Privacy Policy
Draft — not yet in effect. This document is pending owner and legal review. Items marked [ColaXpress to confirm] are unresolved and must be completed before this policy takes effect.
Scope
This policy describes how the ColaXpress website handles information when you visit or contact us. We aim to collect as little as possible and to keep earning links, navigation, and reading fully functional even when analytics, cookies, or consent are unavailable. The sections below describe each data flow separately, stating what we know and marking what is not yet finalized.
Hosting and server access logs
The site is hosted by Hostinger. Like most web hosts, the server may keep standard access logs (for example your IP address, the page requested, timestamp, and browser user-agent) for security and reliability. These logs are handled by the hosting provider under its own terms. The retention period for these logs is [ColaXpress to confirm — server log retention period].
Contact form
Direct messaging through the site is currently disabled while a verified contact system is built, so the contact page cannot receive messages and collects no data through a form at this time. When a contact form is enabled it will be handled by a third-party form processor; the specific processor, exactly how it stores and handles what you submit, and how long it retains submissions are [ColaXpress to confirm — contact form processor and its data handling] and [ColaXpress to confirm — contact form retention period], and this section will be completed before any form goes live.
Analytics
We use consent-aware, no-personally-identifiable-information analytics — Google Analytics 4 — to understand which guides are useful. Analytics is off by default: the Google Analytics tag loads only after you choose “Accept analytics” in the on-page notice. If you decline, or make no choice, no analytics tag loads and no analytics data is collected. When you accept, we record which pages you view and which affiliate calls-to-action you see or click, sending only non-identifying details about the link — its network, merchant, product slug, placement, creative version, and the destination website’s domain — never the full affiliate URL or ClickRef. We never send your name, email, form text, URL parameters that contain personal data, or any stable visitor identifier.
Google Fonts
Pages load typefaces from Google's font CDN (fonts.googleapis.com and fonts.gstatic.com). To serve those fonts, Google receives standard request metadata such as your IP address. This happens as part of loading the page's styling and is governed by Google's own privacy terms.
Embedded video
Pages that embed video use YouTube's privacy-enhanced (no-cookie) mode, which is designed to avoid setting tracking cookies until you interact with the player. If you play or otherwise interact with an embedded video, that interaction involves YouTube and is subject to YouTube's and Google's privacy terms.
Affiliate networks
Some pages include affiliate links. When an affiliate link is active and you click it, you are taken directly to the merchant — VIVOSUN through the Awin network, or Amazon when that program is enabled — and the merchant may set its own cookies to attribute a possible commission. ColaXpress does not attach any personal data to those links and does not cloak them or route you through hidden redirects. How our links are labeled and disclosed is described in our Affiliate Disclosure.
Cookies and consent
Non-essential storage — anything beyond what is strictly required to serve the page — is gated on your consent decision, and earning links keep working regardless of what you choose. On your first visit a notice offers “Accept analytics” or “Decline”; the default is no analytics until you accept. Your choice is remembered only in your own browser’s local storage — it is not sent to us or any third party — so the notice does not reappear; clearing your browser storage resets it. The jurisdictions in which the site is served are [ColaXpress to confirm — served jurisdictions].
Your choices and privacy requests
You can browse ColaXpress without submitting any personal information, decline non-essential storage, and choose what, if anything, to include when you contact us. For privacy requests, use [ColaXpress to confirm — privacy contact].
Who is responsible and where this applies
The legal entity responsible for this site and the governing jurisdiction for privacy purposes are [ColaXpress to confirm — legal entity name and governing jurisdiction].
Changes and effective date
We may update this policy as our data practices are finalized; material changes will be reflected in the "last updated" date above. This policy takes effect on [ColaXpress to confirm — effective date]. If you believe something here is inaccurate, please see our Corrections Policy.