Privacy and cookies

The short version: this site sets no cookies, keeps nothing on your device, and holds no personal data about you at all unless you sign up for email alerts. If you do, it holds your email address and what you asked to watch, and nothing else.

Cookies

There are none. This site sets no cookies, reads no cookies, and writes nothing to localStorage, sessionStorage or any other browser storage. That is why there is no cookie banner: there is nothing to ask you about. The one piece of state the site keeps — which filters you have applied on a results page — lives in the address bar, in the part of the URL after the #, and disappears when you close the tab.

Measurement

Visitor numbers come from Cloudflare Web Analytics, which is cookieless: it counts page views without setting anything on your device, without an identifier that follows you between visits, and without sharing anything with an advertising network. There are no social buttons and no tag managers, and no third-party JavaScript beyond the cookieless Cloudflare analytics beacon and one other exception: this site carries Google's AdSense site-verification script while the owner's advertising application is under review. No ad units are placed and no advert runs on this site today. If that ever changes, this page changes first, and any cookie consent an actual ad would need is put in place before a single ad shows.

Maps

The maps draw their tiles from OpenStreetMap's servers. Loading an image from someone else's server means that server sees your IP address, the page you asked for it from, and your browser's user-agent string — that is how the web works, and it is true of the map tiles on every site that uses them. Nothing else on this site is loaded from anywhere but this site's own domain, and a map only loads once you scroll one into view. If you never scroll a map into view, nothing on this site hands your IP address to anybody but our own host.

Server logs

The site is hosted on Cloudflare Pages, and the alert signups are handled by a small Cloudflare Worker. Cloudflare processes requests on our behalf and holds its own short-term operational logs, as any host does. We do not run our own analytics on those logs, and nothing that could identify you is written to any log we keep — the signup service is deliberately built so that request logging is off and neither email addresses nor IP addresses appear in it.

Email alerts

If you sign up for alerts, we store your email address and the criteria you chose — an area, a price, a street name, a bedroom count, or one listing you asked to watch — plus the date you signed up and the date you confirmed. That is the whole record, and there is one of it per address: signing up again replaces the criteria you gave before rather than adding a second subscription. No name, no phone number, no address, no profile, no tracking of what you look at on the site, and nothing bought from or shared with anybody.

To stop the signup form being used to flood somebody with confirmation email, the service counts signup attempts from each internet connection and refuses more than five in an hour. What it stores for that is a scrambled (hashed) form of your IP address and a number, never the address itself, and the counter deletes itself an hour later. Every attempt is counted, including ones that go no further.

Signup is double opt-in. When you submit the form we send one email to the address you gave, with a link in it. Until you click that link nothing else is sent, and if you never click it the half-finished signup deletes itself after seven days. That is both the law working properly and the only way to stop somebody signing up an address that is not theirs.

The lawful basis is your consent, given by ticking the box and confirming by email. What you consent to is exactly this, which is the wording stored alongside your signup: “Property alerts and occasional updates from Outer Hebrides Property, including messages from a site sponsor. Unsubscribe any time.” Every email we send carries a one-click unsubscribe link that needs no login and no reply. Using it removes your address and your criteria from our store — not a flag set on a record we keep, an actual deletion. You can also email hello@outerhebridesproperty.co.uk and ask us to remove you, correct something, or tell you what we hold, and we will do it.

Alert emails are sent through Resend, an email delivery service, which processes your address for the purpose of delivering the message. Delivering email requires handing an address to something that can deliver email; it is not used for anything else.

Your rights

Under UK GDPR you can ask for a copy of what we hold about you, ask for it corrected, ask for it deleted, or withdraw consent at any time. Given how little there is — one email address and a few search criteria — all four are the same email to hello@outerhebridesproperty.co.uk and take a day at most. If you think we have handled your data badly you can complain to the Information Commissioner's Office at ico.org.uk.

Changes

If this site ever adds something that needs a cookie, browser storage, or any data beyond what is described above, this page changes first and the change is described here plainly. It will not be slipped into a banner.

Last updated 31 August 2026 · questions to hello@outerhebridesproperty.co.uk.