Privacy Policy

Last updated: May 14, 2026

This policy describes how personal information is collected, used, and shared when you visit grainandmortar.com (“the Site”). Our goal is to be straightforward: we collect very little, we ask before we track anything, and we don’t sell your data.

What we collect and when

Before you accept cookies — server log data only. Like most websites, our server records standard log information for every visit: IP address, browser type, referring page, request path, and timestamp. This is kept for short-term troubleshooting and security and is not tied to any analytics profile.

After you accept cookies — anonymous analytics. If you click Accept in our cookie banner, we load Google Tag Manager and Google Analytics 4 to understand how visitors move through the Site (which pages they read, where they came from, what they click). This data is aggregated and not used to identify you personally.

If you click Decline — nothing else. No analytics scripts load, no Google cookies are set, and no events are sent. Your choice is remembered for one year via a single first-party cookie (gm_cookie_consent), so you won’t be asked again on this device.

Cookies we set

We use Google Tag Manager (container GTM-5DHGNZPG) as the loader for the analytics tags above. No advertising, retargeting, or third-party social pixels are loaded on this site.

How to change your mind

To withdraw consent or reset your choice, clear your site cookies for grainandmortar.com (or use your browser’s “clear site data” option) — our banner will reappear on your next visit and you can decline. You can also opt out of Google Analytics globally at tools.google.com/dlpage/gaoptout.

How long we keep it

Server logs are typically rotated within 30 days. Analytics data lives in our Google Analytics property; retention is set to the GA4 default. We do not maintain a customer database on this Site — there is no account system and no e-commerce.

Sharing

The only third party that receives data from this Site is Google (Analytics + Tag Manager), and only after you’ve accepted cookies. Google’s handling of that data is governed by their privacy policy: google.com/policies/privacy. We do not sell, rent, or share your information with anyone else.

Your rights

If you’re in the EU/UK (GDPR) or California (CCPA/CPRA), you have the right to request access to, correction of, or deletion of any personal information we may hold about you. Because we don’t maintain a customer database for this Site, in most cases there is nothing on our end to request — but if you’d like confirmation in writing, email us.

Contact

For privacy questions or requests, email [email protected].

We may update this policy occasionally for operational, legal, or regulatory reasons. The “Last updated” date at the top will reflect any changes.