Privacy Policy
How Skin Candid
handles personal information.
This Privacy Policy explains what personal data Skin Candid collects, why it is used, which service providers receive it and which choices and rights you have.
Skin Candid is a reading website. There are no accounts, comments, newsletters or advertising. We collect only what is needed to run, secure and improve the site.
Effective date: 1 November 2026
At a glance
The short version.
No accounts or forms
You can read every page without giving us your name or email. The only form on the site is the search box, which is not stored as personal data by us.
Analytics only with your choice
We use Google Analytics and Microsoft Clarity to understand how pages are used. Their cookies are set only after you select Accept in the cookie banner.
No advertising or selling of data
We do not run advertising, we do not sell personal data and we do not share it for cross-context behavioral advertising.
Email when you write to us
If you email us, we use your message and address to reply and keep a reasonable record of the conversation.
Do not send health records
Skin Candid does not give personal medical advice. Please do not email photos of your skin, medical records or identification documents.
You stay in control
You can change your cookie choice at any time and ask to access, correct or delete your data by writing to hi@skincandid.com.
Who controls the data
Data controller and contact.
Privacy contact
Email: hi@skincandid.com
Use the subject line “Privacy Request” so your message reaches the right place quickly.
Information we collect
What we collect depends on how you use the site.
Technical and security data
When you load a page, our hosting provider automatically processes your IP address, browser and device type, requested pages, time of the request and referring page in server and security logs.
Analytics data (after you accept)
Google Analytics records pages viewed, approximate location, device and browser details, how you arrived and how long you stayed, using a pseudonymous identifier stored in a cookie.
Session and heatmap data (after you accept)
Microsoft Clarity records how pages are used, such as clicks, scrolling and mouse movement, to create heatmaps and session replays. Text you type into fields is masked by default.
Limited signals before you choose
Until you accept, both tools run in a restricted mode without analytics cookies. Google may still receive limited, cookieless signals, and Clarity may record a page view without linking it to earlier visits.
Emails you send
Your name, email address, message and anything you choose to include, for example in a correction request or a commercial enquiry.
Font and asset requests
Some fonts are loaded from Google Fonts, which means your browser sends your IP address and browser details to Google when a page loads.
Service providers
Who receives personal data, and why.
Hostinger (hosting and content delivery)
Hosts the website, delivers it through its content delivery network and keeps server and security logs. Hostinger privacy policy
Google Analytics (audience measurement)
Measures site use after you accept analytics cookies. Installed through Google Site Kit for WordPress. Advertising features are not used. Google privacy policy
Microsoft Clarity (usability analytics)
Creates heatmaps and session replays after you accept analytics cookies, so we can find confusing or broken parts of pages. Microsoft privacy statement
Google Fonts (typography)
Delivers some of the fonts used on the site. Google Fonts privacy information
Email provider
Receives and stores messages sent to hi@skincandid.com so that we can reply.
Advisers and authorities
Lawyers, accountants or authorities, only where disclosure is necessary, required by law or needed to establish or defend legal claims.
Links to sources, retailers or our social media profiles (Instagram, TikTok, Pinterest) take you to websites with their own privacy policies. We do not embed their content or tracking on our pages.
Why we use data, and on what basis
Each purpose has a defined legal basis.
Purposes
- Running and securing the site: delivering pages, preventing abuse, fixing errors
- Answering you: editorial questions, corrections, privacy requests and business enquiries
- Improving content: understanding which pages help readers and where pages are hard to use
- Legal duties: keeping records required by law and handling legal claims
Legal bases
- Consent: analytics and session-recording cookies (Google Analytics, Microsoft Clarity)
- Legitimate interests: hosting, security logs, fonts, and replying to messages you send
- Contract or pre-contract steps: handling a business enquiry you start
- Legal obligation and legal claims: records we must keep or need to defend our rights
Cookies and your choice
Analytics cookies wait for your answer.
On your first visit, a banner offers Accept and Reject with equal prominence. Rejecting does not limit your access to any page. Your choice is stored on your device for six months.
If you accept, Google Analytics sets the _ga and _ga_<ID> cookies (up to 2 years) and Microsoft Clarity sets cookies such as _clck and _clsk, and may use Microsoft cookies such as MUID. If you reject or later withdraw consent, Clarity deletes its cookies for this site.
Health information
Please do not send sensitive data.
Skin Candid is an educational website, not a diagnosis or consultation service. Please do not send skin photos, medical records, detailed health histories or identification documents.
If we receive sensitive information we did not ask for, we delete it or keep only what is strictly necessary to reply safely or meet a legal duty.
International transfers
Some providers process data outside your country.
Google and Microsoft may process data in the United States and other countries. Both participate in the EU-U.S. Data Privacy Framework and also offer the European Commission’s standard contractual clauses. Hostinger may process data in the regions where its servers and content delivery network operate.
Where data leaves your country, we rely on an adequacy decision, standard contractual clauses or another safeguard recognized by the law that applies to you.
Retention
We keep data only as long as it is needed.
Server and security logs
Kept for the period set by our hosting provider for security and troubleshooting, then deleted.
Analytics data
Kept for the retention period configured in Google Analytics and Microsoft Clarity, then deleted or aggregated by those providers.
Emails
Kept while a conversation is active and for up to two years afterward, unless a longer period is needed for a legal reason.
Correction records
Kept for as long as the related page is published, so we can document what changed and why.
Business records
Kept for as long as accounting and tax laws require.
Your cookie choice
Stored on your device for six months, after which the banner asks again.
Security
Reasonable safeguards, honestly described.
The site uses encrypted connections (HTTPS), restricted administrator access, account security measures, regular software updates and backups.
No website or email service can guarantee absolute security. If a breach affects your rights, we will act and notify you and the authorities where the law requires.
Your rights
You can ask us what we hold, and much more.
Depending on where you live, you can
- Ask whether we process your data and get a copy
- Correct inaccurate or incomplete data
- Ask us to delete data
- Restrict or object to certain processing
- Receive data you gave us in a portable format
- Withdraw consent at any time, without affecting earlier lawful processing
- Learn which recipients your data was shared with
How to make a request
- Email hi@skincandid.com with the subject “Privacy Request”
- Describe what you are asking for
- Do not send identification documents unless we ask
- We may ask for reasonable details to confirm it is you
- We reply within the time the law requires, normally within 30 days
You can complain to the data protection authority in the country where you live or work, or where the controller is established. In Türkiye this is the Personal Data Protection Authority (KVKK); in the European Union, your national data protection authority; in the United Kingdom, the Information Commissioner’s Office. We would appreciate the chance to resolve your concern first.
Children
Skin Candid is written for adults.
The site is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, contact us and we will delete it.
Changes to this policy
We update this page when our practices change.
If we add a new tool, purpose or service provider, we update this policy and the effective date at the top before the change takes effect. Significant changes are highlighted on this page.