WheyProof

Transparency

Privacy Policy

What data we keep and why, where it's used, and how you stay in control.

Email

For the newsletter and price alerts, kept only with your consent.

Theme choice

Stays on your device; never sent to us.

Visitor statistics

Cookie-free page counts; we see totals only.

Server logs

Kept for security, deleted after about 90 days.

Advertising

No ads and no tracking cookies.

01

Who We Are

WheyProof (wheyproof.com) is an independent price-tracking site for sports supplements. This policy covers the data collected on this site. For questions, email us at [email protected].

For the UK section of the site (wheyproof.com/uk), the controller of your personal data under the UK General Data Protection Regulation (UK GDPR) is Alparslan Akbaş, who runs WheyProof. You can reach the controller at the address above.

02

What Data We Collect

  • Email newsletter: when you subscribe, we store your email address and the date you subscribed. We send nothing until you click the confirmation link (double opt-in).
  • Price alerts: when you watch a product, we store your email address together with that product. When the price drops we send one alert and close the request.
  • Watchlist: your watchlist is tied to a random token stored in your browser. If you ask for a recovery link, we use your email address only to send it.
  • Theme choice: your light/dark mode choice is kept only in your browser's local storage (localStorage) and is never sent to us.
  • Click counter: we count clicks on "Go to store" links per product, as a number that isn't tied to any person.
  • Server logs: like most websites, our web server writes a line for each request it receives: IP address, date and time, the page address requested, the response code, your browser's user agent and the country our network provider reports for the request. We use these logs to keep the site secure and to fix problems. They are deleted after about 90 days, are never used for marketing and are not shared with third parties, except with the appropriate authorities if we report abuse.
  • Security log: separately, we keep a record of attacks and abuse attempts: IP address, date/time, the requested address and the response code. Only unauthorized access attempts, requests over the rate limit, known vulnerability scans and server errors go into it, not ordinary page views. Records are deleted automatically after 90 days, on the same terms as the server logs.
  • Visitor statistics: Cloudflare Web Analytics counts page views, the pages visited, the referring site and the browser and country they come from. It uses no cookies and stores nothing on your device, and we see only totals, never an individual visitor.

There is no advertising on this site. If we ever add advertising or anything else that uses cookies, this page will be updated first and it will ask for your consent before it runs. See the Cookie Policy for details.

03

How We Use Data

We use your email address only to send the newsletter you subscribed to and the price alerts you asked for. We don't sell or share your personal information, and we don't use it for targeted advertising.

Some links to stores may be affiliate links. When you click one and leave our site, the store's own privacy policy and cookies apply there.

04

Who Processes It

Three service providers handle data for us, each only for its own job:

  • Oracle Cloud Infrastructure hosts the site and its database, in Frankfurt, Germany.
  • Cloudflare carries all traffic to the site (delivery and protection against attacks) and provides the visitor statistics. It runs a worldwide network, and Cloudflare, Inc. is based in the United States.
  • Brevo (Sendinblue SAS, France) delivers the newsletter and alert emails. Your email address goes to Brevo for this purpose only.

Transfers to the EU rely on the UK's adequacy regulations for the European Economic Area. Cloudflare is certified under the UK Extension to the EU-US Data Privacy Framework for transfers to the United States, and falls back on the standard contractual clauses if that certification lapses.

06

Retention and Deletion

We keep subscription data until you unsubscribe or ask us to delete it. Every newsletter and alert email has an "unsubscribe" link that deactivates your record immediately. To have your data deleted completely, just write to [email protected]. Server logs and the security log are deleted after about 90 days.

07

Your Rights

Under the UK GDPR you have the right to access the personal data we hold about you, to have it corrected, to have it erased, to restrict or object to how we use it, to receive it in a portable format, and to withdraw consent at any time. To use any of these rights, email [email protected]; we reply within one month.

If you are unhappy with how we handle your data, you can complain to the Information Commissioner's Office (ICO), the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. We'd appreciate the chance to put things right first.

08

Children

This site is not directed to children under 13, and we don't knowingly collect personal information from them. If you believe a child has given us their email address, contact us and we'll delete it.

We only store your theme and cookie choice on your device. Our visitor count is cookie-free and identifies no one. If advertising cookies are ever added, we will respect this choice. Cookie Policy