Congrats, It's BlankPrivacy Policy

Legal

PRIVACY
POLICY

1. Introduction

This is a satirical website. We take your privacy seriously, but we also take making fun of internet advertising seriously. This policy explains what personal data we collect, why, and your rights over it. It applies to all visitors regardless of location.

2. What Data We Collect

  • Email address — when you make a purchase, used to send your magic link and maintain your account.
  • Payment information — processed entirely by Stripe. We never see or store your card number.
  • Purchase record — amount paid, date, and Stripe session/customer IDs, stored in our database.
  • IP address & device/browser info — collected by Google Analytics when you visit (requires your consent).
  • Cookies — for authentication, analytics, and advertising. See our Cookie Policy.

3. Why We Collect It & Legal Basis (GDPR)

  • To fulfil your purchase (lawful basis: performance of a contract) — we use your email to send the magic link and maintain your access to the blank page.
  • To understand how visitors use our site (lawful basis: legitimate interests / consent) — Google Analytics collects anonymised usage data. We only activate analytics cookies after you give consent via the cookie banner.
  • To show advertising (lawful basis: consent) — ad network cookies are only set after you consent. If you have paid to remove ads, no ad network cookies are set.
  • To comply with legal obligations (lawful basis: legal obligation) — we retain purchase records as required by tax and accounting law.

4. Data Retention

  • Purchase records — retained for 7 years to meet tax and accounting obligations, then deleted.
  • Auth account — retained as long as you have an account. Deleted immediately upon a valid deletion request.
  • Analytics data — retained by Google Analytics for 14 months (default setting), then automatically deleted.
  • Rate-limit records — deleted automatically after 2 hours.

5. Who We Share It With

Data transfers to the USA are covered by Standard Contractual Clauses or equivalent transfer mechanisms where required by GDPR.

6. Your Rights (GDPR / UK GDPR)

If you are located in the EU or UK, you have the right to:

  • Access — request a copy of the personal data we hold about you.
  • Rectification — ask us to correct inaccurate data.
  • Erasure — request deletion of your personal data.
  • Restriction — ask us to restrict processing of your data.
  • Portability — receive your data in a structured, machine-readable format.
  • Object — object to processing based on legitimate interests.
  • Withdraw consent — withdraw cookie or analytics consent at any time without affecting prior processing.

To exercise any of these rights, visit our Privacy Rights page or email privacy@trulyrandom.co.

You also have the right to lodge a complaint with your local data protection authority — for example, the ICO in the UK (ico.org.uk) or your national EU DPA.

7. California Residents (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, use, disclose, or share.
  • Delete your personal information (subject to certain exceptions).
  • Opt out of the "sharing" of your personal information for cross-context behavioural advertising. To opt out, decline advertising cookies via our cookie banner.
  • Non-discrimination — we will not discriminate against you for exercising these rights.

To make a CCPA request, email privacy@trulyrandom.co with subject line "CCPA Request". We do not sell personal information as defined under CCPA.

8. Do Not Track

We do not currently respond to browser Do Not Track (DNT) signals. You can control analytics and advertising cookies through our cookie consent banner.

9. Contact

Privacy enquiries: privacy@trulyrandom.co

Last updated: June 2026