Your Data, Handled the Way We Rank Products: Honestly.

Gavler runs no ads, sells no data, and embeds no third-party trackers. This policy describes — in plain English — exactly what we collect, why we collect it, and what we will never do with it. If our practices ever change, this page changes first.

Last updated: July 30, 2026

The Short Version

—We collect only what the product needs: your account details, your votes, your duel plays, and — if you opt in — your email for the newsletter.
—Analytics cookies are off by default. Google Analytics sets cookies only if you accept the cookie banner; Vercel Analytics is cookieless and aggregate either way.
—We never sell or share your personal information, run zero ad networks, and count retail-link clicks without any user identifiers attached.
—You can export or delete your data anytime — email us at hello@gavler.com or delete your account directly.

1. Who We Are

Gavler (gavler.com) is a community-ranked product discovery platform. We publish rankings, reviews, and product news, and our community votes on the best products in every category. For the purposes of data protection law, Gavler is the controller of the personal data described in this policy. You can reach us anytime at hello@gavler.com.

2. What We Collect

Account Data

When you create an account, our authentication provider Clerk collects your email address, username, and password credentials, and sets session cookies so you stay signed in. These cookies are strictly necessary — signing in doesn't work without them — and they are used only for authentication, never for tracking.

Activity on Gavler

If you use these features while signed in, we store the data that makes them work:

—Votes. Which product you voted for on each list, and optionally whether you own the product or want it. Votes are public on your profile by design — accountability is part of the ranking system.
—Duel plays and streaks. Your picks in the daily duel and your streak history.
—In-app notifications. Alerts about lists you voted in — rank changes, new contenders, and price drops — and whether you've read them.
—Price-drop alert emails. If you mark a product as one you want, we may email you when its price drops. Every alert email includes an unsubscribe link.

If you subscribe to the Gavler newsletter, we store your email address and your subscription status. Emails are sent through Resend, our email processor. Every email we send includes a one-click unsubscribe link, and unsubscribing takes effect immediately.

What We Deliberately Don't Collect

When you click an outbound retail link, we count the click — which product, which retailer, which page — with no user identifiers attached: no user ID, no IP address, no browser fingerprint. We built the instrumentation this way on purpose, so that measuring our own revenue funnel never requires tracking you.

3. Cookies & Browser Storage

Essential Cookies

Clerk's session cookies keep you signed in. They are strictly necessary, always on, and used only for authentication. We run no advertising cookies and no third-party marketing pixels.

Browser localStorage

Your browser's localStorage (not cookies) holds a few conveniences: your recently-viewed products — which stay on your device and are never sent to our servers — your cookie-consent choice, and which UI prompts you've dismissed. Clearing your browser storage clears all of it.

Vercel Analytics

We use Vercel Analytics to understand aggregate traffic — which pages are read, roughly where visitors come from. It is cookieless, does not build individual profiles, and does no cross-site tracking. It runs unless you choose "Essential only" in the cookie banner or your browser sends a Global Privacy Control (GPC) signal — either keeps it off.

Google Analytics

We also use Google Analytics under Google Consent Mode v2, with analytics storage denied by default: no _gacookies are set and Google receives only anonymous, modeled pings unless you accept in the cookie banner. You can change your mind anytime via the "Cookie Preferences" link in the footer, and GPC signals keep analytics cookies off regardless.

4. Affiliate Links & Retailers

Some retailer links on Gavler are affiliate links (for example, Amazon Associates). If you click through to a retailer's site, that retailer may set its own cookies on its own siteto attribute the referral. What happens on a retailer's site is governed by that retailer's privacy policy, not this one. As explained in our methodology, affiliate commissions never influence rankings — and as explained above, we count these clicks without knowing who you are.

5. Who Processes Data on Our Behalf

We don't sell or share your data with anyone. A small set of infrastructure providers process data strictly on our instructions to run the site:

—Vercel — hosting and cookieless, aggregate analytics.
—Neon — the Postgres database where votes, duels, notifications, and newsletter subscriptions live.
—Clerk — authentication and account management.
—Resend — sending newsletter and price-drop alert emails.
—Google — Google Analytics, gated behind the cookie banner: cookies only with your consent, anonymous modeled pings otherwise.
—Anthropic — AI processing of public product-news content for our news feed. Your personal data is not sent to Anthropic.

6. Legal Bases (GDPR / UK GDPR)

Contract

Account data, votes, duels, and notifications are processed because they're necessary to provide the service you signed up for.

Consent

The newsletter and Google Analytics cookies are consent-based: you opt in explicitly, and you can withdraw anytime — via the unsubscribe link in every email, or the Cookie Preferences link in the footer.

Legitimate Interest

Cookieless aggregate analytics and security (fraud and abuse prevention) rest on our legitimate interest in running a functioning, honest site.

7. Your Rights & Choices

—Access & export. Email hello@gavler.com and we'll send you a copy of the data we hold about you.
—Deletion.Delete your account through your Clerk account settings, or email us and we'll do it for you. Deleting your account removes your votes and activity.
—Correction & objection. You can ask us to correct inaccurate data or object to processing based on legitimate interest.
—California (CCPA/CPRA). Gavler does not sell or share personal information as those terms are defined by the CPRA, and we honor Global Privacy Control signals by disabling analytics. California residents may exercise their access, deletion, and correction rights via the contacts above; we will never discriminate against you for doing so.

8. Children

Gavler is not directed at children under 13, and we do not knowingly collect personal information from them. If you believe a child has created an account, contact us and we will delete it.

9. Changes to This Policy

If we change how we handle your data, we will update this page and revise the "Last updated" date at the top. Material changes — anything that expands what we collect or how we use it — will be announced prominently, not buried.

10. Contact

Questions, requests, or complaints about privacy: hello@gavler.com. If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.