Privacy Policy

Information We Collect

GlycolicAcid.com is an information website. We do not require accounts, registration, or login to read our content, and we do not sell products or process payments.

We collect personal information only when you choose to give it to us by subscribing to our email newsletter. If you submit one of our subscribe forms, we collect:

• Your email address (required)
• Your first name (optional)
• Optional skincare-profile details you may provide on some of our interactive tools - skin type, experience level, and primary skin concern
• Which page or form the subscription came from, and the date and time you subscribed

We use your IP address momentarily to rate-limit subscribe requests and block spam, but we do not store it with your subscription record.

Separately, we collect anonymous, aggregated analytics data when anyone visits the site (described in the Analytics section below). This includes:

• Page views and visitor counts
• Referring websites and search terms
• General geographic region (country/city-level)
• Device type, browser, and operating system

Email Newsletter

Our newsletter uses double opt-in. When you subscribe, we send a confirmation email to the address you provided, and you are only added to our list after you click the confirmation link. Once confirmed, you receive a welcome email and occasional emails about glycolic acid and chemical exfoliation.

We use the information you provide to:

• Send you the newsletter and confirmation/welcome emails
• Address emails to you by name, where you have provided one
• Tailor content to the skincare interests you optionally share

Subscriber records are stored in a Postgres database hosted by Neon. Confirmation and newsletter emails are sent through Fastmail's SMTP service. We do not sell, rent, or share your email address or profile details with third parties for their own marketing.

Every email we send includes an unsubscribe link, and you can opt out at any time. Unsubscribing stops all further emails. If you would also like your subscription record deleted, email us at privacy@glycolicacid.com and we will remove it.

Analytics

We use two analytics services to understand how visitors use the site so we can improve its content and performance.

Clicky, provided by Roxr Software Ltd, is a third-party web analytics service. It records data such as page views, referring websites and search terms, general location, and device and browser information. Clicky may set first-party cookies on your device to recognize returning visitors within a session. You can review Clicky's practices in its privacy policy.

Vercel Analytics, provided by our host Vercel, is a privacy-respecting service that collects aggregated, anonymous usage data without using cookies and without tracking individual users across websites.

Cookies

Our Clicky analytics service may set first-party cookies to recognize returning visitors, and we use your browser's local storage to remember preferences such as dismissing the newsletter bar. We do not use advertising or cross-site tracking cookies. For details, see our Cookie Policy.

Third-Party Services

We do not sell, trade, or rent your information, and we do not use third-party advertising, social media tracking pixels, or remarketing services. We do rely on a small number of service providers to operate the site and newsletter:

• Vercel - hosting and privacy-respecting analytics. Vercel may process connection metadata such as IP addresses as part of serving web pages, subject to its privacy policy.
• Clicky (Roxr Software Ltd) - third-party web analytics, subject to its privacy policy.
• Neon - Postgres database hosting for newsletter subscriber records.
• Fastmail - SMTP email delivery for confirmation, welcome, and newsletter emails.

Your Rights Under GDPR

If you are located in the European Economic Area (EEA), you have certain data protection rights under the General Data Protection Regulation (GDPR). The main personal data we hold is the information you give us when you subscribe to our newsletter. You have the right to:

• Right to access - You may request confirmation of whether we process personal data about you and a copy of it.
• Right to erasure - You may request deletion of personal data we hold about you.
• Right to restriction - You may request that we restrict processing of your personal data.
• Right to data portability - You may request a copy of personal data we hold about you in a structured, machine-readable format.

To exercise any of these rights, unsubscribe using the link in any email or contact us at privacy@glycolicacid.com.

Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with specific rights regarding your personal information. We want to be transparent:

• We do not sell or share your personal information.
• The only personal information we collect is what you provide when subscribing to our newsletter.
• You may request access to or deletion of that information by unsubscribing or contacting us.
• We do not discriminate against users who exercise their privacy rights.

Children's Privacy

GlycolicAcid.com is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take steps to remove it.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated "Last Updated" date. We encourage you to review this page periodically.

Contact Us

If you have any questions about this Privacy Policy or your personal data, please contact us at privacy@glycolicacid.com.