Privacy

Reading the site

Nothing on any page collects anything. There are no accounts, no analytics script, no tracking pixels, no advertising network and no cookies. What this site knows about its readers is a count made by Cloudflare while serving the pages, described in the next section.

Every page is static, and the built pages make no requests to any other domain — the fonts are files on this server, the images are files on this server, and there is no consent banner because there is nothing to consent to. That is checkable: open your browser's network tab and you will see requests to this domain and nowhere else.

Verdicts link to companies' own policies and to archived copies of them. Those are links: nothing is fetched from them, and nothing about you goes anywhere, until you choose to click one and leave.

One thing is stored in your browser: a theme value remembering whether you chose light or dark. It never leaves your device and is not a cookie — clearing site data removes it.

The my stack report is built entirely in your browser. Which companies you select is never transmitted: a shared link carries the list after the # sign, which browsers never send to a server, and nothing is stored.

What is counted at the edge

Cloudflare serves every page of this site, and counts the requests it serves in order to do so. Since 5 September 2026 this site reads two things back from those counts, once a day, through an API token that can read analytics and nothing else. Neither adds anything to a page: no script, no cookie, no beacon, and no request from your browser to anyone but this domain.

• A public panel. Requests and page views over the last seven days, by country. Nothing finer than a country and a number is asked for, and it is published in full on the about page, so what the site knows about its readers is something you can look at.
• An internal daily report. How many times each page was requested, which sites linked here reduced to the linking site's host name before it is written down, how many times the share cards were fetched, response status codes, and Cloudflare's own count of how many distinct addresses it saw that day, which reaches us as a single number. It exists to answer "did anyone read this" and "who is linking to us"; it is kept with the site's source and is not published. No individual visitor appears in it.

Cloudflare also adds error-reporting headers to every site it serves by default, which ask your browser to tell Cloudflare about connections that fail. Those are switched off here: no header on this site asks your browser to report anything to anyone, and you can confirm that from the response headers of any page.

If you use the submission form

The submission form is the one thing on the site that stores anything, and only if you choose to use it. It stores exactly four things: whether you are suggesting an entity or reporting an error, which entry it concerns, your message, and your email addressif you supply one — it is optional and the form works without it. No IP address, no browser fingerprint, no referrer, and no identifier tying one submission to another: the request that delivers it carries those things, and the code that handles it does not write them down.

Submissions are held for 12 months from the day they arrive and then deleted. One that changes an entry is published as the correction itself — never your email address, and never your name unless you asked to be credited.

If you write to us

Everything the form can do, email can do too. What you send tocontact@isitsellingme.comis read by a person, used to check what you sent, and — where you asked a question — to reply to you.

Correspondence is deleted within 12 months of arriving, with one exception: a company's on-the-record response to a right-of-reply letter is published verbatim beside its entry and kept, because it is part of the public record this site exists to maintain. What is published is the statement — never the sender's address, and never a name unless it was offered for publication.

There is no mailing list to be added to, and your address is never shared with anyone. A submission that becomes a verdict is credited only if you ask to be.

Who processes what

The site is served by Cloudflare. Like any host, Cloudflare handles the network request that delivers a page to you, which necessarily includes your IP address. We do not receive that data and we do not ask for it: what is read back is the aggregate counts described above, in which no visitor appears.

Form submissions are stored in a Cloudflare database, in their capacity as a processor acting on our instructions. Email to the address above is held by Migadu, our mail provider, likewise. Nothing else touches anything about you, because nothing else exists: no advertising network, no data broker, no analytics provider. On this site of all sites, that list is the point.

Your rights, and how to use them

If you have used the form or emailed us, you can ask for a copy of what is held, ask for it to be corrected, or ask for it to be deleted — and it will be deleted, not anonymised and kept. Because nothing else is collected, there is nothing else to ask about: if you have never written to this site, it holds nothing about you at all.

Write to the same address. If you are in the UK or the EU and think this has been handled badly, you can complain to your national data protection authority — in the UK that is the Information Commissioner's Office.

Who the controller is. This site is run by one person, not a company — the about page says how it is run and funded. The operator's name is kept off these pages by choice, about the journalism rather than reachability: if you are exercising a right over your own data, or your complaint needs a named person, ask at the address above and you will be told who you are dealing with.

When this changes

This notice describes the site as it is on 5 September 2026, not as it is intended to be. If anything is ever built that collects more — a mailing list, say — this page will say what it collects before the feature appears, not after. The submission form went through exactly that door: this section named it before the form existed. So did the edge counts: the section above was published before the first figure was read back.

This site archives what companies published so that quiet rewrites are visible. Applying that standard to ourselves: the history of this page is public, and if it changes you can see what it said before.