Published document · STANDARD v2026.8
Privacy Policy
What this site collects, which is very little, and what it does with it, which is less.
This site publishes a scoring standard. It is not an advertising business, and it has no reason to build a profile of you. The one category of data it handles is described below in full; there is no second category.
Email addresses
This site has no signup form, no mailing list and no newsletter. It collects no email addresses, so there is no list to be on, nothing to unsubscribe from, and no subscriber record to correct or delete. If you write to the editor, that correspondence is an ordinary email between two people and is not added to anything.
Analytics
Measurement is performed by two services. The first, Cloudflare Web Analytics, is supplied by the network that serves the site; it is cookieless and reports totals only.
The second is Google Analytics 4, operated by Google LLC and, for European visitors, Google Ireland Ltd. It records the pages viewed, the referring page or site, approximate location at city and country level, device and browser type, and session timing. GA4 neither logs nor stores IP addresses, and it distinguishes browsers only by a random identifier. Its advertising features, Google signals and ad personalisation are disabled; the data is not used for advertising and is not sold. This is how we decide which clause needs rewriting and which comparison nobody is reading. It is reported in aggregate and is not used to identify individuals, build advertising audiences or follow anyone across other websites.
Consent operates as follows. Where a device's time zone places it in the EEA, the UK or Switzerland, a banner asks first and no data is sent to Google unless the visitor selects Accept. Elsewhere analytics is on by default and may be switched off at any time. A Global Privacy Control signal is honoured as an opt-out. The choice is recorded in local storage as analytics-consent, not in a cookie, and the cookie settings link reopens the banner. Google's processing is described in the Google Privacy Policy, and Google provides an opt-out browser add-on that applies to every site.
Cookies
The site itself sets no advertising cookies and runs no third-party advertising trackers. Analytics measurement uses two first-party cookies, _ga and _ga_<ID>, which last up to two years, are set only after analytics is allowed, and are deleted if it is declined later. Blocking cookies in your browser does not prevent you reading anything here; no content is gated behind consent.
Outbound partner links are a separate matter. Following one takes you to a vendor's own site, which sets its own cookies under its own policy, and may record that the visit originated here.
Affiliate links
Some outbound links to the builders assessed here earn a commission. They do not affect any score, and the reasoning behind that claim, along with the evidence for it, is set out in the affiliate disclosure. Nothing you do on a vendor's site after leaving here is visible to us beyond an aggregate count of referrals.
What we never do
We do not sell personal data. We do not run retargeting, and we do not attempt to identify individual readers from analytics. There is no exception to any of those three statements, and if one ever changed, this page would change with it before the change took effect.
Requests about your data
You may ask what we hold about you, ask for it to be corrected, or ask for it to be deleted. In practice the answer is that we hold nothing that identifies you, because nothing here asks for your name or your email address. Write to the address published on the contact page, from the address in question where possible, and expect a reply within a few working days.
This policy is reviewed alongside each revision of the standard. Material changes are noted in the revision record rather than applied silently. The present version took effect on October 9, 2026, when Google Analytics was added.