Tonewood Atlas
Privacy
Tonewood Atlas keeps data collection to the minimum needed for the site to be useful. We don’t serve advertising, we don’t hold user accounts, we don’t sell or share information with third parties, and we don’t use any kind of cross-site tracking. We do run a privacy-friendly analytics tool (Plausible) for aggregated traffic counts — details below. As the site evolves, what we collect may grow with it; when that happens, we’ll update this page with specifics before any change goes live, rather than hide changes behind generic policy boilerplate.
Analytics — what we use, what it sees
The Atlas runs Plausible Analytics for aggregated traffic measurement. Plausible is a privacy-friendly alternative to Google Analytics: it uses no cookies, sets no persistent identifiers, and stores no personal information about individual visitors. Their servers are EU-based and the service is GDPR-compliant by design.
What Plausible records on each visit:
- The page URL you viewed.
- The country your visit came from (derived from IP and then discarded — no IP is stored).
- What browser and device type made the request.
- Where you came from (referrer), if your browser sent one.
- Whether you clicked an outbound link (a link to a dealer’s site, for example) — used to count how often dealer click-throughs happen, not to follow you across sites.
- If you used the search bar, the search query you submitted — recorded as an aggregated count so we can see what builders, woods, and shapes our visitors care about. The query text is stored as part of an aggregated tally, not associated with you as an individual.
What Plausible does not record: cookies, persistent IDs, full IP addresses, names, email addresses, mouse movements, scroll behavior, session replays, or anything that could tie aggregate visit counts back to a specific person. Plausible publishes their full data policy if you want to read the original.
What we don’t do
- No accounts, no logins, no passwords. Browsing the Atlas today doesn’t require any kind of identification.
- No advertising cookies, no tracking pixels, no third-party ad scripts.
- No selling, sharing, or trading visitor data with third parties for marketing or any other purpose.
- No newsletter signups (because we don’t have one yet), no email harvesting, no contact form storing what you wrote.
- No cross-site tracking. The Atlas does not follow you across other websites.
The one cookie we use
The Atlas sets a single first-party cookie called tonewood_atlas_currency_pref to remember which currency you chose to display prices in (USD, GBP, EUR, and so on). It contains nothing else. It expires after a year. Clearing it just resets the price display to the dealer’s native currency. Your browser’s “clear cookies for this site” setting wipes it instantly.
Photos and dealer pages
Every guitar photograph on the Atlas is hot-linked from the dealer’s own server — we never download, never rehost. That means when your browser displays a listing’s photo, it makes a normal HTTP request directly to the dealer’s server, which logs that request the same way any website logs visitors. The dealer’s log entry includes your IP address and browser type but says nothing about where the request came from beyond what the browser includes by default.
When you click through to a listing, you leave the Atlas and land on the dealer’s own page. Their privacy practices apply there, not ours.
Server logs
The Atlas runs on Vercel. Like any web host, Vercel records standard request information — IP address, timestamp, URL, user-agent — for security and operations purposes. We don’t analyze these logs to build profiles of visitors, and they aren’t shared with anyone.
Third-party services
Two third-party services power the site, both invoked server-side — your browser never talks to either of them directly:
- Supabase hosts our Postgres database (listings, builders, dealers, FX rates). It receives no information about you.
- Frankfurter.dev provides the daily ECB-backed currency exchange rates we use for price conversion. We fetch rates once a day from our server; your browser never connects to them.
Children
The Atlas isn’t directed at children, and since we don’t collect personal information from anyone, we don’t collect any from children either.
What may change
The Atlas is early. As it evolves, some of what’s on this page will too. We’d rather be honest about the likely direction than make “never” promises we have to walk back later.
Two changes are on the roadmap that would affect what we collect:
- A paid subscription tier. When this launches, subscribers will provide an email address and a payment method. The payment is handled by a payment processor (likely Stripe); we’ll store the email plus the processor’s customer ID, and that’s it. Browsing the free Atlas will continue to require no account at all.
- A verified-dealer program. Dealers we work with may eventually be able to edit their own pages directly, which means at minimum we’ll hold an email and an authentication record per verified dealer. Listings and visitor browsing aren’t affected by this.
Any of these changes will be reflected on this page before they go live, with the “last updated” date below revised so the change is easy to spot. The firm commitments hold regardless: no selling personal information, no behavioral tracking, no third-party advertising scripts, and no cross-site tracking.
Questions
For anything privacy-related, including any request to confirm what (if anything) we have on you or to remove information, write to hello@tonewoodatlas.com. You can also read our About page for the broader picture of what the Atlas does.
Last updated: 9 May 2026 — added Plausible analytics disclosure.
