Privacy Policy

The short version: Cans For That collects almost no data about you. No accounts, no email lists (yet). We use two privacy-friendly analytics tools (Cloudflare Web Analytics and Microsoft Clarity) to understand aggregate page views and how readers interact with the site. When you click affiliate links, Amazon tracks the click so commissions get paid correctly. Everything else is covered below in plain English.

Effective date: May 4, 2026  |  Last updated: May 4, 2026

1. Who this policy applies to

This policy covers the website at cansforthat.com, operated under the trade name "Cans For That." If you visit this site from anywhere in the world, this policy describes what personal data we collect, why we collect it, and what rights you have over it.

This policy is written to meet the requirements of the European Union's General Data Protection Regulation (GDPR), the UK GDPR, the California Consumer Privacy Act (CCPA), and the Personal Information Protection and Electronic Documents Act (PIPEDA).

2. What personal data we currently collect

As of the effective date above, Cans For That collects very little personal data directly. Specifically:

• Email correspondence. If you email [email protected], we receive your email address, name (if provided), and the content of your message. We use this only to respond to your inquiry.
• Server logs. Our hosting provider (Hostinger) automatically records standard server information for every visit: IP address, browser type, pages visited, referrer URL, and timestamp. These logs are retained by Hostinger according to their policies and are used for security and diagnostics.
• DNS and security data. Our DNS is managed through Cloudflare, which may process IP addresses and similar technical data to provide security and performance services.
• Cloudflare Web Analytics. A privacy-first analytics tool that measures aggregate page views, visit sources, countries, devices, and Core Web Vitals performance. It does not use cookies, does not fingerprint users, and does not store IP addresses. Data is anonymized at collection.
• Microsoft Clarity. An analytics tool that helps us understand how visitors interact with the site through aggregate metrics, anonymized heatmaps, and session recordings (with text inputs masked by default). Clarity sets a small cookie to stitch together a single visitor's actions during one session. We do not use this data to identify individuals or track visitors across other sites.
• Google Search Console. Processes aggregate search query and click data server-side. No visitor-facing tracking on our site.

We do not currently run advertising pixels, email list signup forms, or comment systems on this site. If and when we add any of these, this policy will be updated before those tools go live.

3. Planned data collection

We may add some or all of the following tools in the coming months. Each is listed here for transparency, but is not currently active:

• Google Analytics 4. For aggregate visitor analytics (page views, traffic sources, general geography). Would collect pseudonymous identifiers and browser data.
• Meta Pixel. For measuring the effectiveness of any future advertising on Meta platforms (Facebook, Instagram). Would set cookies and track page views on this site.
• Newsletter service (Mailchimp or similar). If you choose to subscribe, we would collect your email address and any other information you voluntarily provide.
• Comment system (Disqus or similar). If enabled, would allow readers to comment on articles. Comment systems typically collect account data and set tracking cookies.

When any of these tools goes live, we will update this policy, add a cookie consent banner where required, and disclose the change. No tool listed above will be activated without consent mechanisms appropriate to the regulation that applies to you.

4. Affiliate links and Amazon Associates

Cans For That participates in the Amazon Associates program. When you click a "Buy on Amazon" button or other Amazon affiliate link on this site, Amazon sets cookies on your browser that let them attribute any subsequent purchase back to this site so a commission can be paid.

The data collected through affiliate tracking is governed by Amazon's privacy policy, not ours. We do not receive your name, address, payment information, or order details from Amazon. We only receive aggregated reports on how many clicks converted into sales.

5. Why we process this data (legal basis)

For visitors in the EU/UK, the legal bases for processing under GDPR are:

• Legitimate interest (Article 6(1)(f)) for server logs, security monitoring, and affiliate click attribution.
• Consent (Article 6(1)(a)) for any future non-essential cookies or tracking, which will be requested via a consent banner before those tools activate.
• Contract or pre-contract (Article 6(1)(b)) for responding to emails you send us.

6. Your rights

Depending on where you live, you have different rights over your personal data. We honor all of the rights below regardless of jurisdiction.

Under GDPR and UK GDPR you have the right to: access your personal data, correct inaccurate data, request erasure, restrict processing, object to processing, data portability, and lodge a complaint with a supervisory authority.

Under CCPA/CPRA (California residents) you have the right to: know what personal information we collect, delete personal information, opt out of the sale or sharing of personal information, correct inaccurate information, and non-discrimination for exercising your rights. Cans For That does not sell personal information.

Under PIPEDA (Canadian residents) you have the right to: access your personal information, request correction, know how your information is being used, and file a complaint with the Office of the Privacy Commissioner of Canada.

To exercise any of these rights, email [email protected] with a clear description of your request. We will respond within 30 days.

7. Data retention

Email correspondence is retained for as long as reasonably necessary to resolve your inquiry and any related follow-up, typically no longer than two years. Server logs are retained according to Hostinger's policies (typically 30-90 days for detailed logs). If you have been in correspondence with us and request deletion of your records, we will comply unless a legal obligation requires us to keep them.

8. International data transfers

This site is hosted on infrastructure provided by Hostinger, which operates data centers in multiple countries. DNS and security services are provided by Cloudflare, a US-based company. The Amazon Associates program is operated by Amazon.com Inc., a US company. If you visit the site, your data may be transferred to and processed in Canada, the United States, or other countries where our service providers operate. These transfers are made in reliance on the service providers' own transfer mechanisms (standard contractual clauses, adequacy decisions, and similar safeguards).

9. Cookies

As of the effective date, Cans For That itself does not set any first-party cookies. The cookies that may be set during your visit are:

• Microsoft Clarity session cookie set by our analytics provider to stitch together a single visitor's actions during one session. The cookie does not identify you or track you across sites.
• Amazon affiliate cookies that are set when you click a link to Amazon. These are set by Amazon, not by us.
• Cloudflare security cookies that may be set to protect the site from malicious traffic.

Cloudflare Web Analytics, our other analytics tool, does not set any cookies. Most browsers allow you to block or delete cookies through their settings. Blocking cookies may affect how some features of the site (and sites you visit through our links) function.

10. Children

This site is not directed at children under 16, and we do not knowingly collect personal information from children under 16. If you are a parent or guardian and believe your child has provided personal information through this site, please email [email protected] and we will promptly delete the information.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will change the "Last updated" date at the top of this page. Material changes (such as adding a new tracking tool or changing how data is shared) will be reflected here before the change takes effect. We recommend reviewing this page periodically.

12. Contact

For any questions about this Privacy Policy, to exercise your rights, or to request our current postal address for formal correspondence: email [email protected]. We aim to respond to privacy-related inquiries within seven business days.

This Privacy Policy was drafted in good faith based on standard practices and applicable law as of the effective date. It is not legal advice. For complex or commercially significant questions, consult a qualified privacy lawyer in your jurisdiction.