Privacy policy
Who we are
Controller: Follower (follower.co)
Contact: [email protected] or the Contact form
Follower is the controller for personal data processed through this website. If a more specific legal entity name is registered later, this notice will be updated.
What we process and why
Information received by Follower or its providers
| Data | Purpose | Lawful basis (UK GDPR) |
|---|---|---|
| Request metadata when you load pages (for example IP address, user agent, URL, approximate time) via Cloudflare | Deliver pages, security, abuse prevention, diagnosing faults | Legitimate interests — operating and protecting the website |
| Aggregate traffic statistics via Cloudflare Web Analytics (page views and visits; not Google Analytics) when you have not objected and have not Rejected analytics cookies | Understand overall site use and improve the site | Where the UK PECR statistical-purposes exception applies for the script access, plus legitimate interests for related personal data processed as a by-product. Not used for advertising, profiling or individual browsing histories. |
| Analytics data if you Accept analytics cookies (Google tag GT-K5LQ5P5, which measures property G-06F03N225P) | Detailed visit analysis and site improvement | Consent |
| Contact form fields (optional name, required email and message, optional page URL) and email you send to [email protected] | Respond to corrections, source questions and editorial enquiries | Legitimate interests — responding to your enquiry |
We do not run sitewide accounts, newsletter signup forms or checkout on this release. The contact form does not ask for marketing opt-in and does not accept attachments.
Stored only on your device (not sent to Follower)
These items stay in your browser unless you clear them. Follower’s servers do not receive them. UK GDPR “lawful basis” wording does not apply to Follower for this on-device storage alone.
| Data | Purpose |
|---|---|
Theme preference (follower-color-mode) |
Remember day or night display |
Analytics Accept/Reject choice (follower-analytics-consent) |
Remember your analytics preference on this device |
Basic traffic measurement objection (follower-basic-measurement) |
Remember if you objected to Cloudflare aggregate page-view counting on this device |
| Optional tool drafts (calculator, listing template, readiness checklist) when Save on this device is on | Restore your in-progress entries in the same browser |
Providers
| Provider | Role |
|---|---|
| Cloudflare | Hosts and delivers follower.co (including security and related request processing). When basic traffic measurement is enabled and not objected to, Cloudflare Web Analytics also receives aggregate page-view beacons (paths without query strings; Cloudflare’s published materials state it does not use cookies or localStorage for that product and does not fingerprint for analytics display). Cloudflare’s published Customer DPA (v6.4, April 2026) describes EU SCCs with the UK Addendum for UK GDPR transfers: cloudflare.com/cloudflare-customer-dpa/. |
| Google Analytics / Google tag, only after you Accept analytics cookies. Ordinary Analytics processing is covered by Google’s Ads Data Processing Terms. Separate Measurement Controller-Controller Data Protection Terms apply only if the account’s “Google products & services” data-sharing setting is enabled. | |
| Resend | Contact form delivery: messages are emailed to [email protected] from the verified sender [email protected]. Your email is used as Reply-To (not as From) so we can respond to you. |
| SiteGround | Hosts the [email protected] mailbox where inbound editorial mail and contact-form deliveries are received. |
Retention
| Data | Retention |
|---|---|
| Analytics cookies in your browser (when Accept is chosen) | Measured on the candidate consent build: _ga and _ga_06F03N225P expire 400 days (~13 months) after set. This is the browser cookie lifetime only — separate from Google Analytics Admin retention. |
| Google Analytics event-level data (property G-06F03N225P) | 2 months, per Admin → Data Settings → Data Retention (Follower.co property, verified 18 Sep 2026). Applies to event-level data used for Explorations and similar non-aggregated analysis — not a statement that all Analytics data is deleted after two months. |
| Google Analytics user-level data (same property) | 14 months, with Reset user data on new activity enabled (same Admin panel, verified 18 Sep 2026). Separate from the event-level period above. |
| Google Analytics standard aggregated reports | Not deleted by the Data Retention control in the same way as event- and user-level data. Totals and standard reports can remain available beyond those periods. |
| Cloudflare Web Analytics beacon data | Cloudflare retains unsampled beacon detail for about 7 days, then keeps longer-term aggregates (Cloudflare documents roughly 10% sampled long-term storage). Dashboard history is available for about six months. |
| Cloudflare edge HTTP analytics / logging | Separate from the Web Analytics beacon. Depends which Cloudflare products are enabled. Public product defaults include: Pages Functions live log streams not stored; Functions metrics inspectable for about three months; Workers Logs 3 or 7 days if enabled; Logpush retention set by the destination. Free-plan zone analytics also show coarse traffic totals derived from requests at Cloudflare’s edge (including automated traffic unless filtered in the dashboard). |
| On-device preferences and optional tool saves | Until you change them, clear saved data, or clear this site’s data. Follower does not receive them. |
| Routine contact form messages and correspondence | Kept for 12 months from receipt, then deleted from the working SiteGround mailbox for [email protected]. Deletion is an operational practice; automatic mailbox expiry is not claimed unless configured with the mailbox host. This does not promise deletion from provider logs, backups or other systems whose retention has not been verified. |
International transfers
If you Accept analytics, Google may process measurement data outside the UK under the Google Ads Data Processing Terms (and, only if enabled, the Measurement Controller-Controller terms for the “Google products & services” sharing setting).
Cloudflare may process request data internationally under its Customer DPA as published for customers.
Your rights
Under UK data protection law you may have the right to access your personal data, rectify it, erase it, restrict processing, object to processing based on legitimate interests, and receive data in a portable form where that right applies. Where we rely on consent, you may withdraw consent at any time (for Google Analytics, use Reject or Change analytics cookie choice; withdrawal does not affect processing already completed). To object to Cloudflare aggregate traffic measurement in this browser, use Object to basic traffic measurement in the footer (Rejecting Google Analytics also stops that measurement here). Edge request logs needed to deliver the page are separate and cannot be switched off by that control.
To exercise your rights, email [email protected] or use the Contact form and include enough detail for us to find your request.
You can complain to the Information Commissioner’s Office (ICO).
Children
This site is aimed at adults. It is not directed at children.