Legal
Privacy
Last updated 31 August 2026
The short version
No account is required to read anything on Fathom Layer. We set no first-party tracking cookies, run no advertising or social pixels, and never sell or share data with data brokers. The only measurement in your browser is cookieless, aggregate analytics that cannot identify you.
Analytics
We use Vercel Web Analytics and Speed Insights to see which pages are read and how fast they load. These are cookieless and do not build a cross-site profile: Vercel derives a per-day, per-page hash that cannot be traced back to you or reused the next day, and we do not receive your IP address through them. Any content blocker that filters analytics endpoints stops them from loading, with no effect on the site.
Outbound link clicks
When you click a purchase or affiliate link, we record a server-side event: the entity you clicked and a coarse country. For abuse prevention we also store a salted, daily-rotating hash of your IP and user-agent — never the raw values, and nothing that identifies you across days. No name, email or persistent identifier. This is how we measure whether the index is useful; it never affects how an item is scored.
If you contact us
Messages sent through the contact page, and any work email you submit on a business-enquiry form, are stored so we can reply and are not used for anything else. Ask us to delete them at any time.
Processors we rely on
- Vercel — hosting, edge delivery, and the cookieless analytics above.
- Supabase — the content database and the outbound-click and contact records described above.
Both process data on our behalf under their own terms. We add no other third parties without updating this page.
Destination sites
Once you leave Fathom Layer through an outbound link, the destination site’s own privacy policy applies (for example, Amazon). We recommend reviewing it.
Your rights & contact
You can ask what we hold about you, ask for it to be corrected or deleted, or object to processing — through the contact page. If you are in the EEA or UK, these are your GDPR rights and our legal basis for the processing above is legitimate interest in running and improving the site.
