Privacy

Apaxir runs UGC Brands, a weekly list of beauty brands that are running ads. This page sets out what the list holds about a brand, where it came from, and how a brand gets itself taken off.

What we collect about brands

Everything on the list is already published by the brand or by the advertising platform:

• Brand name and domain. The store name and the domain taken from the link in the ad.
• Public advertising data from the Meta Ad Library. Which ads are active in a given country and how many started in the last seven days. The Ad Library is open to anyone.
• A public business email from the brand's own site. We check that the domain accepts mail, and we record whether the address is a brand address or a personal one.
• A public Instagram handle where the brand publishes one.
• A store classification. An automated pass sorts each store into brand, retailer or dropship, along with the shopping platform it runs on and how many products it lists.

We do not buy contact lists, we do not guess or generate addresses, and we collect nothing that sits behind a login. We hold no special category data and nothing about consumers.

Legal basis

Where a published business address belongs to a named person it is personal data under the UK GDPR and the EU GDPR. Our legal basis is legitimate interest — Article 6(1)(f). The interest is connecting creators with brands that are currently advertising and have published a business contact on their own site.

We have weighed that interest against the rights of the people concerned. The data is limited to a business context, the brand published it itself, and any entry comes out on request. If you think that balance is wrong in your case, tell us and we will act on it rather than argue.

Getting a brand removed

A brand can write to us and ask to be taken off. We remove it from the next issue and from the stored list. No reason is required and we will not ask for one. We keep only the fact that the brand asked to be excluded, so it does not reappear later.

The same address handles any request to see, correct or object to what we hold, and you can complain to your national data protection authority if our answer does not satisfy you. The contact address is shown in the footer below.

Payments and subscriber data

Card payments are handled by WayForPay, our payment provider. The card details you enter when you pay are processed by WayForPay under its own privacy policy. We do not store card details.

If you join a free Telegram channel, Telegram holds your account information under its own terms. We can see the subscriber count; we do not export or store the member list.

The contact form

The form on the UGC Brands page collects four things: your name, which is optional, your email address, the topic you pick from the list, and your message. We also record the page you sent it from, so we know which part of the site prompted it.

The submission is turned into an email and delivered through Resend, our transactional email provider, to our own mailbox. Your address is set as the reply-to so we can answer you directly. We use what you send only to reply to you and to act on what you asked for — we do not add you to a mailing list and we do not pass it to anyone else.

Ask us at hello@apaxir.com and we delete the message thread from our mailbox.

The form carries two anti-spam checks that need no data about you: a field hidden from people, and a measure of how long you spent filling the form in. Neither is stored.

The order form

The order form on the UGC Brands page collects your email address, your name, your Telegram username if you choose to give it, and the plan and country you pick. It does not ask for card details; payment is handled by WayForPay as described above.

We use these details to contact you about payment, to send you the files you pay for and, if you gave a Telegram username, to send you the channel link. The request reaches our mailbox as an email through Resend, the same way as the contact form, and carries the same two anti-spam checks.

We keep these details while your subscription is active and delete them once it ends, or earlier if you ask us at hello@apaxir.com. If you send an order request but never pay, we delete these details 90 days after the request.

Cookies, analytics and the chat widget

This site sets no cookies at all. We checked a fresh browser profile against the live site — loading a page, opening the chat, sending messages and closing it again — and no cookie was set at any point, by us or by anything we load. Session storage stays empty, no IndexedDB database is created, and there is no advertising pixel and no third-party script that profiles you across sites.

Four external services are contacted when a page loads. Google Fonts serves the two typefaces. cdn.apaxir.com serves the chat widget script and api.apaxir.com serves that widget its configuration. The fourth is Cloudflare Web Analytics, described in the next paragraph.

Cloudflare Web Analytics is the traffic and performance analytics built into our hosting provider, Cloudflare. A small script loaded from static.cloudflareinsights.com sends a report for each page view back to apaxir.com. It sets no cookies and writes nothing to your browser's storage. We inspected the report it sends: it contains the address of the page you opened, the page you came from, your browser and operating system with their versions, a random identifier for that one page load, how much memory the page's scripts used, and loading timings such as how long the page took to respond and to first appear on screen. Like any request on the internet, it reaches Cloudflare from your IP address.

The chat widget stores nothing until you send your first message. At that point it writes two values into your browser's local storage:

• sirio_visitor_id — a random identifier for this browser, so a returning visitor is recognised as the same person. It is not tied to a name or an email unless you give us one in the conversation.
• sirio_conv_<bot id> — a random identifier for the conversation, so the thread continues if you reload the page.

Both are random identifiers, both live only in your browser, and neither has an expiry date — local storage keeps them until you clear the site's data, which you can do at any time from your browser settings. What you type into the chat is sent to our servers and processed so the assistant can answer. Please do not put payment details or anything else sensitive into the chat.

Changes

If what we collect or why we collect it changes, this page changes with it and the date at the top moves.