This policy explains what MyHatFinder (“we,” “us”) collects when you use myhatfinder.com, why, and the choices you have. We focus on visitors in the United States. Questions go to hello@myhatfinder.com; put “Privacy request” in the subject.
The short version
- We use a first-party cookie to remember your visit and to tell which pages and ads lead to hat sales.
- When you click to a store, the store and the affiliate network get a random code from us, nothing about you.
- We use privacy-minded analytics to see how the site is used, with form fields masked.
- We honor Global Privacy Control and the Your Privacy Choices opt-out.
- We don’t sell your personal information for money.
What we collect
When you visit
We set a first-party cookie named mhf_sid, a random ID that lasts 90 days. Against that ID we store the page you landed on, the referring site, and any campaign tags or ad click IDs in the link you arrived on (for example UTM tags, or click IDs that Google, Microsoft, Meta or TikTok add to ad links). We then remove those tags from your browser’s address bar so they don’t end up in links you share. We don’t store your IP address. We turn it into a one-way code (HMAC-SHA256 with a salt that changes every day) and use that only to filter out bots and fraud.
When you click to a store
We create a new random click code for that click and record it with your session ID, the page, the product and its position on the page. The store link carries that random code to the affiliate network (Awin) as its only tracking value. No campaign names, keywords, page names or personal details are added. When a sale is reported back to us, we match the code to our own records so we know which page or ad led to it.
Analytics
We use PostHog, loaded through our own domain, and Microsoft Clarity to understand how people use the site: pages viewed, Hat Finder steps, clicks and poll votes, and Clarity’s session replays and heatmaps. Text you type into forms is masked. These scripts load only after you start interacting with the page or it has been idle for a few seconds.
When you give us your email
If you sign up for emails, set a price-drop alert, or enter a giveaway (entering also adds you to the MyHatFinder email list, as the Official Rules say), we store your email address, what you signed up for, and any optional details you add (like a hat style or size for a giveaway, or the hat and price for an alert). We use it to send what you asked for. A price-drop alert sends one email when the store lists that hat for less, then it ends. Every email has an unsubscribe link.
Polls and the Hat Finder
We record poll votes and Hat Finder answers with your session ID so we can show results and improve the tool.
Cookies and similar technology
mhf_sid: our session cookie, described above. Secure, HTTP-only, 90 days.mhf_optout: set if you opt out on the Your Privacy Choices page, so we remember your choice.mhf_xp: one letter that keeps the store-button wording you see the same while we test which wording works best. First-party only, never shared, so it isn’t turned off by Global Privacy Control or an opt-out. 90 days.- Analytics cookies or local storage set by PostHog and Microsoft Clarity.
We don’t currently run advertising pixels on the site. If we add them, they will not load for visitors who send Global Privacy Control or who have opted out.
How we use it
To run the site and the Hat Finder; to measure which pages, guides and ads lead to purchases and whether our ad spend pays for itself; to keep bots and fraud out; to send emails you asked for; and to run giveaways under their Official Rules.
We may send conversion information to ad platforms we advertise on (Google, Microsoft, Meta), using the ad click ID from your visit, so they can measure our ads. For people who gave us an email, that can include a hashed (one-way coded) version of the email. This counts as “sharing” for targeted advertising under some state privacy laws, so it switches off if you opt out or send Global Privacy Control.
Who helps us run the site
- Cloudflare: hosting, delivery and security.
- Neon: our database.
- PostHog and Microsoft Clarity: analytics and session replay.
- Resend: sending email.
- Awin: the affiliate network that reports sales from store links.
They process data for us under their own terms and privacy policies. We may also disclose information if the law requires it, to protect our rights or users, or as part of a sale or transfer of the business.
How long we keep it
Session, click, page-view and event records: 13 months, then deleted automatically. Sales records reported by Awin are kept for our accounts. Email addresses: until you unsubscribe or ask us to delete them, except where we must keep giveaway records as the Official Rules describe.
Your choices and rights
- Opt out of sale or sharing on Your Privacy Choices, or turn on Global Privacy Control in your browser. We treat a GPC signal as an opt-out for that browser.
- Unsubscribe from emails with the link in any email.
- Ask to see, correct or delete the personal information we hold about you by emailing hello@myhatfinder.com with “Privacy request” in the subject. Depending on your state, you may have more rights under its privacy law; we’ll respond as that law requires. We won’t treat you differently for using these rights.
- Block or clear cookies in your browser. The site still works; we just can’t connect your visits.
Children
MyHatFinder is for adults. We don’t knowingly collect personal information from children under 13. If you think a child has given us information, email us and we’ll delete it.
Changes
If we change this policy, we’ll update the date at the top. Big changes will be noted on this page.
Contact
hello@myhatfinder.com (subject: “Privacy request”)