Who controls your information
An individual sole proprietor trading as GrailTurf is the controller of the personal information described below. Following consultation with legal counsel, this site does not publish the operator's personal name, location or a public business address. For privacy questions: info@grailturf.com.
What we collect
Newsletter signups: the email address you submit through our signup popup, stored in our database.
Outbound click records: when you click a link to a partner operator, we record the partner, the page you were on, and labels describing where/why the link appeared (e.g. homepage, comparison table). We do not record your IP address or browser identifier in this table.
Advertising attribution identifiers: if you arrive from a paid ad, we read campaign parameters from your URL — the utm_* fields, an ad-set id, and Snapchat's click identifier (ScCid) — and hold them in your browser's sessionStorage (not a cookie, and cleared when you close the tab) so that if you later click through to a partner during that same visit, those same identifiers are forwarded to that partner to attribute the resulting visit to the original ad.
Advertising measurement, analytics, and cookies
GrailTurf uses Google Tag Manager (container GTM-NVTN2NTB) to load the Snap Inc. (Snapchat) advertising pixel. This pixel runs on every page you visit, not only at signup or clickout — it automatically reports a page-view event (including the page's URL and general device/browser information) each time you load a page, in addition to the two events we configure ourselves: one when you complete a new newsletter signup, and one when you click through to a partner. As of this policy, no Google Ads or Meta/Facebook tag is configured in this container.
Snap's pixel sets identifiers in cookies on grailturf.com (not set by our own code) and in your browser's local/session storage, and — based on our own direct inspection of the network requests it makes — exchanges a device identifier with Tapad (part of Experian), a company that provides cross-device advertising identity matching. We have confirmed this exchange happens; we have not independently verified, and cannot confirm beyond what is inherent to that stated business purpose, what Tapad does with it afterward. GrailTurf has no direct relationship or contract with Tapad — this occurs as a function of Snap's own pixel. See Snap's own privacy policy for Snap's data practices, including this partner-matching activity.
We do not claim this site sets no tracking cookies — that would only describe our own application code, not what a third-party script loaded on the page (like Snap's) may do. The only cookie GrailTurf's own code sets directly is a functional session cookie for our internal admin login; it is not used for advertising or visitor tracking, and ordinary visitors never receive it.
PostHog analytics is built into our code but is not currently active in production — no analytics events are sent anywhere today. If and when it is turned on, this policy will be updated first, with a named provider, region and purpose.
Your ad choices
You can review and adjust your Snapchat ad settings directly through your Snapchat account, and opt out of interest-based advertising more broadly through the Digital Advertising Alliance (optout.aboutads.info) and the Network Advertising Initiative (optout.networkadvertising.org). These tools are run by Snap and by independent industry bodies, not by GrailTurf — we cannot confirm they cover every identifier described above, and we have not tested them ourselves.
GrailTurf does not currently operate a cookie-consent or do-not-sell/share control on this site. If you ask us (info@grailturf.com) to stop sharing your attribution identifiers with our advertising/affiliate partners, we will stop forwarding them going forward, but we cannot retroactively control data already sent, and we cannot control what Snap or Tapad already hold outside our own systems.
Applicable law — specific open questions, not a blanket statement
GrailTurf's paid advertising currently targets US adults only; we do not knowingly target or monitor visitors located in the EU/UK, which is why we do not currently operate GDPR/UK-GDPR consent tooling — this is a reasoned position based on current targeting, not a certified legal determination.
GrailTurf does not believe it currently meets California's CCPA/CPRA applicability thresholds (annual gross revenue, volume of California residents' data, or share of revenue from data sales) — if that changes, a California-specific notice and opt-out right would need to be added.
GrailTurf's newsletter (once operational) will comply with the US CAN-SPAM Act's consent and opt-out requirements for commercial electronic messages, consistent with GrailTurf's US-only ad targeting described above.
Whether Snap's own advertiser terms impose an additional, specific notice or consent requirement beyond what's described above is a precise open question for Snap's own business/policy team, not something this policy resolves by itself.
Who we share information with
Our hosting and database providers (Vercel and Neon), solely to operate the site.
Snap Inc., via Google Tag Manager, as described above.
The partner operator you click through to, and its advertising/attribution infrastructure, receiving only the attribution identifiers described above — never your email address. Current partners: RillaBox, CollectorCrypt, Goatbox.gg and ClutchPacks; their tracking is operated in part through a marketing partner, Limay Media.
We do not sell personal information, and we do not share your email address with any partner operator.
How long we keep it
We keep newsletter and click records no longer than reasonably needed for the purposes described above. A more specific retention schedule may be published here in the future.
Your choices
No newsletter has been sent yet, and an automated unsubscribe mechanism does not exist yet. To request that your email address be removed, contact info@grailturf.com. We will not claim an automated unsubscribe works until it actually does.
To ask what information we hold about you or to request its deletion, contact info@grailturf.com.
Changes to this policy
We may update this policy as the service or its data practices change. Material changes will update the date this policy was last revised.