Short version
We do not collect personal information. We record anonymous, hashed IP addresses only when you click an affiliate link, and we use that data solely for fraud prevention and analytics. We never sell data.
1. Who We Are
OnlyBuyForLife (onlybuyforlife.com) is a community-curated product directory that surfaces long-lasting, high-quality products recommended by the Reddit r/buyitforlife community. We do not operate a store, hold inventory, or process payments.
2. What Data We Collect
| Data | How collected | Purpose | Personally identifiable? |
|---|---|---|---|
| Hashed IP address | When you click an affiliate (eBay) link | Click fraud prevention & anonymous analytics | No |
| Referrer URL | HTTP header on affiliate link click | Understanding traffic sources | No |
| Click timestamp | When you click an affiliate link | Analytics & fraud prevention | No |
| Standard server logs | Every page request | Error monitoring & security | Transient |
IP hashing: Your IP address is immediately converted to a one-way SHA-256 hash before being stored. The original IP address is never saved to our database, making it impossible to reverse back to you.
3. What We Do NOT Collect
- Names, email addresses, or any contact information
- Account credentials — we have no user accounts or login system
- Payment or financial information
- Precise location data
- Search queries or browsing history beyond a single session
- Tracking cookies or persistent identifiers
4. Affiliate Links
This site participates in affiliate programs including the Amazon Associates Program and the eBay Partner Network. When you click certain product links, we may earn a small commission at no extra cost to you.
For eBay links we record an anonymous click event (hashed IP, referrer, timestamp) before redirecting you. This is used solely to measure programme performance and detect fraudulent clicks as required by eBay's partner terms.
Third-party sites you visit through our links are governed by their own privacy policies. We encourage you to review those policies before making a purchase.
5. Data Sharing & Third Parties
We do not sell, rent, or trade any data. We share data only in the following limited circumstances:
- Supabase — our database host stores anonymous click records on our behalf under a data processing agreement.
- Legal requirements — if required by law or valid legal process, we may disclose the limited data we hold.
6. Cookies & Local Storage
We do not set first-party tracking cookies. The only browser storage we use is your theme preference (light/dark), which is stored locally in your browser and never transmitted to our servers.
Third-party scripts (Tailwind CDN, DaisyUI CDN, HTMX, Alpine.js, Phosphor Icons) may set their own cookies or cache assets in your browser in line with their own policies.
7. Data Retention
Anonymous click records (hashed IP, referrer, timestamp) are retained for up to 12 months for analytics purposes and then deleted. Server access logs are rotated and purged within 30 days.
8. Your Rights
Because we do not collect personal data, most data-subject rights (access, rectification, deletion) are not directly applicable. However, if you believe we hold data relating to you, or have any privacy concern, please contact us and we will respond within 30 days.
Residents of the EU/EEA, UK, and California (CCPA) retain all rights afforded under applicable law.
9. Children's Privacy
This site is not directed at children under 13. We do not knowingly collect any information from children.
10. Changes to This Policy
We may update this policy from time to time. When we do, we will update the "Last updated" date at the top of this page. Continued use of the site after changes constitutes acceptance of the revised policy.
11. Contact
If you have questions about this privacy policy or our data practices, please reach out via the About page or by contacting us directly at the email listed there.