Privacy Policy

Who we are

Tunnel Report (tunnelreport.com) reviews VPNs and password managers. The site is run by Strand and Stone LLC, a New Mexico limited liability company ("we," "us"). If you have questions about this policy, email robert@strandandstonellc.com.

What we collect

The site has no accounts, no forms and no email signup, so we don't ask you for your name, email or other contact details.

We do collect some data automatically when you visit:

• Google Analytics 4 (GA4).GA4 records the pages you view, the links you click (including clicks on partner links, which we log as an "affiliate_click" event), your approximate location, browser, device type, operating system, referring site and when you visited. GA4 processes your IP address to estimate your location. It does not log or store IP addresses.
• Vercel.Our host, Vercel, keeps standard server logs, which include your IP address, the requested URL, the time of the request, your browser's user agent and the referrer. Vercel uses these logs to run and secure the site. We also use Vercel Web Analytics, which counts page views and collects basic device and referrer data without using cookies.

Cookies

GA4 sets first-party cookies, such as _ga and _ga_<ID>, to tell repeat visits apart and measure how the site is used. We don't use any other advertising cookies.

Affiliate links and partner cookies

Some links on the site are tracked affiliate or referral links. They go to NordVPN (go.nordvpn.net), NordPass (go.nordpass.io), Proton (go.getproton.me), Surfshark (get.surfshark.net), PureVPN (billing.purevpn.com) and hide.me. If you click one and buy something, we may earn a commission. After you click, the partner or its tracking network may set its own cookies and collect data under its own privacy policy. We don't control that data, so please read the partner's policy.

How we use the data

We use this data to:

• see which pages and reviews people read and which partner links they click
• keep the site running, fix problems and protect it from abuse
• get credit for affiliate commissions

No sale of personal information and no targeted ads

We don't sell your personal information, and we don't share it for cross-context behavioral (targeted) advertising. The site shows no ads. GA4's Google signals and ads personalization features are turned off.

Your choices

• Google Analytics opt-out:install Google's opt-out browser add-on (https://tools.google.com/dlpage/gaoptout).
• Block cookies: you can block or delete cookies in your browser settings. The site still works without them.
• Global Privacy Control (GPC):we treat a GPC signal as a request to opt out of the sale or sharing of personal information. Since we don't sell or share it anyway, nothing changes in how we handle your data.

How long we keep data

GA4 data is kept for 14 months and then deleted. Vercel keeps server logs for its standard retention period.

Your US state privacy rights

Depending on the state you live in, you may have the right to ask what personal information we have about you, to correct it, to delete it, or to opt out of its sale or sharing. To make a request, email robert@strandandstonellc.com. We'll respond within 45 days. We may need some information from you to verify your request. Because we don't collect names or emails, we may not be able to link analytics data to you. We won't treat you differently for using these rights.

Children

The site is meant for a US audience and is not directed at children under 13. We don't knowingly collect personal information from children under 13. If you think a child has given us personal information, email us and we'll delete it.

Security

We use the security that comes with our hosting provider, including HTTPS on every page. No method of sending or storing data online is completely secure.

Changes to this policy

If we change this policy, we'll post the new version on this page and update the effective date.

Contact

Strand and Stone LLC, robert@strandandstonellc.com