Last updated: 28 September 2026
What we collect and why
Saved pubs (hb-saved-v1)
When you save a pub, its slug is stored in your browser's localStorage under hb-saved-v1. It never leaves your device and is never associated with an account, email address, or any identifier. Clearing your browser data removes it permanently.
UI preferences
Your install-prompt dismissal (hb-install-dismissed) is stored in localStorage. Same scope: functional, device-local, never transmitted.
Location (one-shot, never stored)
If you use “Find pubs near me,” your browser requests your approximate location via the standard navigator.geolocation API. We use it only to sort pubs by distance, in your browser. Your position is never stored, logged or sent to us. On the map, “Use my location” also moves the map to your area, so OpenStreetMap sees roughly where you are from the map tiles your browser loads (see below).
Emails you send us
“Suggest a pub” and “Report a correction” don't store anything on this site. They open your own email app with a message to hello@highburybound.com already filled in, and nothing is sent unless you send it. That address forwards to the inbox of the person who runs Highbury Bound. We use your email and what you wrote only to check the listing and reply, and we delete it if you ask.
Cloudflare server logs
Cloudflare records standard HTTP access logs (IP, browser type, the page address including anything you type into search, status code) as part of delivering the site. We do not export or analyse these beyond incident debugging. Retention is governed by Cloudflare's own policies.
Visit counts
We use Cloudflare Web Analytics to count visits and see which pages are used. A small script tells Cloudflare which page you opened, which site sent you here and how fast it loaded. It sets no cookies and doesn't identify you or follow you across other sites.
What we do not collect
No advertising pixels. No social-media tracking. No accounts or profiles. No biometric or financial data.
Legal basis (UK / EU GDPR)
| Data | Basis |
|---|---|
| localStorage preferences | Legitimate interest · strictly necessary UI state |
| Geolocation | Consent (browser prompt, one-shot, never stored) |
| Emails you send us | Legitimate interest · replying to your message |
| Visit counts (Cloudflare Web Analytics) | Legitimate interest · cookie-free, not used to identify you |
| Cloudflare logs | Legitimate interest · security & abuse |
| Photos and map tiles (Wikimedia, OpenStreetMap) | Legitimate interest · showing pubs and maps |
Who else sees your visit
Some companies handle part of your visit: the services we use to run the site, and the sites your browser loads photos and maps from. Apart from emails you choose to send us, which pass through Cloudflare to Gmail, we never pass them your name or email.
Services we use
- Cloudflare (US-headquartered) — domain registration, DNS, hosting on its worldwide network, email forwarding for hello@, visit counts (Web Analytics) and protection from attacks. Every page request passes through Cloudflare, so it sees your IP address, browser type and the page you asked for. Cloudflare's standard data processing terms apply.
- Google — Gmail receives the emails you send us (hello@ forwards there). Google's privacy policy governs.
- football-data.org — supplies the fixtures and results on the Fixtures page. Our server fetches Arsenal's matches from it and keeps a copy. Your browser never contacts it, and nothing about you is sent.
Sites your browser loads from
Some pages load photos and map tiles directly from these sites. Your browser sends them a normal request: your IP address, your browser type, our site address (not the page you were on) and the file it wants, which shows the pub or map area you're looking at.
- Wikimedia Commons (upload.wikimedia.org, run by the Wikimedia Foundation) — pub photos on pub, city and country pages, the map page, search results and your saved pubs. Wikimedia's privacy policy governs.
- OpenStreetMap (tile.openstreetmap.org, run by the OpenStreetMap Foundation) — the map on the map, city and country pages, and a map picture for any pub without a photo, including on pub pages, search results and your saved pubs. If you press “Use my location” on the map, it moves to your area, so the tiles your browser then loads tell OpenStreetMap roughly where you are. OpenStreetMap's privacy policy governs.
- Cloudflare Web Analytics (static.cloudflareinsights.com) — a small script on every page reports the page address, the site that sent you here and how fast the page loaded. See “Visit counts” above.
Links to other sites, such as Google Maps directions or a pub's own website, aren't contacted until you click them.
Your rights
If you are in the UK, EU, California (CCPA), Canada (PIPEDA), or Australia, you have the right to:
- Access — ask what data we hold about you.
- Deletion — ask us to delete your data.
- Portability — request a copy in a readable format.
- Objection — object to legitimate-interest processing.
- Withdraw consent — for any consent-based processing.
There are no paid tiers, accounts, or profiles, so the practical scope of most requests is limited to any emails you sent us. To exercise any right, email hello@highburybound.com. We will respond within 30 days.
UK residents may also lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
Children
Highbury Bound is not directed at children under 13 (US COPPA) or under 16 (UK/EU). We do not knowingly collect data from minors. If you believe a minor has submitted data, email us and we will delete it promptly.
Updates
We will update this page when data flows change materially. The “Last updated” date at the top reflects the current version. We will not reduce your rights without clear notice.
Contact
Highbury Bound is operated from the United Kingdom. English law governs this notice.