Privacy.
Short version: we collect very little and we never sell it.
What we collect
Nothing personally identifying unless you give it to us: your email if you create an account, buy a membership or sign up for digests. Our own page-view counting is cookieless. It stores a hash of your IP address and browser that rotates every day, never the raw IP, so it can count visits without being able to follow you over time. We don't run session-replay tools, and we never sell or share personal data.
Outside services
We use Google Analytics to see which pages are useful, and Awin to run our affiliate program, so partners who send us members can be paid. Both set their own cookies.
Payments
Memberships are paid through Stripe. Your card details go straight to Stripe and never touch our servers. We keep your email, your membership dates and Stripe's customer reference so we can grant access and handle renewals.
Feedback rate-limiting
When you submit feedback on a contact (👍/👎 or a comment), we hash your IP address with a daily-rotating salt and store only the hash. This lets us block obvious abuse without ever storing the raw IP. The hash cannot be reversed and rotates daily.
Email opt-in
If you sign up for saved-search digests, we store your email and your saved filter preferences. That's it. We never sell or share email lists. Unsubscribe anytime via a one-click link in any digest email.
Public contact data
The contact records in Heard come from publicly-available sources. If you're listed in Heard and want your record corrected or removed, use the contact form and we'll process it within 7 days.
Server logs
Our hosting provider (Railway) records standard HTTP request logs, including IP addresses, for operational purposes. These are retained no longer than 30 days.