Privacy & Cookies

What we record

• Server logs. Our web server logs each request: IP address, browser details, the page requested, the page you came from and the time. These logs are deleted after about two weeks.
• Link clicks. When you click or tap a link, the page tells our server which link it was, which page it was on and which part of the page. That request is logged with your IP address and browser details. We keep an archive of these records to see which links people use, and it has no set deletion date.
• Google Analytics. We use Google Analytics 4 to count visits and see how pages are used. It uses cookies, and Google receives information about your visit, such as the pages you view, the links you click, your device and your approximate location. How Google uses this data.
• Cloudflare. The site is delivered through Cloudflare, which handles each request, including your IP address, to deliver and protect the site. Cloudflare also adds a small analytics script to each page that reports page views and load times to Cloudflare. It can set a security cookie.

Text you enter in the ingredient decoder is read in your browser and is not sent to us.

Amazon links

As an Amazon Associate, SPF List earns from qualifying purchases. If you follow a link to Amazon, third parties including Amazon and other advertisers may serve content and advertisements, collect information directly from you, and place or recognize cookies on your browser. Amazon's own privacy notice covers what happens there.

Your choices

• You can block or delete cookies in your browser settings.
• You can install Google's opt-out add-on to stop Google Analytics from recording your visits.
• Turning off JavaScript stops Google Analytics, Cloudflare's analytics script and our link-click records. Server logs still apply, because they are part of serving the page.