Legal · privacy

Privacy Policy

What we record, what we don't, and why the price ledger works without knowing who you are.

The short version

MyPenFlow has no accounts, no sign-up forms, and no advertising trackers. We never sell or share data with brokers — there is nothing personal to sell. The little we do record exists to keep the price ledger honest, and it is listed in full below.

Analytics without cookies

We count page views on our server with Cloudflare Workers Analytics Engine, without cookies. Each recorded view contains the page path, the country the request came from, the referring site's hostname, and an anonymous visitor number derived from a one-way hash that rotates every day at midnight UTC — so it cannot identify you across days, let alone across sites. Your raw IP address is never stored. Aggregates are kept for about three months.

Most catalogue pages are served as static files that never reach our server, so we also load Cloudflare Web Analytics — a small browser script that reports the page you loaded, the page that referred you, your browser type, your country and how long the page took to load. It sets no cookies and uses no local storage, and Cloudflare states that it does not fingerprint visitors. Blocking it with a content blocker does not affect the site.

We also use self-hosted Umami in Frankfurt to count page views and events: retailer offer clicks (including retailer, product and placement where available), other external links, compare additions, and search submissions by query-length range, not the search text. It is cookieless, stores no identifier on your device, and uses a visitor hash that rotates daily. Blocking the script does not affect the site.

Outbound retailer clicks

Retailer links in the price tables on pen, ink, paper and deal pages route through /go/so we can count clicks, spot abuse, and check that our links still work. Each click records which offer, retailer, and product the link belonged to, your selected destination country, your browser's user-agent string, and a truncated one-way hash of your IP address — enough to spot abuse, not enough to identify you. Click records are marked for purge after 90 days. Links elsewhere on the site (for example a shop's own page) go straight to the shop and are not included in those server-side click records.

Preferences stay on your device

Choosing a destination country sets a first-party cookie namedmypenflow_country (kept for one year) so landed-price maths remembers where you ship to. The compare tray lives in your browser's localStorage and never leaves it. Neither is shared with anyone.

Where our policy ends

Once you click through to a retailer, their privacy policy applies. If you follow one of our Amazon links, Amazon may set its own cookies to attribute a purchase to us — that is how we earn the commission described in our affiliate disclosure.

Questions

Write to hello@mypenflow.comand a human will answer.