Privacy Policy
Last updated: 16 August 2026
This notice explains what personal data GravelPacker collects when you visit gravelpacker.net, why we collect it, and the rights you have over it. It is written to be checkable: everything described here can be confirmed by opening your browser's developer tools on any page of this site.
The short version: we set no cookies, store nothing on your device, and run no advertising or profiling. We measure traffic in aggregate, and we keep an email address if you choose to give us one.
Who is responsible for your data
The data controller is GravelPacker.
For any privacy question, or to exercise any of the rights below, email hello@modwheel.net. We answer within one month, as the GDPR requires.
What we collect, and on what basis
Analytics
We use Umami, hosted in the European Union, to count page views and to see which articles and links people find useful. Umami sets no cookies and writes nothing to your browser's storage. It does not collect your name, email or any identifier that follows you between sites; it derives a temporary, non-reversible identifier so that a single visit is not counted as several, and it does not retain your IP address.
Alongside page views we record which outbound links are clicked and how far down an article readers get. This tells us which recommendations are read and acted on. It is not tied to an identifiable person and is only ever looked at in aggregate.
Legal basis: legitimate interests (Article 6(1)(f)) — understanding whether our writing is useful. Because the measurement is aggregate and stores nothing on your device, we judge it to have minimal impact on your privacy. You can object at any time using the contact address above.
The mailing list
If you submit the newsletter form we store the email address you give us, and nothing else. We use it only to tell you when a recommendation on the site changes. We do not sell, rent or share the list, and we do not use it to profile you.
Legal basis: your consent (Article 6(1)(a)), given by submitting the form. You can withdraw it at any time by using the unsubscribe link in any email we send, or by emailing us — withdrawing is as easy as subscribing was.
Retention: until you unsubscribe, after which the address is deleted within 30 days. If we have not sent anything for two years we delete the list rather than keep addresses we are not using.
Server logs
Our host records standard technical information when a page is requested — IP address, browser type, the page requested, the time — as every web server does. This is used to keep the site available and to deal with abuse, not to build a picture of you.
Legal basis: legitimate interests (Article 6(1)(f)) — operating and securing the site. Retention: as set by our host, typically 30 days.
What we do not do
- We do not set cookies, or use local or session storage.
- We do not run advertising, retargeting or ad networks.
- We do not profile you or make automated decisions.
- We do not buy or receive data about you from anyone else.
- We do not process special-category data.
- We do not knowingly collect data from children.
Who else touches your data
We use three service providers. Each acts on our instructions under a data processing agreement, and none of them is permitted to use your data for their own purposes.
- Netlify — hosts the site and receives newsletter form submissions. Netlify is based in the United States; transfers are covered by the safeguards in Netlify's data processing addendum, which incorporates the European Commission's Standard Contractual Clauses.
- Umami Cloud — analytics, on the European Union region, so this data does not leave the EU.
- YouTube (Google) — only if you press play on a video. See below.
We will also disclose data where the law requires it. That is the only other circumstance.
Videos and outbound links
Guides that include a video show a still image and a play button, not a YouTube player. The image is served from this site. Nothing is requested from Google, and no YouTube cookie is set, unless you click to play — at which point the player loads from youtube-nocookie.com and Google's own privacy policy applies to what happens next.
Our product links are affiliate links, so we may earn a commission — see the affiliate disclosure. We do not track you across to the retailer or receive anything about you in return. The retailer will set its own cookies on its own site once you arrive, governed by its privacy policy, not ours.
Your rights
If you are in the UK or the European Economic Area you have the right to:
- ask what data we hold about you, and get a copy;
- have inaccurate data corrected;
- have your data deleted;
- restrict how we use it;
- receive the data you gave us in a portable format, or have it sent to someone else;
- object to processing we carry out on the basis of legitimate interests, including our analytics;
- withdraw consent at any time, without affecting anything we did before you withdrew it.
Email hello@modwheel.net to use any of these. They are free to exercise.
If you think we have got something wrong, you can complain to your national data protection authority. In the UK that is the Information Commissioner's Office; in the EEA it is the supervisory authority for the country you live in. We would rather you told us first, but you do not have to.
Changes to this notice
If we start doing something materially different with your data we will update this page and change the date at the top. The practices described here are deliberately narrow, and we intend to keep them that way.