Privacy Policy

The short version

• We do not require an account.
• We collect the bare minimum to run the site, reply to your messages, and (when enabled) show ads.
• We name every third party we use and link to their privacy policy.
• To access, correct, or delete your data, use our Contact page.

What we collect

areyoubored.net is built to collect as little as possible. There is no account system, so there is no profile data to leak.

• Request logs. Standard server logs (IP address, browser user-agent, requested URL, referring page, timestamp) recorded by our host, Vercel, for security and reliability.
• Contact form submissions. If you write to us through the Contact page, we receive your name (optional), email (so we can reply), and the message itself. The form is delivered to our inbox by Web3Forms, our form processor.
• Cookies and local storage. By default we only set one strictly-necessary localStorage entry to remember your cookie banner choice. Analytics and advertising cookies are only set if you accept them. See the Cookie Policy for the full list and how to manage them.
• What we do not collect. No account credentials, no payment information, no precise geolocation, no biometric or health data.

Why we use it

Under the EU General Data Protection Regulation (GDPR), every kind of processing needs a lawful basis. Ours, in plain language:

• Replying to your messages. Necessary to respond to a request you initiated when you submitted the contact form.
• Server logs and abuse prevention. Our legitimate interest in keeping the site online and safe.
• Analytics and advertising cookies. Your consent, captured through the cookie banner. You can withdraw it at any time.
• Legal obligations. Where a law requires us to keep or disclose information (for example, a valid court order).

Who else handles it

We rely on a small number of third-party services. Each has its own privacy policy.

• Vercel hosts the site and keeps the request logs described above. Vercel privacy policy.
• Web3Forms receives contact-form submissions and forwards them to our Gmail inbox. Their delivery infrastructure also passes through Cloudflare. Web3Forms privacy policy.
• Google AdSense. When ads are enabled, Google and its partners may use cookies to serve and measure ads based on your prior visits to this and other websites. You can opt out of personalized advertising through Google Ads Settings or aboutads.info.
• Google Analytics. When analytics is enabled, we use it to understand site usage in aggregate. Google privacy policy.

We do not use any other third-party processors today (no Stripe, no error tracker, no chat widget, no email-marketing tool). We will update this list before we add anything.

Where your data goes

All four processors above are headquartered in the United States, so visiting from outside the US (in particular the EU and UK) means your request data is transferred to and processed in the US. Where applicable, we rely on the European Commission’s Standard Contractual Clauses and the UK’s International Data Transfer Addendum, as offered by each processor, as the legal basis for the transfer.

Cookies

Cookies are small files stored on your device. We split them into strictly-necessary, analytics, and advertising buckets, and only set analytics or advertising cookies after you accept them in the banner. For the full list and how to manage them, see the Cookie Policy.

Your rights (GDPR, UK GDPR, CCPA / CPRA)

Depending on where you live, you have some or all of the following rights over the personal information we hold about you:

• Access a copy of it.
• Correct it if it is wrong.
• Delete it.
• Receive it in a portable, machine-readable format.
• Restrict or object to how we use it.
• Opt out of any “sale” or “share” of personal information as defined by the California Privacy Rights Act (CPRA). For the record, we do not sell or share personal information.
• Withdraw consent for analytics or advertising cookies.

To exercise any of these rights, use our Contact page. We respond within 30 days. If you live in the EU or UK and are not satisfied with our response, you can lodge a complaint with your local data-protection authority.

Children (COPPA)

This site is not directed at children under 13 (under 16 in some countries in the European Economic Area). We do not knowingly collect personal information from them. If you are a parent or guardian and believe a child has sent us information through the contact form, please reach us via the Contact page and we will delete it.

Do Not Track

Most browsers can send a Do Not Track signal, but the industry has never agreed on what it means in practice, so we do not use it as a preference signal. The cookie banner is the source of truth for your choices on this site.

How long we keep things

• Server logs: roughly 30 days at our host, longer only if needed to investigate a specific incident.
• Contact form messages: kept in our inbox until the conversation is resolved, then archived for up to 12 months for context. We delete sooner on request.
• Cookie consent record: stored locally on your device until you clear it. It never reaches our servers.

Security

The site is served over HTTPS. We do not store passwords or payment data, and we choose vendors that take security seriously. No site is unhackable. If anything material happens to information you have given us, we will tell you promptly.

Changes

We may update this policy from time to time. We will revise the “Last updated” date at the top of the page when we do, and we will flag material changes where it makes sense.

Contact

Questions about this policy? Use our Contact pageand mention “Privacy” in your message so we can route it correctly.