Privacy
[DRAFT pending counsel] — this is not a published privacy policy. It states what we intend and what is not yet decided. It has not been reviewed by a lawyer, it is not the document the law asks for, and it is not a basis on which to give us an email address. This site stores an email address only when you ask to be written to, by watching a place, joining the queue or buying a report, and uses it for nothing else. The full policy is in draft with counsel.
What the sign-up forms say today
Quoted from the sentence printed under the email field, unchanged.
One address, stored to send you those updates and nothing else. No tracking pixels, no sale or sharing, and one click to stop.
That is the whole intent, and the policy counsel writes has to match it or the form has to change. It is written here rather than only in the form so the commitment is on a page of its own, where it can be held to.
The rest of the site, as built
- There is an account only if you make one, and nothing needs it: the quiz answers, the map view and the home-country preference stay in your browser — in the URL you can see, or in this browser's own storage. A sign-in exists for members, and watching a place stores the address you give it.
- We keep your email address, the five places and preferences you chose, and the date of purchase. We use them to give you the report and to email you when those places move, for twelve months, and for nothing else. Every email has an unsubscribe link. Stripe takes the card payment, and we never see the card number. We keep the data as long as the privacy policy says.
- The scores, the search index and the map tiles are static files. Requesting them reaches a server, as every web request does, and no cookie is set to do it.
- No advertising, no third-party trackers, no social embeds, no session recording.
- If site analytics are switched on before this page is finished, they will be cookieless and aggregate — no identifier stored on your device — and this page has to say so before that happens.
What is not decided
Listed rather than glossed. Each is with counsel or waiting on the entity, and each has to be answered before this page stops being a draft.
- Who the data controller is — the legal entity does not exist yet.
- The lawful basis for storing an address, and single versus double opt-in.
- Which processors are used, and the data-processing agreements each of them needs.
- Retention: how long an address is kept if the product never launches.
- How you ask for a copy of, or the deletion of, what we hold — and at what address.
- Whether a representative is required for readers in the UK or the EU.
Until those are answered, what we hold is the address you gave us to be written to and, if you bought a report, the five places you chose. You can ask for either back. Everything else on the site works without one.