For the newsletter and price alerts, kept only with your consent.
Transparency
Privacy Policy
What data we keep and why, where it's used, and how you stay in control.
Theme choice
Stays on your device; never sent to us.
Visitor statistics
Cookie-free page counts; we see totals only.
Server logs
Kept for security, deleted after about 90 days.
Advertising
No ads and no tracking cookies.
Who We Are
WheyProof (wheyproof.com) is an independent price-tracking site for sports supplements. This policy covers the data collected on this site. For questions, email us at [email protected].
What Data We Collect
- Email newsletter: when you subscribe, we store your email address and the date you subscribed. We send nothing until you click the confirmation link (double opt-in).
- Price alerts: when you watch a product, we store your email address together with that product. When the price drops we send one alert and close the request.
- Watchlist: your watchlist is tied to a random token stored in your browser. If you ask for a recovery link, we use your email address only to send it.
- Theme choice: your light/dark mode choice is kept only in your browser's local storage (localStorage) and is never sent to us.
- Click counter: we count clicks on "Go to store" links per product, as a number that isn't tied to any person.
- Server logs: like most websites, our web server writes a line for each request it receives: IP address, date and time, the page address requested, the response code, your browser's user agent and the country our network provider reports for the request. We use these logs to keep the site secure and to fix problems. They are deleted after about 90 days, are never used for marketing and are not shared with third parties, except with the appropriate authorities if we report abuse.
- Security log: separately, we keep a record of attacks and abuse attempts: IP address, date/time, the requested address and the response code. Only unauthorized access attempts, requests over the rate limit, known vulnerability scans and server errors go into it, not ordinary page views. Records are deleted automatically after 90 days, on the same terms as the server logs.
- Visitor statistics: Cloudflare Web Analytics counts page views, the pages visited, the referring site and the browser and country they come from. It uses no cookies and stores nothing on your device, and we see only totals, never an individual visitor.
There is no advertising on this site. If we ever add advertising or anything else that uses cookies, this page will be updated first and it will ask for your consent before it runs. See the Cookie Policy for details.
How We Use Data
We use your email address only to send the newsletter you subscribed to and the price alerts you asked for. We don't sell or share your personal information, and we don't use it for targeted advertising.
Some links to stores are affiliate links. When you click one, it may pass through an affiliate network (Awin or Sovrn) that records the click so the store can credit the sale. From there, the network's and the store's own privacy policies and cookies apply.
Who Processes It
Three service providers handle data for us, each only for its own job:
- Oracle Cloud Infrastructure hosts the site and its database, in Frankfurt, Germany.
- Cloudflare carries all traffic to the site (delivery and protection against attacks) and provides the visitor statistics. It runs a worldwide network, and Cloudflare, Inc. is based in the United States.
- Brevo (Sendinblue SAS, France) delivers the newsletter and alert emails. Your email address goes to Brevo for this purpose only.
Retention and Deletion
We keep subscription data until you unsubscribe or ask us to delete it. Every newsletter and alert email has an "unsubscribe" link that deactivates your record immediately. To have your data deleted completely, just write to [email protected]. Server logs and the security log are deleted after about 90 days.
Your Rights
Depending on where you live (for example, California and other US states with privacy laws), you may have the right to know what personal information we hold about you, to get a copy, to have it corrected or deleted, and to opt out of its sale or sharing. We don't sell or share personal information, but you can make any of these requests, whatever state you live in, by emailing [email protected]. We won't treat you differently for making a request.
Children
This site is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has given us their email address, contact us and we'll delete it.