Legal

Privacy policy.

Last updated: June 30, 2026

Plain summary We host on Cloudflare, we use privacy-friendly analytics only with your consent, we don't sell anything to advertisers, and we keep cookies to a minimum: essential ones for your dark-mode preference and saved articles, plus analytics cookies only if you opt in. Most outbound product links are affiliate links — we earn a small commission at no extra cost to you. If you signed up for the newsletter you can leave any time with one click.

Scope of this policy

This policy explains how SleekDrops ("we," "us," "our") collects, uses, discloses, and protects information when you visit sleekdrops.com or any subdomain we operate, subscribe to The Daily Drop newsletter, or contact us. It does not cover third-party websites we link to — once you click an outbound link, the destination's privacy policy governs your interaction with them.

By using SleekDrops you agree to the collection and use of information in accordance with this policy.

What we collect

SleekDrops is a static publication. The site itself stores no personal data about you directly. The following limited information is collected by services we rely on:

Server logs. Our host (Cloudflare) automatically logs IP addresses, user-agent strings, and request paths for security, abuse prevention, and performance — standard for any website. We do not access or analyse these logs.
Analytics. With your consent, we use Mixpanel (and Google Analytics 4) for privacy-friendly product analytics, to understand which pages and deals are useful. We record anonymous, aggregate events (page views plus a small set of funnel interactions such as hero call-to-action clicks, deal-card clicks, outbound "View deal" clicks, and newsletter sign-ups) together with non-identifying context only: the screen name, page path, deal or post slug, brand, retailer, call-to-action label, and placement. Personal data is stripped in your browser before any event is sent, so no email addresses, names, full search or query strings, or anything you type is ever collected; Mixpanel and Google may derive approximate location (country/region) from your IP address. Nothing runs until you opt in, and we honour Global Privacy Control / Do-Not-Track signals automatically; see Cookies & tracking.
Newsletter. If you subscribe, we store your email address and (optionally) your first name with our mail provider, solely to deliver the newsletter.
Contact form. If you write to us, we receive whatever information you choose to put in the message — typically a name, email, and the content of your question.

We do not collect special-category personal data (health, biometric, political opinions, etc.), and we never knowingly collect data from children — see Children's privacy.

How we use it

We use the limited information described above to:

Operate the site, fix bugs, and keep things working;
Understand which posts are useful (aggregate analytics only);
Send the newsletter to subscribers who asked to receive it;
Respond to questions submitted through the contact form;
Comply with legal obligations and prevent fraud or abuse.

We do not use your data for automated decision-making, behavioural advertising, profiling, or sale to data brokers. We do not train AI models on your data.

Cookies & tracking

Without analytics consent we set only two first-party cookies:

sd-theme — remembers your dark-mode preference (12 months).
sd-bookmarks — stores the article slugs you've saved (kept in your browser only; never sent to us; 12 months).

We store your privacy choice (sd-consent) in your browser's local storage as an essential setting that never leaves your browser. If you opt in to analytics, two more storage items are written: an anonymous Mixpanel device identifier in local storage (Mixpanel does not use cookies), and Google Analytics' own first-party measurement cookies (such as _ga) used to count visits. Both exist only to de-duplicate the anonymous events you consented to. No analytics load, and no analytics cookie or storage is written, until you accept. If your browser sends a Global Privacy Control or Do-Not-Track signal we treat it as a decline and never start. You can change your choice at any time from the footer.

Affiliate networks (Amazon, Awin, CJ Affiliate, Impact, and similar) may set their own cookies on the destination retailer's domain once you click an outbound link. SleekDrops itself does not set advertising cookies, and we do not embed third-party ad scripts on this site by default.

If we add display advertising in the future (see Advertising partners), this section will be updated and — where required by law — a consent banner will be presented.

Affiliate disclosure

In accordance with the United States Federal Trade Commission's 16 CFR Part 255 ("Guides Concerning the Use of Endorsements and Testimonials in Advertising"), we disclose the following:

SleekDrops is a participant in the Amazon Services LLC Associates Program and other affiliate programs (including Awin, CJ Affiliate, Impact, Sovrn Commerce, and Skimlinks). These programs are designed to provide a means for sites to earn advertising fees by advertising and linking to participating merchants. As an Amazon Associate, we earn from qualifying purchases.

When you click a product link on SleekDrops and complete a qualifying purchase within the retailer's cookie window, the retailer attributes the sale to us and pays us a small commission. The price you pay is the same whether you click our link or not — the retailer absorbs the commission out of their margin. We never see who you are, what you purchased, or your payment details. We only see that an order was attributed to SleekDrops.

For full details on how we choose what to link to, our testing standards, and how affiliate links are labelled, see the Affiliate disclaimer.

Advertising partners

SleekDrops does not currently display third-party display advertising. If we begin running ads in the future, they will be served by one of the following partners and this policy will be updated to reflect the specific services in use:

Google AdSense — uses cookies and similar technologies to serve ads based on prior visits to this and other websites. Google's use of advertising cookies enables it and its partners to serve ads to users based on their visit to our site and/or other sites on the Internet. Users may opt out of personalised advertising by visiting Google Ads Settings.
Ezoic, Mediavine, or Raptive — managed display advertising networks. Each maintains its own privacy practices, available at their respective websites.

