Privacy Policy

Effective October 16, 2026

What we collect

We store your display name, email address, password hash, verification and consent records, referral attribution, email preferences, credits and ledger, submitted promotions, delivery status, engagement rewards, reports, and administrative audit records. Sessions use essential secure cookies. Temporary hashed IP-based rate-limit buckets help prevent abuse without blocking entire households.

How information is used

We use these records to operate the service, send requested account messages, deliver consented member advertising, prevent duplicate rewards and daily mailings, handle complaints, and maintain security. Promotional messages may identify the sender’s display name, but do not expose their account email to fellow members. Member email lists are not published or sold.

Email delivery and outside websites

Mail is processed through Ian’s Postal email infrastructure at mail.hotslist.com and the hosting infrastructure needed to operate FreeSafeList. Your recipient address, message content, delivery events, and technical delivery information are processed there. Advertising destinations are independent sites with their own privacy policies. Optional network ads may load third-party resources in responsive frames; when enabled, those providers receive normal browser request information such as IP address.

Your choices

You can edit your display name, unsubscribe, and request account closure in My Account. Contact support for email changes or to request a copy, correction, or deletion of your data. Essential operational records may be retained to resolve abuse, accounting disputes, and security incidents. Transient expired verification/reset records and rate-limit records are regularly cleaned; delivery records are minimized through the maintenance process.

We use essential session cookies and session-based referral attribution. We do not import purchased or scraped lists. Optional visitor analytics are described below and in our Cookie Policy and settings. Contact iancormiersdesk@gmail.com for privacy questions.

Traffic and activity measurement

To maintain the service, we count application requests by hour, page category, request method, HTTP status, likely automated traffic and total server response time. These counters contain no visitor identifier, member ID, full IP address, raw browser signature or query string. Hosting infrastructure separately processes ordinary access and error logs under its operational controls.

For service operation, security, support and dispute resolution, we record the time, page category, member ID when available, action name and request outcome for registration, sign-in/out, password recovery, verification resend, mailing preview/submission, advertisement opening, reward requests, profile preferences, unsubscribe, closure requests, reports and administrator changes. We do not put passwords, email addresses, form contents, message bodies, challenge answers or secret links in these activity records. A successful request is not proof of delivery, human attention or a reward; authoritative account, queue and credit records determine actual results.

Only after you accept optional analytics, first-party records may also include page views, a random browser ID, signed-in member ID, referring member ID, external referrer hostname, public campaign/source/medium labels, broad device/browser category, link-click/copy counts, scroll milestones, 30 seconds of visible-page engagement, and registration, verification and sign-in events. We use these to understand referral effectiveness, navigation and participation. We do not record full referrer URLs, arbitrary query strings, precise location, keystrokes, screen recordings or device fingerprints. Some visits cannot be measured; attribution and browser counts are estimates. Optional measurements are not used to change credit rewards or referral ownership.

Control, access and retention

Accept or reject optional analytics in Cookie settings. You can withdraw at any time. Rejection removes this browser’s analytics cookie and associated optional event records, where the identifier is still available. Global Privacy Control and Do Not Track signals disable optional analytics. Refusing analytics does not stop essential service records or promotional emails you have separately requested; email preferences remain in My Account.

Detailed traffic-journey and operational action events are retained for up to 90 days; identifier-free hourly traffic counters for up to 365 days, with deletion by daily maintenance. Cookie preferences last 180 days and optional visitor IDs 90 days. Underlying account, consent, referral, credit, campaign, delivery and security records follow their separate operational needs and data-request handling; these are not automatically erased by clearing an analytics cookie. Private rotating recovery backups can temporarily contain older records until rotation and are used only for recovery; deletion requests must be reapplied following restoration.

Analytics is processed on the site’s hosting infrastructure, accessible only through authorized administrator tools and protected administration/hosting access. Exports are restricted to administrators and export access is audited. We do not sell analytics or share it with third-party analytics or advertising platforms. Existing optional external network ads and Gravatar avatars may send normal browser request information to their providers; they have their own policies. External advertising websites are separate services, and our cookie choice does not control their cookies.

For access, correction, deletion, withdrawal questions, applicable privacy rights or a complaint, contact iancormiersdesk@gmail.com. We verify identity before releasing or changing account information and handle requests subject to applicable law and records needed for security or disputes. You may also contact your applicable privacy regulator. We use access controls, secure cookies and protected recovery copies; no internet service can promise absolute security.