The short version: I keep what you type into a form and use it for the one thing you typed it for. Just reading gets you counted by the two traffic counters named below. Nothing here is sold. That is the whole list, and it is not a long list.
If you subscribe: your email address, the page you subscribed from, and the time. That is the whole record. It is used to send you email about new guides and tests. Nothing else. It is never sold, rented, or shared, and every email has an unsubscribe link. You can also reply "unsubscribe" or write to hello@ownedandtested.com and you are off the list.
If you use the contact form: what you type (name, email, topic, message) so I can reply. Field reports you send may be published inside a guide, with credit, if you say that is okay when you send them.
If you share your carry: the photos you upload and what you type: the list, the note, the title, the kind of carry, your name or handle, your email, and an optional location. The record also keeps the time and the country your connection came from. The photos and details sit in a private queue until I look at them. Nothing is published automatically. If the carry is published, the photos are copied to this site with camera and location data stripped and credited to the name you gave. Your email is kept only to tell you it is up, to ask before cropping, and to handle takedown requests. If you tick the newsletter box on the form, the subscribe rules above apply to that too. If it is not published, the whole submission is deleted. If I never get to it, it deletes itself after 90 days without waiting for me. Ask for a published carry to come down at any time and it will.
If you rate a carry: your score, and a salted hash of your connection address and browser string so the same device cannot vote twice. The hash cannot be turned back into an address, it expires after a year, and nothing else about you is kept.
Just reading: no ad networks, no tracking pixels beyond what's named here. Cloudflare Web Analytics counts page views with a cookie-free beacon: no identifier, nothing that follows you between visits. Google Analytics runs too. It sets cookies, and Google's privacy policy covers what Google does with that data. The site is served by Cloudflare, which keeps standard server logs (IP address, request, time) to run and protect the site. The typefaces are served from this site, not from Google Fonts. A font server does not need your IP address to hand over a lowercase g. Apart from Cloudflare's own beacon, the Google Analytics script is the only outside request a page makes.
If you click a "check price" link: the page tells this site the page, the spot on the page, the retailer, the site that sent you here, and whether the screen is phone-sized. No IP address, cookie, or identifier is stored with that count. I learn that somebody on a phone clicked a price link on a knife page. I do not learn who, and I could not find out if I tried.
Affiliate links: the retailer that link lands on, Amazon or another, sets its own cookies under its own privacy policy. That is how the commission gets tracked. Details on the disclosure page.
Your rights: ask what is stored about you, or ask for it deleted, at hello@ownedandtested.com. Effective September 2026. Changes get noted here.