This policy explains what information FindMyDirtBike (findmydirtbike.com), operated by Unwrap Design (“we”, “us”), collects when you use the site and what we do with it. In short, we collect as little as we can.
01What we don’t collect
- There are no accounts, sign-ups, newsletters or forms, so we never ask for your name or email.
- We don’t use analytics, advertising, social-media pixels or any other tracking scripts.
- We don’t sell or share personal information for advertising, and we don’t build profiles of visitors.
- Fonts are served from our own domain, so loading a page doesn’t contact Google or other font providers.
- The bikes you pick to compare live in the page address (for example /compare?bikes=…), not in a cookie or on our servers.
02Viewing a spec’s manual source
Specs cited to an owner’s manual have a source button. Opening one is the only part of the site that handles anything about you directly:
- Human check.The first time you open a source we load Cloudflare Turnstile, a privacy-focused alternative to CAPTCHA. Turnstile runs in your browser and sends Cloudflare technical signals (such as your IP address and browser characteristics) to tell people from bots. We then send the resulting token and your IP address to Cloudflare to confirm it. Turnstile isn’t loaded on any other page. See Cloudflare’s Turnstile privacy addendum.
- Pass cookie. A successful check sets one cookie, fmdb_src_pass, so you aren’t asked again for each source. It is strictly necessary for that feature, lasts 5 minutes, is only sent with source requests, can’t be read by scripts, and holds only an expiry time and a signature tied to your IP address (not the address itself). Your browser’s session storage also keeps that expiry time (fmdb-src-pass-until) until you close the tab.
- Rate limiting. To stop automated bulk extraction, our server counts source requests per IP address. The counts are held in memory for up to an hour and are never written to a database.
We don’t record which specs or sources you looked at.
03Server and delivery logs
Like any website, every request reaches our hosting and content-delivery providers, which see your IP address, browser user agent, the page requested and the time, and may keep short-lived logs of them for security and troubleshooting. Bike photos and manual page images load from Cloudflare R2 storage, so Cloudflare receives the same basic request information when your browser fetches them. We use this information only to run, secure and fix the site.
04Legal bases
Where laws such as the GDPR or UK GDPR apply, we process the information above on the basis of our legitimate interests in operating a secure, reliable site and preventing abuse. The pass cookie is strictly necessary for the feature you asked to use, so it doesn’t need consent.
05Your rights
Depending on where you live, you may have the right to access, correct, delete or restrict use of your personal information, to object to its processing, and to complain to your local data-protection authority. We keep no accounts or profiles, so there’s normally nothing stored that identifies you. You can clear or block cookies in your browser at any time; the only effect is being asked to complete the human check again.
06Children
The site isn’t directed at children under 13, and we don’t knowingly collect their information.
07International transfers
Our providers may process request data in countries other than yours, including the United States. Where required, they rely on recognised safeguards such as standard contractual clauses.
08Changes
If what we collect changes, for example by adding analytics, we’ll update this page first and change the “last updated” date. Also see our Terms of Use.