Privacy Policy

The short version

What we collect

We deliberately collect very little. In practice that is:

• –Newsletter email address — only if you submit it through a signup form. It is stored in our database (hosted by Supabase) so we can send you the updates you asked for.
• –Aggregate, anonymous usage — page views and visits via privacy-first analytics (see below). This data is aggregated and cannot be tied back to you.
• –Standard server logs — our hosting and CDN provider (Cloudflare) processes requests and may log technical data such as IP address and user-agent for security, abuse prevention, and reliability. We do not use these logs to build profiles of individuals.

We do notask for your name, address, date of birth, or payment details. Any purchase you make happens on a vendor's own website, under that vendor's own privacy policy — not ours.

Analytics

We use Cloudflare Web Analytics, a privacy-first measurement tool. It does not use cookies, does not fingerprint your device, and does not track you across other websites. It tells us aggregate things like how many people visited a page — not who they are.

Because it sets no cookies and collects no personal identifiers, there is nothing for you to opt out of and no consent banner to click through. That is by design.

Cookies & local storage

We keep cookies to a minimum and use none for advertising or cross-site tracking. The only cookies and browser storage we set are functional:

• –tvr-surface / tvr-currency — remember your light/dark preference and display currency so the site renders the way you left it.
• –Site-access cookie — during our pre-launch period the site is password-gated; a single cookie remembers that you have entered the access password so you are not asked on every page.

These are strictly necessary or preference cookies. You can clear them at any time through your browser settings.

How we use your information

• –To send the newsletter you subscribed to (and nothing else).
• –To understand, in aggregate, which content is useful so we can improve the site.
• –To keep the service secure, available, and free of abuse.

We do not use your information for automated decision-making or profiling, and we do not sell, rent, or trade it.

Who we share data with

We share data only with the infrastructure providers that make the site run, and only to the extent they need it to provide their service:

• –Cloudflare — hosting, CDN, and privacy-first analytics.
• –Supabase — the database that stores newsletter email addresses.

We may also disclose information if required by law. We do not sell your personal data to anyone, ever.

How long we keep it

We keep your newsletter email address until you unsubscribe or ask us to delete it. Aggregate analytics are retained only in anonymous, non-identifying form.

Your rights

Depending on where you live (for example under the GDPR or CCPA), you may have the right to access, correct, or delete the personal data we hold about you, and to withdraw consent for the newsletter at any time.

Since the only personal data we hold is your newsletter email, exercising these rights is simple: every email includes an unsubscribe link, and you can email us at contact@thevialreport.com to request access or deletion.

Age

The Vial Report is intended for adults (18 and over) involved in research. It is not directed at children, and we do not knowingly collect data from anyone under 18.

Changes to this policy

If we change what we collect or how we use it, we will update this page and the “last updated” date above. Material changes will be made clear.

Contact

Questions about this policy or your data? Email contact@thevialreport.com.

See also our Disclaimer and Methodology.