Privacy Policy
This policy explains what information www.leadsler.com (“Leadsler”) collects when you read our guides, why, and what choices you have. In short: our guides and these legal pages set no cookies, load no third-party trackers, and we do not store your IP address. If you create a free Leadsler Money account, we also store what is described under Leadsler Money accounts.
Who is responsible
Leadsler is operated by Leadsler, Netherlands. Leadsler is the controller for the processing described in this policy.
For any privacy question or request, email us at info@leadsler.com.
What we record when you visit
When you open a guide or the guide overview, or click a product button, our server records one event. It is counted on our own server, without cookies and without storing anything on your device. Each event contains:
- the date and time of the page view or click;
- the kind of event, such as a page view or a click on a product button;
- the page on our site, without any query string (for example /guides/how-to-carve-a-pumpkin);
- the domain of the website that sent you, if your browser passes it on (for example pinterest.com) — never the full address;
- campaign tags from the link you followed (the utm_… parameters, such as utm_source=pinterest), if it had any. For a click on a product button these fields instead record which guide and which button was clicked;
- for a click on a product button only: the campaign tags of the page view that brought you to that page earlier the same day (for example which Pinterest pin), so we can see which post led to the click;
- a pseudonymous visitor code, explained below;
- an order value — our site tracker never records one (the field stays empty);
- the country your visit came from, as our host (Vercel) determines it for each request — only the two-letter country code (for example NL), never your IP address or a more precise location; empty when the host gives none;
- if a page is part of a test comparing two versions of it, which test and which version you saw.
The visitor code. We compute a one-way code (a hash) from your IP address, your browser's user-agent string and a random value that is replaced every day; old values are deleted. The code lets us count how many different visitors a page had on one day. Your IP address and user-agent string themselves are not stored. Once the day's random value has been deleted, the code can no longer be recomputed from an IP address, so visits cannot be linked across days.
Clicks on product buttons. Product buttons link directly to Amazon (amazon.com, or amazon.co.uk for UK-focused guides). When you click one, your browser may send a short notification to our server (the standard HTML “ping” feature), which we record as a click as described above. Some browsers, such as Firefox, do not send it. Our short links (leadsler.com/l/…) are counted the same way before they forward you. Clicks on product buttons are also counted per guide and button, with the same two-letter country code and nothing else about you.
What we do not record. If your browser sends a Do Not Track (DNT) or Global Privacy Control (GPC) signal, we record nothing about your visit. We also ignore requests from bots, crawlers, link previews and prefetching.
Abuse protection. To limit the number of requests per minute, your IP address is held briefly in our server's working memory. It is not written to our database.
Why. We use these records to learn which guides are useful and which links people follow. Our legal basis is our legitimate interest in running and improving the site (Article 6(1)(f) GDPR); we keep the data to the minimum described here and respect DNT and GPC.
How long. We currently keep these records without a fixed deletion date. They contain no IP address and, after the day they were recorded, cannot be traced back to your IP address or device.
Cookies
Our public pages — the guides and these legal pages — set no cookies and use no local storage, advertising pixels, social-media widgets, or third-party scripts, fonts or images. The sign-in area used by the Leadsler team sets only strictly necessary cookies, such as a session cookie that keeps a team member signed in (it expires 14 days after sign-in) and a short-lived cookie that shows a confirmation message after a change (60 seconds). Leadsler Money (/money) sets strictly necessary cookies only when you use its forms or sign in: a session cookie that keeps a member signed in (it expires 30 days after sign-in) and a form-protection cookie on the sign-up and sign-in pages (2 hours).
Amazon and other websites
Our guides contain affiliate links to Amazon (see our affiliate disclosure). When you click one you leave our site; from then on Amazon processes your data under its own privacy notice and may set its own cookies, including to attribute a purchase to us. Amazon's reports to us show which products were ordered through our links and the commission earned, not who ordered them. The same applies to other websites we link to, such as the sources listed in each guide.
Instagram and Pinterest
Leadsler posts to its own Instagram and Pinterest business accounts, by hand or through the platforms' official APIs. When we connect our own account to an official API, we store only what is needed to publish to it: the account's identifiers, encrypted access tokens, and references to the posts we published. We do not use these connections to collect information about the people who see, follow or interact with our accounts. If you interact with us there, Instagram (Meta) and Pinterest process your data under their own policies: Instagram privacy policy, Pinterest privacy policy.
