Privacy

The short version

No account is required to read anything on Fathom Layer. We set no first-party tracking cookies, run no advertising or social pixels, and never sell or share data with data brokers. We use cookieless page analytics and count searches you explicitly submit, as explained below.

Analytics

We use Vercel Web Analytics and Speed Insights to see which pages are read and how fast they load. These are cookieless and do not build a cross-site profile: Vercel derives a per-day, per-page hash that cannot be traced back to you or reused the next day, and we do not receive your IP address through them. Any content blocker that filters analytics endpoints stops them from loading, with no effect on the site.

Outbound link clicks

When you click a purchase or affiliate link, we record a server-side event: the entity you clicked and a coarse country. For abuse prevention we also store a salted, daily-rotating hash of your IP and user-agent — never the raw values, and nothing that identifies you across days. No name, email or persistent identifier. This is how we measure whether the index is useful; it never affects how an item is scored.

Site searches

When you submit a site search, we count the search phrase and whether it returned any results. This helps us identify missing information. We do not count what you type before submitting, and we do not attach an account or session to the phrase. Phrases that look like contact details or long numbers are excluded. For abuse prevention, we keep a salted hash of the request IP that changes each day in a separate rate-limit counter; the search counts do not contain IPs.

Email updates

If you subscribe, we store your email address, the page where you subscribed and the time of consent so we can send occasional Fathom Layer updates. This processing is based on your consent. Every message will offer a way to unsubscribe, and you can ask us to delete the address at any time. We do not add contact-form addresses to this list.

If you contact us

Messages sent through the contact page, and any work email you submit on a business-enquiry form, are stored so we can reply and are not used for anything else. Ask us to delete them at any time.

Processors we rely on

• Vercel — hosting, edge delivery, and the cookieless analytics above.
• Supabase — the content database and the outbound-click, site-search, newsletter and contact records described above.
• Resend — email contact management and delivery when email updates are activated.

Both process data on our behalf under their own terms. We add no other third parties without updating this page.

Destination sites

Once you leave Fathom Layer through an outbound link, the destination site’s own privacy policy applies (for example, Amazon). We recommend reviewing it.

Your rights & contact

You can ask what we hold about you, ask for it to be corrected or deleted, or object to processing — through the contact page. If you are in the EEA or UK, these are your GDPR rights and our legal basis for the processing above is legitimate interest in running and improving the site.