Privacy policy

Last updated 21 October 2026

Build Your Setup helps you find desk gear. There are no accounts, no sign-up and nothing to buy here, so it never needs to know who you are. This page sets out the little it does collect, who else sees it, and what you can do about it.

Who we are

Build Your Setup (buildyoursetup.com) is run by Anyro from Australia. Build Your Setup decides what this site collects and why, which makes it the “controller” under European and UK data protection law. Use the contact form for anything on this page.

What we collect, and why

Your answers

The finder keeps your answers in your browser and in the page address (the part after the #), so you can share a result by sharing the link. That part of the address never leaves your browser: our server doesn't receive it, and Google Analytics records the page, not your answers.

Your country and language

When a page loads, Vercel, our host, works out your country from your IP address. We keep only the two-letter country code, in a cookie called bys-c, to pick the right Amazon store and currency for you. A second cookie, bys-al, keeps the language your browser asks for, so pages open in your language. Neither holds anything that identifies you.

Choices you make

If you pick a language or a currency, your browser remembers it in local storage (bys-lang and bys-cur). It stays on your device. We never receive it.

Visits, through Google Analytics

We use Google Analytics 4 to learn which pages are useful, where visitors come from and which products they click through to, so we can make the site better. It loads once the page is ready, and only on buildyoursetup.com.

It records the pages you view, how far you scroll, the links you follow to other sites, the site that sent you, your device, browser, language and screen size, and a rough location (country or city) that Google works out from your IP address. When you click a link to Amazon, it also records the store, the product's ID, the page you were on and the link's address.

In the European Economic Area, the UK and Switzerland, analytics cookies are off. Google Analytics then sets and reads no cookies; it sends basic pings that carry no ID, so one visit can't be tied to the next. Google decides which region you are in from your IP address. Everywhere else, it sets two first-party cookies, _ga and _ga_7D2XL1JFKF, which tell repeat visits from the same browser apart.

Advertising features are off for everyone: ad storage, ad user data and ad personalisation are all denied. We don't use analytics for ads, and we don't combine it with any other data. Google says Analytics 4 doesn't log or store IP addresses. Detailed analytics data is deleted at the end of the retention period set in our account, which is between two and fourteen months; report totals aren't tied to anyone. Google explains its own use of this data at policies.google.com/technologies/partner-sites.

To opt out, install Google's Analytics opt-out add-on, block or clear cookies in your browser settings, or use a content blocker. The site works the same without analytics.

Serving the site

Vercel hosts the site. Like any web server, it receives your IP address, your browser details and the page you asked for with every request, and keeps short-lived logs to keep the site running and safe. Fonts come from our own domain, so a page never calls Google Fonts.

Amazon

Product photos load straight from Amazon's image servers, so Amazon receives those requests, including your IP address and browser details, as it would on any site that shows its images. When you click a link to Amazon, you leave Build Your Setup. Amazon then knows you came from us and sets its own cookies under Amazon's privacy notice. Its reports tell us which products were ordered through our links and what we earned, never who ordered them.

Amazon's program terms ask us to say this plainly: as part of the Associates program, Amazon and other third parties may serve content, collect information directly from visitors, and place or recognise cookies in visitors' browsers. On this site today, that means the product photos from Amazon's servers, which set no cookies, and Amazon's own cookies once you click through to Amazon. No Amazon scripts run on our pages.

Exchange rates

Our server fetches currency rates once a day from open.er-api.com, with exchangeratesapi.io as a backup. Your browser never contacts either of them.

The contact form

If you write to us, we receive your email address, the topic and your message, and your name if you give it. Resend, an email delivery service, passes the message to our inbox. We use your details only to reply, and keep them only as long as the conversation needs. To stop abuse, the server counts messages from each IP address for ten minutes, in memory; the address isn't stored or sent with your message.

Cookies and local storage

This is everything the site stores in your browser.

Blocking our cookies breaks nothing: the site guesses your country from your time zone instead and uses that country's main language. Amazon's cookies are set on Amazon's own sites, once you click through, not on ours.

Legal bases

If you are in the EEA, the UK or Switzerland, these are the grounds we rely on:

• Country and language cookies, and serving the site: our legitimate interest in showing you the right store, currency and language, and in running a secure site.
• Your saved language and currency: your own request, when you pick one.
• Analytics: our legitimate interest in understanding how the site is used, in the cookieless form described above. You can object at any time with the opt-outs above.
• The contact form: our legitimate interest in answering you and in keeping the form free of abuse.

Who else receives data

• Vercel, our host, based in the United States, with servers around the world.
• Google, for analytics, based in the United States.
• Amazon, for product photos, and on its own sites after you click through.
• Resend, which delivers contact-form messages, based in the United States, and our email provider, which stores them.

We don't sell personal information, and we share it with no one else unless the law requires us to.

Data outside your country

Build Your Setup is run from Australia, and Vercel, Google and Resend handle data in the United States and elsewhere. So if you are in the EEA, the UK or Switzerland, your information leaves it. These providers protect such transfers with recognised safeguards, such as the European Commission's standard contractual clauses and the EU-US Data Privacy Framework. Under Australian privacy law, this means personal information may go to recipients overseas, mainly in the United States.

Your rights

Wherever you live, you can ask what personal information we hold about you, ask us to correct or delete it, and object to how we use it. Use the contact form. We'll answer within a month, free of charge. We hold very little, and nothing filed under your name, so we may ask for a detail that helps us find it, such as the date you wrote to us. The cookies on your own device you can clear yourself at any time.

EEA, UK and Switzerland

You can also ask us to restrict how we use your data and to give it to you in a portable form. You can complain to your local data protection authority (in the UK, the Information Commissioner's Office), though we'd like the chance to put things right first.

Australia

We handle personal information in line with the Australian Privacy Principles. You can ask to see or correct your personal information at any time. If you have a complaint, tell us first through the contact form and we'll respond within 30 days. If you are not satisfied, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

United States, including California

In the last 12 months we collected these kinds of personal information, all directly from you or your browser: identifiers (IP address, analytics cookie IDs and, if you wrote to us, your name and email address), internet activity (pages viewed and links clicked), approximate location, and the messages you send us. We use them only to run, secure and measure the site, and disclose them only to the service providers listed above.

We don't sell personal information or share it for cross-context behavioral advertising, and we don't collect sensitive personal information. So there is nothing to opt out of, whether you ask through the form or your browser sends a Global Privacy Control signal. You can ask to know, correct or delete your information, yourself or through an authorized agent, and we won't treat you differently for asking.

Children

Build Your Setup is for a general audience and asks no one for personal details. We don't knowingly collect personal information from children under 16. If you think a child has written to us, tell us and we'll delete the message.

Security

Every page is served over HTTPS, and we collect as little as we can. Data we never have can't leak.

Changes

If this policy changes, we'll update this page and the date at the top. If a change matters, such as a new kind of data or a new provider, we'll say so here.

Contact

For questions or requests about privacy, use the contact form and pick “Privacy request”.