YouTube
Leadsler uploads videos to its own YouTube channels through the YouTube API Services and reads the statistics of those channels and videos (views, watch time, subscribers). Only Leadsler's founders connect their own channels; we offer no YouTube sign-in to visitors and do not collect information about the people who watch, like or comment on our videos. We store encrypted access tokens, the channel identifiers, and the references and statistics of the videos we uploaded; when a channel is disconnected, the data read through the YouTube API is deleted. YouTube is governed by the YouTube Terms of Service and Google processes data under the Google Privacy Policy. Access granted to Leadsler can be revoked at any time on Google's security settings page.
If you email us
We use your email address and message to answer you and to handle your request.
Leadsler Money accounts
When you create a free account in Leadsler Money we store your e-mail address, a one-way hash of your password (never the password itself), when the account was created and last signed in, whether you asked for e-mails about new methods, when you accepted our terms and which versions, and your sessions (when they started, were last used and expire). If you join a waitlist we store which product you are interested in. If you buy something we store the order: product, price, status, the payment provider's references, the moment you gave the two statements about immediate access and the right of withdrawal, the version of the terms of sale the order was made under, what you unlocked, and any withdrawal request (with the name you entered).
Why. To run your account and give you what you bought (performance of a contract, Article 6(1)(b) GDPR), to keep the records that tax and consumer law require (Article 6(1)(c)), and — only if you ticked the box — to e-mail you about new methods (consent, Article 6(1)(a); you can withdraw it at any time).
Payments. You pay on the payment provider's own page; Leadsler never receives your card details. The country of your internet connection decides which price you see (Europe: including VAT; elsewhere: excluding tax); that price region is stored with your order. We send the provider your e-mail address, what you buy, the price and the region, and it tells us whether the payment succeeded and what was charged. Payments are handled by Stripe (Stripe privacy policy); when Link (a Stripe service) acts as merchant of record, Link also processes your details under its own policy (Link privacy policy) and keeps its own records of the purchase (receipt, tax), also after you delete your Leadsler account.
E-mails about your account and orders. We send only the e-mails your account or order needs: the link to confirm your e-mail address (valid for 48 hours), a password-reset link when you ask for one (valid for 1 hour), the order confirmation with the two statements you gave (our confirmation on a durable medium) and the acknowledgement of a withdrawal. They are sent from a leadsler.com address through our e-mail provider over an encrypted SMTP connection. Until it is delivered, a message (your address and its text) waits in our outbox; a message that carries a one-time link loses its text as soon as it is sent or expires, the links themselves are stored only as a one-way hash, and outbox entries are deleted 90 days after they were finished — at once when you delete your account. The legal basis is the contract (Article 6(1)(b) GDPR) and, for the order confirmation, the legal duty to confirm your purchase (Article 6(1)(c)). E-mails about new methods are sent only with your consent (above).
Your data, your choice. In your account you can download the data we hold about you (a JSON file with your account details, orders, unlocks, sessions, withdrawal requests and the e-mails we sent you) and delete your account at any time. Deletion is immediate: your e-mail address and password hash are erased and every sign-in ends. Order records we must keep for the books stay for as long as tax law requires (at least 7 years), but without your e-mail address; a pending withdrawal request keeps the name you entered until we have answered it. We never put your e-mail address in our audit log.
Leadsler team members
For people with a sign-in to the Leadsler dashboard we store their email address, display name, role and, if they set a password, a hash of it, and for each session the IP address and browser user-agent string. Expired sessions are deleted automatically. Sign-ins and other actions in the dashboard are recorded in an audit log that we keep for security and accountability.
Service providers
These companies process data on our behalf:
- Vercel Inc. hosts the website; our application runs in Vercel's Dublin (Ireland) region. As the host, Vercel necessarily processes technical request data such as your IP address to deliver pages (Vercel privacy policy).
- Supabase Inc. provides our database and file storage, located in Ireland (EU) (Supabase privacy policy).
For Leadsler Money purchases, Stripe (and Link, when it acts as merchant of record) processes payment data as described above; our e-mail provider delivers the account and order e-mails described above.
We do not sell personal data and do not share it for advertising.
Your rights
Under the GDPR you may ask for access to, correction or deletion of your personal data, ask us to restrict its use, object to it, or ask for a copy in a portable format. To do so, email us at info@leadsler.com; see also our data deletion page. Because our visit records contain no IP address, name or other identifier that you could give us, we usually cannot tell which records relate to you. You may also complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens) or the data protection authority where you live.
Changes
When what we do with data changes, we update this page. The date at the top shows the current version.