Short version: the register counts pages and keeps a list of people who asked to be told when a record changes. It sets no cookies, runs no advertising network, and loads no third-party analytics. Nothing here can follow you to another website, because nothing here identifies you in the first place.
Etalyn is operated from Malta. Questions about anything on this page, including a request to see or delete what is held, go to [email protected] and are answered within one month, which is the limit the General Data Protection Regulation sets.
One row, written when the page loads. That row is not connected to any other row, because there is no identifier to connect it with.
| Recorded | Example | Why |
|---|---|---|
| Path | /register.html | To know which records are read and which are ignored. |
| Referring site | google.com | The host only, never the full address, which can carry someone else's search terms. Tells us whether anyone is linking to the register. |
| Window width | 390 | To know whether to keep spending time on the phone layout. |
| Time | 2026-08-09 11:04 | To count by day. |
| Search term | ashwagandha | Only what is typed into the register's own search box. This is the single most useful thing the site learns: it says which substances people want graded next. |
| Record opened | R-07 | Which grade records are actually read. |
| Not recorded | Consequence |
|---|---|
| Cookies | None are set, of any kind, so there is no cookie banner and nothing to consent to. |
| localStorage | Nothing is written to your device, so no consent is required under the ePrivacy rules either. |
| IP address | The server sees one, as every server must, and throws it away without writing it down. A short-lived scrambled form is held in memory for a few minutes purely to stop a script hammering the endpoint. |
| Any identifier | Two visits by the same person are two unrelated rows. Visitor counts are therefore impossible here, and page reads are counted instead. |
| Third-party tags | No Google Analytics, no Meta pixel, no advertising network, no tag manager, no session recorder, no heat map. |
| Profiling | There is no automated decision-making and no profiling of any kind. |
If you hand over an address, the register stores the address, the page you were on when you gave it, the moment you gave it, the exact wording you agreed to, and a random token used to take you off again. Nothing else. No name is asked for and none is stored.
The lawful basis is your consent under Article 6(1)(a). You can withdraw it at any time, and withdrawing is as easy as giving it: one click on the link at the foot of any message, or the form below. Addresses are never sold, never shared, never rented, never passed to a supplement seller, and never used to advertise anything. The list is used for one purpose — telling you a record has changed or that a reviewer has been appointed.
Records are kept until you remove yourself, or until the register stops publishing, whichever comes first. You are entitled to access, rectification, erasure, restriction, portability and objection, and to complain to the Information and Data Protection Commissioner in Malta.
In a Postgres database hosted by Neon in Frankfurt, inside the European Union, so nothing crosses a border. The pages themselves are served by Perplexity while the register is at its current address. Fonts are loaded from Google Fonts, which means Google's servers see the request for the font file; that is the one third party in the page and it will be removed by self-hosting the two typefaces.
Paste the removal link you were sent, or the token from the end of it.
Lost the link? Write to [email protected] from the address itself and it will be removed by hand.
This note is versioned like every other document in the register. Rev 1, issued 2026-08-09. If what is collected ever changes, the revision number changes with it.