What this site measures,
and what it doesn't.

Who is responsible

Bouletteproof Ltd, Port Louis, Mauritius, is the controller for data processed through this site. Contact: the contact page.

Audience measurement that runs without asking

The site runs our own first-party measurement (Hikr) in cookieless mode. It stores nothing on your device: no cookie, no local storage, no fingerprint. Page views and clicks are recorded against a server-side identifier that rotates daily and is not linked to your name or account. We use this to count visits and see which pages are read.

When you follow a link from this site to one of our own sites (hikrlink.com, hikrl.ink, hikr.io), the link carries a click identifier in the URL so that the visit counts as one journey across our sites rather than two unrelated ones. It is not shared with any third party.

Our position is that first-party, device-storage-free audience measurement falls under the audience-measurement exemption to consent rules. That is a stance we are building toward and can show the architecture for; it is not a legal certification. If you disagree, tell us.

What only runs if you accept

The banner asks before anything else loads. If you accept, the site sends page views to Google Analytics 4 through a server we run, and may forward conversion events to advertising platforms (Meta, LinkedIn) from that server. If you decline, none of this runs. No Google, Meta or LinkedIn script is ever loaded in your browser either way.

Your choice is stored in your browser's local storage under the key bp_consent. That is the only thing we store on your device, and it exists so we don't ask you again. Change it any time with "Cookie settings" in the footer.

What you send us

If you use the contact form, we keep what you submit (name, email, message) to reply to you and to follow up on that conversation. We do not add you to a mailing list you did not ask for.

Where data lives

Our infrastructure runs on Google Cloud. Measurement data for this site is processed in Google Cloud regions in Australia and Singapore. Applicable law includes the Mauritius Data Protection Act 2017 and, for visitors in the EU and UK, the GDPR and UK GDPR.

Your rights

You can ask what we hold about you, ask us to correct or delete it, or object to processing. For the cookieless measurement there is nothing tied to you to return; for contact-form data, write to us and we will act on it. You may also complain to the Mauritius Data Protection Office or your local authority.

Changes

When the measurement setup changes, this page changes with it, and the date at the top moves. The consent and measurement code is inline in every page and readable with view-source; the description here is meant to match it.