If display advertising is enabled, EU/UK visitors will see a cookie-consent banner before any non-essential cookies are placed, in compliance with the ePrivacy Directive and GDPR.

Third-party services

The following services may process limited data on our behalf:

Cloudflare (USA / global) — hosting, CDN, security. Privacy policy: cloudflare.com/privacypolicy.
Mixpanel (USA) - privacy-friendly product analytics, used only with your consent to measure anonymous, aggregate usage. We strip personal data in your browser before sending and configure Mixpanel not to collect raw page URLs or referrers. Privacy policy: mixpanel.com/legal/privacy-policy.
Google Analytics 4 (USA / global) - aggregate traffic measurement, loaded only with your consent and alongside Mixpanel. We send page paths rather than full URLs so query strings never reach Google. Privacy policy: policies.google.com/privacy.
Email service provider — used to deliver The Daily Drop newsletter. Stores subscriber email addresses with appropriate Standard Contractual Clauses for international transfers where applicable.
Affiliate networks — Amazon Associates, Awin, CJ Affiliate, Impact, Sovrn, Skimlinks. These are not processors of your personal data on our behalf; they are independent controllers that may receive limited information (such as a referring URL and a cookie ID) when you click an outbound affiliate link.

If you subscribe to The Daily Drop, your email address is stored with our mail provider for the sole purpose of sending the newsletter. We use it for the daily newsletter and nothing else. Every email contains a one-click unsubscribe link. You can request deletion of your address at any time by emailing [email protected].

We do not share your email with affiliate partners, advertisers, or any third party other than the mail provider that delivers the newsletter.

Data retention

Newsletter subscribers: for as long as you remain subscribed, plus 30 days after unsubscribe (to honour deletion requests and prevent re-subscription errors).
Contact form messages: up to 24 months, then deleted.
Server logs: retained by Cloudflare per their default retention (typically 7–30 days).
Analytics: aggregate-only data; retained up to 36 months.

Security

We use reasonable technical and organisational measures to protect the limited personal data we hold — HTTPS in transit, encrypted storage at rest with our providers, and access controls on administrative tools. No method of transmission over the Internet is 100% secure; while we strive to use commercially acceptable means, we cannot guarantee absolute security.

Children's privacy

SleekDrops is not directed at children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, contact [email protected] and we will delete it. This commitment is in line with the Children's Online Privacy Protection Act (COPPA) and the UK's Age-Appropriate Design Code.

If you are in the European Economic Area, the United Kingdom, or Switzerland, you have the following rights with respect to your personal data:

Access — request a copy of any personal data we hold about you (in practice: just your email, if subscribed).
Rectification — ask us to correct inaccurate data.
Erasure — ask us to delete your data ("right to be forgotten").
Restriction — ask us to limit processing in certain circumstances.
Portability — receive your data in a structured, machine-readable format.
Objection — object to processing based on legitimate interests, including direct marketing.
Withdraw consent at any time where processing is based on consent (e.g., unsubscribe from the newsletter).
Lodge a complaint with your local supervisory authority.

Our legal bases for processing are: consent (newsletter subscription, optional cookies), legitimate interests (operating the site, fraud prevention, aggregate analytics), and legal obligation (responding to lawful requests).

California rights (CCPA / CPRA)

If you are a California resident, the California Consumer Privacy Act ("CCPA") and California Privacy Rights Act ("CPRA") give you specific rights:

The right to know what personal information we collect, use, disclose, and (if applicable) sell or share.
The right to delete personal information we have collected from you.
The right to correct inaccurate personal information.
The right to opt out of the sale or sharing of personal information.
The right to limit use and disclosure of sensitive personal information.
The right to non-discrimination for exercising any of these rights.

We do not sell personal information in the traditional sense. See Do Not Sell or Share below for details on what constitutes a "sale" under the CPRA and how to opt out.

Do Not Sell or Share My Personal Information

SleekDrops does not sell your personal information for monetary consideration. However, under the broader definitions of "sale" and "sharing" in the CPRA and similar U.S. state laws, the use of certain analytics or advertising cookies (if and when we enable display advertising) may be considered a "share" for cross-context behavioural advertising.

To opt out of any such sharing, or to exercise any other privacy right, email [email protected] with the subject line "Privacy Request." We honour the Global Privacy Control (GPC) signal where technically feasible.

Changes to this policy

We may update this policy from time to time to reflect changes in our practices or applicable law. When we do, we will update the "Last updated" date at the top of this page. Material changes will be announced in the newsletter and on the homepage for at least 14 days.

Contact us

Questions about this policy, or want your data removed? Email [email protected] or use the form on our contact page. We aim to respond within five working days, and within 30 days for any formal access or deletion request under GDPR or CCPA.