Privacy Policy
What we collect (very little), what we do with it (very boring), and how to see or delete it.
BundleStack is a review site, not a data business. This page inventories exactly what we collect when you visit — which is little — and what we do with it, which is less. Inventory last updated October 9, 2026, when Google Analytics was added to the shelf.
Email signups
There is nowhere on this site to hand us an email address: no sign-up field, no list, and no newsletter to unsubscribe from. Until September 2026 a sign-up box sat at the foot of these pages; it was never connected to anything, so it stored nothing and sent nothing, and it has been removed rather than left on the shelf implying a list that never existed.
Analytics
Two counters sit on this shelf. Cloudflare, which delivers the site, runs Web Analytics: cookieless, totals only — page views, referring sites, rough geography. The second is Google Analytics 4, supplied by Google LLC and, in Europe, Google Ireland Ltd.
Line by line, GA4 records the pages you view, the site that sent you, your approximate location to city and country level, your device and browser type, and how long your visit runs. It does not log or store your IP address, and it tells one browser from another only by a random ID. Its advertising features, Google signals and ad personalisation stay switched off, so none of this feeds advertising, and none of it is sold. We look at it in bulk to decide what to write and update next.
Whether it runs depends on where you are. When your device's time zone puts you in Europe (EEA, UK or Switzerland), a banner asks first and nothing reaches Google unless you choose Accept. Outside Europe it's on by default, with an off switch you can use whenever you like. If your browser sends Global Privacy Control, we read that as a no. The choice is saved in your browser's local storage as analytics-consent rather than in a cookie. Open cookie settings to bring the banner back and change it.
Google explains its own use of the data in the Google Privacy Policy, and its Google Analytics opt-out add-on switches GA off across every site you visit.
What we never do
We do not sell, rent, or trade personal data. Not to advertisers, not to partners, not in anonymized bulk. No exceptions on this shelf.
Affiliate links
Some outbound links on this site are referral links, routed through our /go/ redirects. When you click one, the destination company may set its own cookies to credit the referral, under its own privacy policy — that tracking happens on their side of the door, not ours. The full mechanics are itemized in our affiliate disclosure.
Cookies
Two cookies come from us, both Google Analytics: _ga and _ga_<ID>. They hold that random ID, last up to two years, appear only after analytics is allowed, and are deleted if you decline later. Cloudflare's counter sets none. No advertising pixels, no cross-site trackers stapled to your browser.
Data requests
Want to know what we hold about you, or want it deleted? Email [email protected] from the address in question. Given how little we collect, the honest answer will usually be nothing at all — but you're entitled to ask, and we'll answer within 30 days.
If we materially change this policy, we'll update this page and say so plainly at the top — the same way we'd flag a renewal-price change on any other shelf.