Privacy Policy

Last updated: April 26, 2026

Effective date: April 26, 2026

GymScored ("GymScored", "we", "us", or "our") is operated by Hilly Shore Labs. This Privacy Policy explains what information we collect when you visit www.gymscored.com (the "Site"), how we use it, who we share it with, and the rights you have over it.

We've tried to keep this readable. If anything is unclear, email privacy@gymscored.com.

1. Who is the data controller

Hilly Shore Labs is the data controller for personal information processed through the Site. For privacy questions, contact us at privacy@gymscored.com.

2. Information we collect

We collect three categories of information:

2.1 Information you give us

GymScored does not require an account. We don't operate a newsletter, login, or comment system at this time. If you email us directly, we receive whatever you send (your email address, message contents, and any attachments) and use it only to respond.

2.2 Information collected automatically

When you visit the Site, the following is collected automatically:

• Server logs. IP address (truncated where supported by our hosting), user agent, referrer, requested URL, and timestamp. Used for security, abuse prevention, and basic operational debugging. Retained up to 30 days.
• Analytics. Page views, referrer, country (city-level at most), device type, browser, screen size, and clicks on affiliate buttons. Collected via Vercel Analytics, Vercel Speed Insights, and Google Analytics 4 (Measurement ID G-QEH6JF2QT5). We have IP anonymization enabled in GA4. We do not collect precise geolocation, contact details, or behavioral profiles for ads.
• Performance data. Core Web Vitals (LCP, CLS, INP) sampled by Vercel Speed Insights to diagnose slow pages.

2.3 Information from third parties

We do not purchase audience data, run retargeting pixels, or import contact lists. We don't have a Meta pixel, TikTok pixel, X pixel, or LinkedIn Insight tag installed.

3. How we use your information

We use the information above to:

• Operate, maintain, and secure the Site.
• Understand which guides and product comparisons are useful so we can write more of what readers want.
• Measure the performance of affiliate links (which buttons get clicked) so we can tell publishers what's working.
• Detect and prevent fraud, abuse, scraping, and spam.
• Comply with legal obligations.

We do not use this data to build advertising profiles, sell to data brokers, or train external machine-learning models.

4. Legal bases for processing (EU/UK readers)

If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on these legal bases:

• Legitimate interests (Art. 6(1)(f) GDPR) — for analytics, security, performance monitoring, and affiliate-click measurement, balanced against your rights.
• Consent (Art. 6(1)(a) GDPR) — for any non-essential cookies set in jurisdictions that require an opt-in. You may withdraw consent at any time without affecting the lawfulness of prior processing.
• Compliance with legal obligations (Art. 6(1)(c) GDPR) — for tax, audit, and law-enforcement requests.

5. Cookies and similar technologies

The Site uses a small number of cookies and local storage entries:

• Strictly necessary. Session cookies set by our hosting provider (Vercel) for routing and security. Cannot be disabled without breaking the Site.
• Analytics. First-party cookies set by Google Analytics 4 (_ga, _ga_*) and Vercel Analytics. These help us count visits and measure clicks. Lifespan: up to 24 months.
• Affiliate attribution. When you click an Amazon link, Amazon sets its own cookies on amazon.com under its own privacy policy — not on gymscored.com. We never see that cookie data.

You can block or delete cookies at any time in your browser settings. If you opt out of GA4 cookies via Google's browser opt-out add-on, the Site will continue to function normally.

6. Affiliate links and outbound clicks

GymScored is a member of the Amazon Associates program (affiliate tag gymscored-20) and may participate in other affiliate programs over time. When you click an outbound product link on the Site, you leave GymScored and arrive on the merchant's site. From that moment on, the merchant's privacy policy governs what they collect.

We log the click event itself (which button, on which page, when) so we can report on link performance. We do not see, store, or have access to your purchase, payment details, shipping address, or order history.

7. Sharing and disclosure

We share information only with:

• Service providers. Vercel (hosting, analytics, Speed Insights) and Google (Analytics 4). These providers process data on our behalf under their own privacy and security commitments.
• Legal authorities. If required by law, court order, or to protect our rights, property, or safety, or those of our readers.
• Business transfers. If GymScored is sold, merged, or restructured, anonymized analytics may transfer to the successor under the same terms as this policy.

We do not sell your personal information.

8. International data transfers

Our service providers operate globally. If you access the Site from outside the United States, your data may be transferred to, stored, and processed in the United States or other countries. Where required, our providers rely on Standard Contractual Clauses or equivalent safeguards under GDPR Chapter V.

9. Data retention

• Server logs: up to 30 days.
• Analytics events (GA4): up to 14 months.
• Affiliate-click events: up to 14 months.
• Email correspondence: as long as needed to respond and for a reasonable record afterwards (typically 24 months).

10. Your rights

EU / UK / Swiss readers (GDPR)

You have the right to:

• Access the personal data we hold about you.
• Request rectification of inaccurate data.
• Request erasure ("right to be forgotten").
• Restrict or object to processing.
• Data portability where applicable.
• Withdraw consent at any time.
• Lodge a complaint with your local supervisory authority.

California readers (CCPA / CPRA)

You have the right to:

• Know what personal information we collect, use, and disclose.
• Delete personal information we collected from you (subject to exceptions).
• Correct inaccurate personal information.
• Opt out of "sale" or "sharing" of personal information — although we do not sell or share for cross-context behavioral advertising.
• Limit use of sensitive personal information — we do not collect sensitive personal information as defined by CPRA.
• Non-discrimination for exercising your rights.

How to exercise your rights

Email privacy@gymscored.com from the address you used to contact us, or with enough information for us to locate the records (such as the IP address you visited from on a specific date). We respond within 30 days. There is no charge.

11. Do Not Track and Global Privacy Control

Browsers and extensions can send a Do Not Track (DNT) header or a Global Privacy Control (GPC) signal. We honor GPC as an opt-out of any "sale" or "sharing" of personal information within the meaning of CPRA, even though we do not currently engage in either.

12. Children's privacy

The Site is intended for adults shopping for home gym equipment. We do not knowingly collect personal information from children under 16. If you believe a child has provided personal information, email privacy@gymscored.com and we will delete it promptly.

13. Security

Traffic to the Site is encrypted in transit via HTTPS. Our hosting provider applies industry-standard physical and network safeguards. No internet transmission or storage system is 100% secure, so we cannot guarantee absolute security.

14. Third-party links

The Site links to third-party retailers, manufacturers, and reference sources. Their privacy practices are governed by their own policies. We encourage you to read those policies before sharing personal information with them.

15. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be highlighted on the home page or in a prominent banner for at least 14 days.

16. Contact

Hilly Shore Labs
Operator of GymScored
Email: privacy@gymscored.com
General inquiries: hello@gymscored.com