Privacy Policy

What We Collect

Analytics

When you consent, we use Google Analytics 4 to understand how visitors use the site. GA4 collects pages viewed, time on page, approximate geographic region (country/state level), device type, browser, operating system, and referral source.

GA4 does not collect names, email addresses, or other personally identifiable information. Analytics data is stored by Google for 14 months.

If you decline cookies or your browser sends a Global Privacy Control signal, GA4 operates in cookieless mode and does not store identifiers on your device.

Membership

If you subscribe to our newsletter, we collect your email address (and name, if provided). This data is stored in our Ghost CMS database hosted on DigitalOcean and is used solely to send you content you requested.

Email Tracking

Newsletters sent through Mailgun may include open-tracking pixels and click-tracking links so we can understand which content resonates with readers. You can avoid this by disabling image loading in your email client or unsubscribing at any time.

Server Logs

Our hosting provider (DigitalOcean) records standard server logs including IP addresses, request timestamps, and URLs visited. These logs are used for security and troubleshooting.

Cookies

Essential cookies are required for the site to function (e.g., member login). They do not require consent.

Analytics cookies are only set when you click “Accept” on the cookie banner. If you decline or do not interact with the banner, no analytics cookies are placed.

Third Parties

We share data with the following service providers, each acting as a data processor:

• Google (GA4) — Analytics. Google Privacy Policy
• Mailgun — Email delivery and tracking. Mailgun Privacy Policy
• DigitalOcean — Hosting. DigitalOcean Privacy Policy
• Google Fonts — Typography. Google Fonts FAQ

We do not sell, rent, or trade your personal information.

Legal Basis for Processing

• Consent — Analytics cookies are placed only after you opt in.
• Legitimate interest — Essential cookies, server logs, and security measures.
• Contract — Membership data is processed to deliver the newsletter you requested.

Global Privacy Control and Do Not Track

We honor the Global Privacy Control (GPC) browser signal. When your browser sends a GPC signal (Sec-GPC: 1), we treat it as a request to opt out of analytics tracking. No analytics cookies are set, and GA4 operates in cookieless mode. This applies automatically without any additional action on your part.

This satisfies opt-out requirements under the California Consumer Privacy Act (CCPA/CPRA) and the privacy laws of Colorado, Connecticut, Delaware, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Texas, and other states that mandate recognition of universal opt-out signals.

Your Rights

All Visitors

You can manage all your privacy settings from our Privacy Preferences page, accessible from the site footer. There you can toggle analytics cookies, manage your newsletter subscription, and learn about email tracking. You can also re-open the cookie consent banner at any time from the preferences page.

European Union and United Kingdom Residents

Under the GDPR and UK GDPR, you have the right to: access your personal data; rectify inaccurate data; erase your data; restrict processing; data portability; object to processing based on legitimate interest; withdraw consent at any time; and lodge a complaint with your local Data Protection Authority.

California Residents

Under the CCPA/CPRA, you have the right to: know what personal information we collect and why; delete your personal information; correct inaccurate information; opt out of the sale or sharing of personal information; and non-discrimination for exercising your rights.

Categories of personal information collected: Identifiers (email, IP address), internet activity (pages viewed, referral source), geolocation (country/state level).

We do not sell personal information. We do not share personal information for cross-context behavioral advertising.

New York Residents

Under New York law (GBL Section 899-FF), we process personal data only when strictly necessary for providing the service you requested, or when you have given informed consent. You can withdraw consent at any time from the Privacy Preferences page or by re-opening the cookie banner.

Other US State Residents

If you reside in Colorado, Connecticut, Delaware, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you have the right to: access your personal data; correct inaccurate data; delete your data; and opt out of targeted advertising, data sales, and profiling.

If we deny a request, you may appeal by emailing us at the address below.

Children’s Privacy

OutdoorStats is not directed at children under 16. We do not knowingly collect personal information from minors. If you believe a child has provided us with personal data, please contact us and we will delete it.

Data Retention

• GA4 analytics: 14 months
• Membership data: Until you unsubscribe or request deletion
• Mailgun email logs: Per Mailgun’s retention policy
• Server logs: Per DigitalOcean’s retention policy

Security

We use HTTPS encryption for all connections. Access to the server is restricted to SSH key authentication. Database credentials are not exposed publicly.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be noted with an updated date at the top of this page.

Manage Your Preferences

Visit our Privacy Preferences page to manage cookies, newsletter subscriptions, and view email tracking details in one place.

Contact

For any privacy request — including access, deletion, correction, or complaints — email us at hello@outdoorstats.com.

We aim to respond to all requests within 30 days, or sooner as required by applicable law.