Privacy and cookies

Who is responsible

Hybrid Race Gear is edited by Jochum van Brummelen, a physiotherapist in the Netherlands. For privacy requests, write to hello@hybridracegear.com. A postal address is available on request. This notice matches the site as it is built. Have it read by a lawyer before you rely on it for a production domain.

Cookies

This site does not set cookies. The language is part of the address (/en, /nl, /de), so there is no language cookie. Analytics are cookieless. Because there are no cookies, there is no cookie banner.

If a later tool needs a non-essential cookie, this page will change before that tool is switched on, and a banner will be added first.

Analytics

We use Plausible, from Plausible Insights OÜ in Estonia. It counts page views without cookies and without an advertising profile. A page view includes the page address, the referrer, browser type, and a coarse country derived from the IP address. Plausible does not store the IP address.

The browser also sends events for scroll depth and for how long the tab was visible. Affiliate clicks are sent from our server, with the product, the merchant, the country code, the language, and the page. The split by country and by language is described in docs/ANALYTICS.md in the project repository.

Legal basis: legitimate interest in knowing which public pages and outbound links are used, with no cookie and no IP stored in our own event log. You can read Plausible’s data policy on plausible.io.

Affiliate clicks

Merchant buttons go to /go/… on this site and then redirect. We log the time, the product id, the merchant id, the language, the page path, and the country code from the host’s geo header. We do not write your IP address into that log. The merchant you land on has its own privacy notice.

Country header

On Vercel the host adds a country code in the header x-vercel-ip-country. We read it to suggest a merchant that serves that country. We do not put it in a cookie. It can appear as a property on an analytics event.

The newsletter is switched off. While EMAIL_ENABLED is not true, the form does not store your email and does not send it to a provider.

When it is turned on, signup will be double opt-in through Resend. We would then keep your email address, your language, and the time you confirmed, until you unsubscribe or ask us to delete it. Legal basis: consent. Resend may process that address outside the EEA under its data-processing terms. Details are in docs/EMAIL.md.

Hosting

The site is hosted on Vercel. Vercel processes the technical request, including the IP address, to deliver the page and to protect the service. Those infrastructure logs belong to the host. They are separate from the affiliate event log, which does not contain the IP.

How long we keep things

Plausible keeps aggregated statistics. For the affiliate event log in the host’s log stream, use a short retention once the site is in production; 90 days or less is the target. Newsletter data, when the list exists, is kept until you unsubscribe or ask for deletion.

Your rights

If you are in the EEA or the United Kingdom you can ask for access, correction, deletion, restriction, or a copy of personal data we actually hold, and you can object to processing that is based on legitimate interest. You can complain to the Autoriteit Persoonsgegevens in the Netherlands, or to your local authority. Most of these requests will be thin, because the site has no accounts.

Children

The site is not aimed at children. Supplement claims that are limited to adults say so next to the claim.