Privacy policy
ReviewLedger separates public review content from private verification data and pending media.
Effective September 12, 2026
Information we collect
When you submit a review, we collect your display name, country, rating, review title and text, experience date, email address, optional order reference, and any photos you choose to upload. Contact-form messages collect the name, email, category, and message you provide.
What becomes public
Only approved review content is public: display name, country, rating, title, review text, experience date, approved photos, source label, and any business response. Your email and order reference are never included in the public review API or page.
Photo processing
Your browser re-encodes selected JPG, PNG, or WebP images before upload. This removes embedded location metadata and limits the longest edge to 2,000 pixels. Pending files are private. If a review is rejected, its pending uploads are deleted; approved photos move to a published storage path and are served through ReviewLedger.
Storage and security
Production records use private Vercel Blob storage. Administrative access uses an HTTP-only, same-site-restricted session cookie with an eight-hour lifetime. ReviewLedger does not install advertising trackers. Infrastructure providers may process standard connection data needed to deliver and protect the service.
Retention and your choices
Published records are retained while the review service operates or until a valid removal request is resolved. Pending and administrative records are retained for moderation, audit, fraud prevention, and legal support as reasonably needed. To request access, correction, or deletion, use the privacy contact form.
Changes
Material updates will change the effective date on this page. We do not retroactively make private fields public.