Privacy policy

Status and operator

SharpAndLean is operated by Thornhale. This privacy policy is a working draft and requires legal review, an effective date, operator address and jurisdiction-specific rights language before public launch.

Information you provide

If you join the newsletter, the site stores your email address, consent status, submission source and relevant timestamps. If you submit a community review, it stores the display name, rating, review text and moderation status. Do not include health records or other sensitive personal information. Messages sent by email contain the information you choose to provide.

Account and administrator sign-in is provided by Clerk. Clerk processes authentication identifiers and session information under its own privacy terms. Editorial records, newsletter entries and moderated submissions are stored in Supabase.

Technical information

The site may receive standard request data such as IP-derived information, browser type, device information, requested pages and timestamps. Short-lived hashed request identifiers may be used to prevent form abuse. Vercel hosts the application and Vercel Analytics may provide aggregated usage measurements. Sentry may process error and performance telemetry when enabled; the site configuration disables default collection of personally identifiable information, but diagnostic events can still contain technical context.

Cookies and similar technology

Authentication requires cookies or similar storage to maintain a secure session. Affiliate networks including Amazon, ClickBank, Awin and Gurumedia may use cookies or comparable attribution tools after you follow a marked commercial link. Those services decide how their technology operates on their destinations.

Why information is used

To provide requested subscriptions and site features.
To authenticate authorised editors and protect the CMS.
To moderate community submissions and prevent abuse.
To diagnose faults, measure site performance and improve editorial pages.
To meet legal obligations and enforce site terms.

Data is shared with service providers only as needed to operate the site, including Clerk, Supabase, Vercel and Sentry when configured. Affiliate destinations receive information when you choose to visit them. SharpAndLean does not present personal data as a product for sale.

Final retention periods must be approved before launch. The intended approach is to keep account and submission data only while it serves the stated purpose, legal requirement or security need, then delete or anonymise it.

Your choices

You may unsubscribe using the method included in a delivered newsletter once email delivery is active. Requests to access, correct or delete information should use the privacy contact listed on the contact page. The final policy will describe applicable regional rights and appeal routes after legal review.

Children and changes

The site is not designed to collect information from children. The production policy must state the applicable minimum age. Material policy changes will receive a new effective date and, where required, additional notice.