with your email address, which is not. The email is used for the receipt and to contact you about the sponsorship.
Payment is handled entirely by Dodo Payments. We never receive your card number. We store the payment provider’s identifiers for your order so we can reconcile it and process a refund if one is due.
05
What is public
Brand names, taglines, descriptions, websites, parcels, the amount committed, the date of arrival, and aggregate visitor and click counts are all public — that is the product. Email addresses and payment details are not.
06
Your rights
Needs legal reviewAdd the data controller’s identity, the lawful basis for processing under UK/EU GDPR, retention periods for orders, the process for access and erasure requests, and the relevant supervisory authority. Confirm what Dodo Payments and Vemetric each retain as separate processors, and add both to a processor list.