Skip to content

Privacy policy

Last updated 20 October 2026. Draft: review with an adviser before launch.

HeistNotes is operated by [Owner legal name], Ireland ("we"). Contact: hello@heistnotes.com.

What we collect

  • Usage analytics. We use Cloudflare Web Analytics, which is cookieless and doesn't track you across sites. We also record simple product events (for example "tool used" or "share opened") to see which tools work. These events contain no IP address, no user ID and no cookie identifier. They're stored by page, rolled up into daily counts, and the individual events are deleted after 30 days.
  • Server logs. Our hosting provider (Cloudflare) processes IP addresses briefly to deliver the site and protect it from abuse.
  • Newsletter. If you subscribe to the daily digest, we store your email address, when you signed up and when you confirmed (double opt-in). Every email has a one-click unsubscribe; after unsubscribing we keep only a record that you opted out, and we'll delete it entirely on request. The sign-up form uses Cloudflare Turnstile to block bots, which checks your browser without advertising cookies.
  • Share links. When you share a Wanted Poster or tool result, we store the text on the card (alias, stars, charges, bounty or pick) under a short link. Never your photo.
  • Advertising. News and guide pages carry ads served by Google AdSense. In the EEA and UK, Google's certified consent message asks before any personalised ad or advertising cookie is used; decline and you get non-personalised ads. Google's processing is described in its advertising privacy notice. You can change your choice from the link in the page footer of any ad.

What we don't collect

No advertising cookies, no fingerprinting, no account. Photos used in the Wanted Poster Maker are processed entirely in your browser and are never uploaded to us.

Legal bases

Analytics and logs: legitimate interests (running and improving a free site). Newsletter and personalised advertising: consent. Non-personalised advertising: legitimate interests (funding a free site).

Processors

  • Cloudflare (hosting, CDN, analytics, database, Turnstile bot protection).
  • Resend (sending the confirmation and daily digest emails).
  • Google (AdSense advertising on news and guide pages, subject to your consent in the EEA and UK).

Your rights

You can ask for access, correction or deletion of your data, or object to processing, by emailing us. You can also complain to the Data Protection Commission (dataprotection.ie).

Changes

If we add advertising we will add a consent tool first and update this page and the cookie policy.