Privacy &
data practices.

Last updated: September 17, 2026.

Published review information

The public collection contains selected comment text, star ratings, abbreviated reviewer names, review dates, a topic category, and a buyer-verification flag derived from the source export. Full surnames, email addresses, mailing addresses, order IDs, tracking fingerprints, private replies, and unpublished media are not imported into the public review database or served as assets.

Optional Google Analytics

Google Analytics is currently disabled. No analytics script or consent storage is used while it is unconfigured. When enabled and accepted, Google may process page visits, device/browser information, IP addresses, and analytics cookie identifiers. Google operates under its own privacy policy. Analytics retention is controlled by the site operator’s Google Analytics property settings.

The site’s page-view integration omits URL queries, fragments, and referrers, does not pass reviewer identities, and disables advertising personalization and Google signals. Search and HTMX filter interactions do not trigger page-view events. The operator must keep Enhanced Measurement disabled in the GA4 web stream to avoid additional automatic events.

When analytics is configured, your allow/decline choice is stored in this browser’s local storage for up to 180 days. Use “Analytics preferences” at the bottom of a page to change it. Declining stops this integration and removes accessible first-party Google Analytics cookies; it does not delete data already received by Google. No public accounts, checkout, or review-submission forms are provided here. Core site assets are served locally; the Google tag is the optional exception after consent.

Search requests and access logs

Review searches are sent to the site in URL query parameters. They can appear in browser history and normal server access logs. Do not enter personal or sensitive information into the review search field.

The web server and deployment infrastructure may process request information such as IP address, request path, time, and response status for operation and security. Retention depends on the hosting configuration; this application does not impose a separate analytics retention system.

External websites

Links to Certified Pep and Vanguard take you to independently hosted websites whose privacy practices may differ. External links are configured not to send referrer information. This site does not embed Vanguard’s reporting interface or receive your searches on that external service.

Source data and site operation

The supplied source review export is kept outside the public site directory. The importer uses an explicit allowlist and file fingerprint to prevent unreviewed entries from being published. Operators should restrict access to source exports, database backups, and server logs.

Future changes

If forms, accounts, analytics, or additional data processing are introduced, this notice must be updated to reflect those changes before the features are enabled. For questions about the original review or customer account, use the contact options on the original Certified Pep website.