Verified Beauty Data

Privacy / What we collect

Privacy policy

This site is a reference library, not a service you sign into. There are no accounts, no newsletter, and no forms that ask who you are. What follows is the complete list of what is collected anyway — by us, and by the third parties whose code runs on these pages.

01 / Directly

What we collect ourselves

Nothing you type. We do not run accounts, logins, comment forms, or a mailing list, and we never ask for your name, address, or payment details. The one interactive tool on the site — the INCI Decoder — runs entirely in your browser: the ingredient list you paste is matched against a lookup table that was downloaded with the page, and it is never transmitted to us or to anyone else.

Nothing stored on our own servers. These pages are static files served from a web host. Like nearly every web server, it processes your IP address and browser user-agent in order to send you the page, and may keep short-lived operational logs for security and debugging. We do not build profiles from those logs, and we do not sell or share them.

If you email us, we keep that email so we can reply to it and, where it reports a data error, so we can record the fix in the corrections log. We do not add correspondents to any marketing list, because we do not have one.

02 / Third parties

Whose code runs on these pages

Three third parties can set cookies or receive data when you load a page here. This is the complete list.

  1. Google Analytics 4

    Measures aggregate traffic — which pages are read, roughly where readers come from, and which outbound links get clicked. It sets cookies and processes a truncated IP address. We use it to decide what to write next; we cannot identify you from it. Google's own description of this data is in their partner-sites notice. You can opt out of Google Analytics entirely with Google's browser add-on, and you can switch off our analytics for your own device permanently by visiting verifiedbeautydata.com/?noga=1.

  2. Google AdSense

    The AdSense script is present on some pages so that Google can review the site, but no advertising is being served here yet. When it is, third-party vendors, including Google, use cookies to serve ads based on your prior visits to this and other websites, and Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the Internet. You may opt out of personalised advertising by visiting Google Ads Settings, or opt out of a third-party vendor's use of cookies for personalised advertising at aboutads.info/choices. Google's full list of ad-technology providers is published here.

  3. Amazon Associates

    When you click a "buy" link on this site, you pass through our own /go/ redirect and land on Amazon with a referral tag attached. Amazon then sets its own cookies and tells us, in aggregate and long after the fact, how many clicks and orders that tag produced. We never learn which individual reader bought what. See the affiliate disclosure for how this affects — and does not affect — what we publish.

Web fonts are loaded from Google Fonts, which receives your IP address in order to serve the font files. No other external scripts, pixels, or trackers run on this site: no Facebook pixel, no TikTok pixel, no session recording, no A/B testing tools, no chat widgets.

03 / Cookies

Cookies and similar technologies

Cookies are small files a site stores in your browser. Web beacons (also called pixel tags) are tiny transparent images that let a server record that a page was opened. Both are used on this site by the third parties listed above — Google Analytics for measurement, Google AdSense for advertising, Amazon for affiliate attribution.

We set exactly one cookie-like value of our own, and only if you ask for it: visiting /?noga=1 stores a flag in your browser's local storage that switches off analytics on that device for good. Visiting /?noga=0 removes it. It contains no identifier.

Every browser lets you block or delete cookies — usually under Settings → Privacy. Blocking them will not break anything on this site.

04 / Your rights

GDPR, UK GDPR and CCPA

If you are in the EU, EEA or UK: our lawful basis for the operational server logs described above is legitimate interest in running a secure website. This site does not currently serve personalised advertising. Before it does, visitors in the EEA and UK will be asked for consent through a Google-certified consent management platform, and will be able to change or withdraw that choice at any time from the control it provides. You have the right to request access to, correction of, or deletion of personal data we hold about you, to object to processing, and to lodge a complaint with your national data protection authority. Analytics can be switched off for your device today, permanently, using the link in section 02.

If you are in California: we do not sell personal information as that term is defined by the CCPA, and we do not share it for cross-context behavioural advertising other than through the Google advertising cookies described above, which you can opt out of using the links in section 02. You may request disclosure or deletion of personal information by emailing us.

Children. This site is written for adults and is not directed to children under 13. We do not knowingly collect personal information from children.

05 / Contact

Questions about any of this

Email hello@verifiedbeautydata.com with "privacy" in the subject line and a person will read it. The site is operated by Erin Rose, who is responsible for the data described on this page. More about who that is on the author page.

If this policy changes materially we will update the date at the top of the page and summarise what changed here.