Skip to content
Sprue & Brush
Legal

Privacy Policy

What is collected, what is not, who else is involved, and how to opt out of each part.

Last updated

The short version

Sprue & Brush does not have user accounts, does not sell data, and does not run advertising networks or retargeting pixels. Three things do involve your data: website analytics, the contact form, and affiliate links to retailers. Each is explained below.

This site is operated by MadGrey LLC (“we”). Questions about anything on this page: contact@sprueandbrush.com.

1. Analytics

We use Google Analytics 4 to understand which pages are read and which recommendations people find useful. It records technical and behavioral data such as pages viewed, approximate geographic region, device and browser type, referring site, and events like clicking an outbound product link.

Google Analytics sets cookies in your browser and processes this data on our behalf; Google acts as a data processor and its own terms apply to that processing. We do not use Analytics to identify individuals, we do not upload personally identifying information to it, and we do not link analytics data to anything else.

How to opt out: block cookies for this site in your browser settings, use a browser or extension that blocks analytics scripts, or install Google’s own Analytics opt-out browser add-on. The site works normally with analytics blocked.

2. The contact form

If you use the contact form, we receive the name, email address and message you enter, delivered to our inbox by email. We use it to reply to you and for nothing else: no mailing list, no marketing, no sharing with third parties.

The form includes basic anti-spam measures: a hidden field that automated scripts fill in and humans do not, a check on how long the form took to complete, and a per-address submission limit. These process the technical request data (including your IP address, held in memory only for the duration of the rate-limit window) and nothing more.

Messages are retained in our email account for as long as is useful for correspondence and records. To have an exchange deleted, ask.

Product links on this site are affiliate links, routed through our own /go/ redirect before reaching the retailer. That redirect records nothing about you personally; it exists so links can be repointed in one place and so we can count which recommendations are used, via the analytics event described above.

Once you arrive at the retailer, you are on their site under their privacy policy, and they typically set a cookie to attribute a purchase to us. We never see your order, your payment details, your address, or what you bought — affiliate reporting shows us aggregate commission, not customers. Amazon’s privacy notice governs what happens on Amazon.

How we are funded, and what it does and does not change, is set out on the affiliate disclosure page.

Cookies

We set no cookies of our own: there are no accounts, no preferences to store and no cart. The cookies present on this site come from Google Analytics, as described above, and are removed if you clear cookies or block them for this domain.

Hosting and server logs

This site is hosted on Vercel’s infrastructure. Like any web host, Vercel processes the technical data necessary to serve a page — IP address, request path, user agent, timestamp — and retains short-term operational logs for reliability and abuse prevention. We do not maintain our own separate access logs.

Children

This site is not directed at children under 13 and we do not knowingly collect information from them. If you believe a child has sent us personal information through the contact form, email us and it will be deleted.

Your rights

Depending on where you live, you may have rights to access, correct, delete or restrict processing of personal information we hold, or to object to it. In practice the only personal information we hold is correspondence you have sent us. To exercise any of these rights, email contact@sprueandbrush.com and we will act on it.

We do not sell personal information and we do not share it for cross-context behavioral advertising.

Changes to this policy

If this policy changes materially — a new analytics provider, a new affiliate network, any new category of data — the “last updated” date at the top of this page changes with it. There is no mailing list to notify, so the date is the record.