Privacy

Last updated October 2026.

The short version

This site sells nothing, holds no account, and asks you for nothing. It loads one analytics vendor, which sets two cookies; it keeps your analytics choice in your own browser; and it writes one line to its own server log when you follow a link to a seller. That line carries no IP address and nothing that could link two clicks to one person. No information about you is sold, and none of it is shared to advertise to you anywhere else. Measurement can be switched off in one click, below.

What this site loads

nadcost.com loads one analytics vendor: Google Analytics 4, operated by Google. It is loaded from googletagmanager.com on every page and reports to google-analytics.com. It tells us which pages are read, how readers arrive, and roughly where in the world they are.

That is the complete list. There is no tag manager, no advertising pixel, no session recorder and no third-party embed. The two typefaces are not a third-party request either: they are downloaded at build time and served from this site’s own domain, so no request leaves for a font host.

Google Analytics runs here with advertising features switched off: Google Consent Mode is set to deny ad_storage, ad_user_data and ad_personalization on every page load. Nothing measured here builds an advertising audience or targets you anywhere else.

Internal review-link clicks also record the review slug, the source page path and the type of link placement, so we can understand which comparisons help readers. Query strings and fragments are not included in those event fields. Your analytics opt-out and Global Privacy Control apply to these events.

What it measures is page views, and a handful of events about this site’s own furniture: whether the comparison box described below opened, and which of its two links was used. Each of those events carries a seller’s name and the name of the slot the link sat in. None of them carries anything about you.

Cookies and other browser storage

Google Analytics sets two cookies, _ga and _ga_<stream>, holding a random identifier for the browser rather than for you. They are the only cookies this site sets. There is no advertising cookie here, and nothing on this site attempts to identify a browser by its fonts, its screen or its hardware.

Two other things are kept in your browser and never sent to us. Your analytics choice lives in local storage under cookie-consent, which is what makes an opt-out stick on the next page you open. And when you follow a link to a seller that pays us nothing, a box can open offering a comparison first; the key nadcost-intercept in session storage holds a count and the list of companies it has already offered, so that it cannot interrupt you more than 3 times in one visit and never offers the same company twice. Session storage is emptied when you close the tab.

Clearing this site’s data in your browser removes all of it. Because the opt-out is stored the same way, clearing it also resets your analytics choice back to the default, which is on.

Turning analytics off

Analytics is on by default and starts when the page loads. This is a US-audience site and we treat it as an opt-out, not an opt-in: a notice tells you it is running, and one click switches it off, here or from the notice. Switching it off also deletes the two cookies already on this device.

Checking your current analytics setting…

We also honor Global Privacy Control. If your browser or an extension sends that signal, analytics is off for you automatically and you need not click anything. Your choice lives in this browser only, so clearing site data resets it and another device is a separate decision.

What the site holds about you

No account, no newsletter, no comment form, no contact form, and no name or email address anywhere. What Google Analytics holds is the anonymous browser-level measurement described above; your analytics choice itself is kept in this browser’s local storage under cookie-consent, which is not a cookie and is never sent to us. The calculator runs entirely in your browser: the numbers you type are never sent anywhere, are not saved, and are gone when you close the tab.

There is no database behind this site and no file of readers to be exported, bought or breached. The pages are built in advance and served as files, and the only thing this site writes at all is the single log line described below.

What happens when you follow a link to a seller

Links to providers leave this site through an internal redirect at /go/. Where a provider pays us, that redirect adds identifiers to the destination URL saying which provider was clicked, which page the click came from and which position on that page. It carries no identifier for you. Where a provider does not, the redirect adds nothing at all.

A paid link goes to the affiliate network that runs the program before it goes to the seller — today that is track.revoffers.com — and you can see that in the address bar as the hop passes through. That network records the click under its own privacy policy, not ours.

Once you arrive, you are on the provider’s site under the provider’s privacy policy, which we do not control and are not responsible for. The affiliate network that records the click may set its own cookie; that is described in the network’s policy, not ours. What we receive back is a count of clicks and conversions, never a person.

Server logs and the click record

The host serving this site keeps ordinary request logs, which include IP addresses, for security and abuse purposes. We do not use them to build profiles and we do not combine them with anything else.

