Privacy
Last updated:
This site is a folder of static files. There is no server of mine running anywhere, no database, and nothing here that knows who you are. Most of this page is still a list of things that do not happen.
What I collect
Nothing you type, because there is nothing to type into. No accounts, no logins, no comments, no newsletter. Not a single field on this site, so there is nothing of yours for me to store, lose, or sell. What I do get is the anonymous traffic measurement described below, which counts visits rather than people.
Analytics
Google Analytics 4, added on 25 July 2026. It tells me which pages get opened, roughly which country a visit came from, and which product links get clicked. That last one is the whole commercial point: it is how I learn whether a photograph or a sentence earns the click. None of it names you. I never see an email address, an account, or an individual person, and I could not identify you from it if I wanted to.
How it behaves depends on where you are. In the UK, the EEA and Switzerland it runs with storage switched off: nothing is written to your device, and Google receives an anonymous hit that cannot recognise you if you come back tomorrow. Everywhere else it sets Google’s usual analytics cookies, which is what lets it tell a second visit from a new one. Advertising and personalisation storage are switched off everywhere, without exception, because this site runs no advertising and builds no audiences.
Cookies and browser storage
In the UK, the EEA and Switzerland this site sets no cookies at all. Elsewhere the only cookies are Google Analytics’, described above. Nothing else is written to local or session storage anywhere. There is no consent banner here, because in the places where the rules on storage are strictest nothing is stored to consent to, and I would rather solve it that way than interrupt you with a dialog.
Product images load from Amazon
Product photographs are served by Amazon from m.media-amazon.com rather than copied onto this domain, so opening a page with a product on it means your browser fetches those images from Amazon directly. Amazon sees your IP address and your browser’s user agent. It does not see which page you are on: the site sends a referrer policy of strict-origin-when-cross-origin, so what Amazon gets is grillingsetup.com and no path. I never see any of it.
Affiliate links
Links to Amazon carry my associate tag, grillingsetup-20. Following one hands you to Amazon, and Amazon sets a cookie so a purchase can be credited to this site. That happens on their systems under their privacy policy, not mine. What comes back to me is a commission report that counts orders and items. It does not name you, and I never see your order, your payment details, or your address. The money side is on the disclosure page.
Hosting
Firebase Hosting, which is Google. They serve the files and, like every web server, keep request logs that include IP addresses for security and abuse prevention. Those logs are Google’s, held under Google’s terms. The domain’s DNS is at GoDaddy and there is no other proxy or CDN in front of the site. The typefaces are compiled in at build time and served from this domain, so reading a page here does not call Google Fonts.
Contact
There is no contact address here yet. Mail for this domain is still being set up, and I would rather say that than publish an address that quietly throws your message away. It goes up here the day it works. Who I am and how the site is funded is on the about page.