Legal
Privacy Policy
Last updated: May 2026
Summary
TrulyVetted collects minimal data. We do not sell personal information. We do not build advertising profiles. The data we log exists only to count clicks on affiliate links — and even that is stored as a one-way hash, not a raw IP address.
What we collect
Affiliate click events
When you click a product link, we log: a SHA-256 hash of your IP address (salted — the original IP cannot be recovered), the destination URL, the product slug, and a timestamp. This data is used solely to count clicks for affiliate reporting.
Analytics (when enabled)
We may use Google Analytics to understand aggregate traffic patterns — pages visited, time on site, referral sources. This data is anonymised and never tied to individual identity. You can opt out via your browser's privacy settings or a content blocker.
What we do not collect
- Names, email addresses, or any account information (there is no account system)
- Raw IP addresses — all IPs are one-way hashed before storage
- Payment or financial information (all purchases happen on external retailer sites)
- Location data beyond country-level analytics aggregates
- Browsing history outside of trulyvetted.com
Third-party services
TrulyVetted uses the following third-party services that have their own privacy policies:
- Skimlinks — rewrites certain outbound links to add affiliate tracking. Skimlinks may set a cookie. See skimlinks.com/privacy-policy.
- Google Analytics — aggregate traffic measurement. See policies.google.com/privacy.
- Supabase — database hosting for review content and click logs. Data is stored in the EU or US depending on project configuration.
- Vercel — website hosting and edge delivery. See vercel.com/legal/privacy-policy.
Cookies
TrulyVetted itself does not set first-party cookies. Third-party services (Skimlinks, Google Analytics) may set their own cookies for tracking and analytics purposes. You can block these via your browser settings or an ad blocker.
Data retention
Affiliate click logs (hashed IP, destination URL, timestamp) are retained for up to 24 months for reporting purposes and then deleted. Analytics data follows the retention settings of the respective third-party service.
Your rights
Because we do not collect personally identifiable information, there is no personal data to access, correct, or delete. If you have a concern, contact us at contact@trulyvetted.com and we will respond within 30 days.
Changes to this policy
We may update this policy as the site evolves. The "last updated" date at the top of this page will reflect any changes. Continued use of the site after a policy update constitutes acceptance of the revised policy.