Separately, when you follow a link to a provider we write one line of our own to that log, so that we can tell how many people used a page. It has 9 fields and this is all of them. Which version of that line it is; the time, to the second; which provider you were sent to; whether that provider is a partner of ours; the label of the page the link was on; the position in a list, where the list was ranked; the name of the slot the link sat in; a variant label, where a page runs a test; and the host of the page that referred you — our own domain if you came from a page here, and otherwise the single word “external”.

What that line does not contain is the point of it. No IP address — not hashed, not truncated, not shortened. No browser or device string. No cookie, no session identifier, no visitor hash, and nothing else that could link two clicks to one person. No referring web address beyond the host, so what you searched for, or the page you were reading elsewhere, is never written down. Every field is a fact about the page, not about you. A request that identifies itself as a robot is not recorded at all.

The companies involved

Four, and no others. Google operates the analytics described above and handles what it measures under its own privacy policy. Vercel serves these pages and keeps the request logs described above. The affiliate network behind a paid link records that click, under its policy rather than ours. And the seller you land on takes over entirely once you get there.

There is no advertising network here, no data broker, no customer-data platform, no email or newsletter provider, no comment host, no chat widget, and nobody buying an audience from this site. If that list ever grows, this page names the addition in the same change that ships it.

Why each of these exists, and how long it lasts

Analytics exists so that we can tell which pages are read and how readers found them, which is what decides what gets written next. The click line exists so that a page people use can be told apart from a page nobody does. Your analytics choice is stored so that we can keep it. The interruption counter exists so that the interruption stays capped. There is no other purpose, and nothing collected here is used to make a decision about you.

We keep no archive of our own, so retention here is a question about other people’s schedules rather than ours. The two analytics cookies expire on the schedule Google sets for them, and switching analytics off deletes them immediately. Your stored choice stays in your browser until you clear the site’s data. The interruption counter dies with the tab. The click lines and the request logs age out of the hosting platform’s own log retention, and nothing copies them anywhere before they do.

Where your information is handled

This site is written for readers in the United States, and the services it uses are American: Vercel serves the pages and Google processes what its analytics measures. If you read this from outside the United States, that is where the handling described on this page takes place. This site is not aimed at readers in the European Economic Area or the United Kingdom, and it asks nobody, anywhere, for a name, an address or a payment detail.

Security

Every page is served over HTTPS. There is no login, no password, no order, no payment detail and no customer record on this site, so the usual thing a breach is after does not exist here. That is a design decision rather than a promise about a defense: no method of transmission over the internet is completely secure, and we do not claim otherwise.

Children

This site is not directed to children under 13 and asks nothing of anyone. We do not knowingly collect information from a child. If you believe a child’s information has somehow reached us, write to the address below; there is no account to close and no record here that names anybody, and we will say plainly what we find.

Your privacy rights

Several US states give their residents rights over personal information: to know what is held about you and get a copy of it, to have it corrected, to have it deleted, to take it elsewhere, and to opt out of its sale, of its sharing for cross-context behavioral advertising, and of profiling. California’s is the one most people have heard of, and Colorado, Connecticut, Virginia, Utah, Texas, Oregon and a growing list of others give a similar set. This site treats every reader as though the strongest of them applied, because holding two standards would cost more than holding one.

Two of those rights are already settled here and need no request from anybody. No personal information is sold. And none is shared for cross-context behavioral advertising: Google Analytics runs on this site with ad_storage, ad_user_data and ad_personalization denied on every page load, so nothing measured here can be turned into an advertising audience. Global Privacy Control is honored automatically, which is the opt-out signal those laws name.

Nothing on this site changes because you exercise a right. There is no price here, no account and no membership, so there is nothing to withhold from a reader who opts out, and the pages read identically either way.

How to use them

Write to editor@nadcost.com and say what you want. An authorized agent may write on your behalf.

The honest answer to most access, correction and deletion requests is that there is nothing here to act on: this site holds no account, and the click record is built so that no line in it can be traced to a person. We will tell you that rather than ask you to prove an identity we have no way to match. Where there is something to do, we will do it and say so. If a request is refused and your state’s law gives you an appeal, replying to our answer is how you start one.

The one control that is always yours, immediately and without writing to anyone, is the analytics switch under Turning analytics off.

Changes to this policy

This page changes when the site does. Anything that collects, stores or sends something is described here in the same change that ships it, rather than in a later pass, because a policy that lags the code has quietly gone false. The date at the top of this page records when it was last gone over.

Contact

Write to editor@nadcost.com. See also how this site makes money and the terms of use.