What the site does not collect
The current site has no accounts, contact forms, comments, payments, advertising, affiliate tracking, analytics, email signup, personalization, or sale of personal information. The local catalog search can place a brand or model query in the page address; web-server request logs may therefore contain that query under the retention rules below. TestedHelmets application code does not set cookies or use local or session browser storage.
Request and security data
Like nearly every website, the network and web server necessarily process request data. That can include an IP address, date and time, requested path, response status and size, referrer, browser user agent, and error or security diagnostics.
Our self-managed OpenResty reverse proxy and nginx origin web server process this data to deliver and secure the site. The edge proxy retains its active access log plus no more than four weekly archives and its active error log plus no more than ten weekly archives. The origin rotates access and error logs daily and retains no more than 14 archived rotations. We use these records to operate, secure, troubleshoot, and measure the basic reliability of the siteānot for advertising profiles.
Email and privacy requests
If you email us, our domain mail-routing service and destination mailbox provider process the message, address, routing metadata, and any information you choose to include. Routine privacy and correction correspondence is retained for up to 12 months after resolution. We may retain a limited correction, security, or legal record longer when necessary to preserve an audit trail, protect the service, or comply with law.
Sharing and sale
We do not sell personal information or share it for cross-context behavioral advertising. Request data is disclosed only to service providers supporting site delivery, security, and email, or when required by law or needed to protect rights and safety.
Your choices and requests
You may ask what personal information we control about you and request correction or deletion, subject to identity verification, legal duties, security needs, and records we must retain. Because this site has no accounts or personal-information forms, we will usually have only short-lived request logs or correspondence you sent us.
Send privacy, access, correction, or deletion requests to [email protected]. Do not email sensitive medical, identity, or payment information.
Children
The site is a general-audience shopping-information service and is not directed to children under 13. We do not knowingly collect personal information from children through the site.
Changes to this policy
We will revise this policy before enabling analytics, accounts, forms, email alerts, personalization, payments, affiliate tracking, a new service provider, or another feature that materially changes data handling. The effective date above identifies this version.