Privacy and opt-out

Triremes is operated by Pigfox LLC. This page explains what it collects, where the data comes from, and how to make it stop.

If you got an email from Triremes

It is because a problem your business appears to have matches one someone is working on. The email went to the address your business published, to you alone. There is no mailing list, no tracking and no follow-up sequence. Reply "stop emailing me" (or any request to stop) and you won't hear from us again.

What is collected about businesses

Business contact details. Some pages list contact details that businesses have published themselves on publicly accessible pages, such as their own website, together with where each was published. We do not collect private individuals' details. We use these details so that buyers can contact businesses about problems they have reported in public; our legal basis is legitimate interest. A business can ask us at any time to remove its details or object to their use, through the contact form, and we will stop listing them.

Content. Problem pages summarise publicly available reviews and discussions. Some summaries are written with the help of AI and are marked as such.

Website measurements. We measure the public homepages of business websites (the HTML each server sends, and its robots.txt, sitemap and llms.txt) and sell what we find, with the business's name, its website and the page where it publishes a contact, to buyers looking for businesses to offer website work to. A business can have its website removed at any time through the contact form; it is removed at once and never measured again.

A record of contact: the message sent to an address, when, and any reply asking not to be contacted again.

What is collected about visitors

Triremes counts visits with its own first-party analytics, which store nothing in your browser: no cookie, no local storage, no identifier (Google Analytics, below, is separate and does use cookies). A visitor is a hash of the day, your IP address and your browser's user agent. A new salt each day means visits can't be linked across days. Your IP address itself is never stored.

If you create an account, we keep your email address, a hash of your password, and a session cookie while you are logged in.

You can also sign in with Google, LinkedIn or Microsoft. If you do, that provider tells us your email address, whether it has verified it, your name and its own id for your account. We use only a verified email address, to find your Triremes account or make one, and we keep that address and the provider's id for your account, so you can sign in the same way again. We do not keep your name, and we never see your password with that provider or anything else in your account there. While you sign in, a cookie of ours, triremes_signin, holds random values for ten minutes, to make sure the answer comes back to your browser.

Google Analytics

Public pages also load Google Analytics, so we can see which pages help. Google processes this data for us (Pigfox LLC). It runs from your first visit, as the cookie notice at the bottom of the page says.

• Google Analytics sets its own cookies (named _ga and _ga_…) to recognise your browser across visits, and your browser tells Google which page you opened, with your IP address and browser details. We use the counts to see which pages help.
• Google signals and ad personalization are off: the data is not used for advertising.
• We send the page's address without its query, and never load Google Analytics on account, admin, purchase or unsubscribe pages, or for our administrator, so no link with a secret in it reaches Google.
• When you choose OK on the notice, we set one cookie of our own, triremes_cookie_notice, for a year, so the notice is not shown again. It holds only "ok".
• We also tell Google Analytics what you do on the site: searches (without any email address), the problems you view, purchases and their prices, sign-ups and log-ins, the contact form, and the calculator's setup. Never your email address, your name, a contact, or a payment detail. When that happens on a page that does not load Google Analytics, we keep its name in a cookie of our own, triremes_analytics, for at most a day, and your next public page sends it and deletes the cookie.
• To refuse these cookies, block cookies for this site, or block google-analytics.com and googletagmanager.com, in your browser's settings or with a content blocker; Google also offers a browser add-on that turns Google Analytics off. The site works the same without them.

Google's own policy: policies.google.com/privacy.

To load faster and to show a notice when you are offline, the site keeps copies of its own stylesheet, scripts, icons and offline page in your browser's cache. They are the same for everyone and hold nothing about you; pages themselves are never cached. If you choose light or dark with the switch at the top, that choice is kept in your browser's local storage and is never sent anywhere.

What is not collected

Nothing is bought from data brokers or list sellers. Emails carry no tracking pixels and no tracked links, so we can't tell whether you opened one.

How it is used

Business contact details are used to send one note about a problem the business appears to have, and to make sure no one is contacted again after asking not to be. A visitor can also pay to see the business contacts found for one problem: the business name, the address the business published, and the page where it was published. Buyers must agree to terms that allow only lawful, relevant contact and forbid reselling the list.

If you buy contacts, Stripe handles the payment and gives us your email address. We keep it with the purchase, encrypted, to send you a receipt with the link to your list and to answer questions about your purchase.

To have your business's details removed so they are not offered again, use the contact form and choose "Remove my listing".

If you write to us through the contact form, we keep your name, email address and message, encrypted, to answer you. We first email you a link to send it; if you don't open it within 24 hours, we delete the message.

If you ask to be told when a problem's contacts are available, we keep your email address, encrypted, with that problem. When they are, we send you one email and delete your address; if the problem is withdrawn first, we delete it then. You can remove it sooner with the button shown after you sign up.

If you also tick "Also send me the weekly digest", we keep your email address, encrypted, for the blog's digest: when a new post is published, we email it to you. Only those who ticked the box get it. Every digest email has a link that stops it and deletes your address from the digest at once.

If you ask for problems on the request page, we keep what you asked for and your email address, encrypted, only to email you problems that match it, at most once a week; we delete the request if you don't confirm it within 24 hours, and at once when you use the link in any of those emails to stop them.

How to opt out

Reply "stop emailing me" (or any request to stop) and you won't hear from us again. You can also use the contact form and choose "Stop emailing me". Your address goes on a do-not-contact list that every message is checked against before it is sent. Opting out is permanent.

Seeing or deleting your data

Write to us through the contact form and we'll tell you what we hold about you, or delete it. One exception: if you have opted out, your address stays on the do-not-contact list, because that list is what keeps you from being contacted again.

If you have an account, you can delete it yourself at the bottom of your account page. That deletes it at once, with its sign-in methods (password and linked Google, LinkedIn or Microsoft accounts) and sessions. Records of purchases stay: the problem bought, the amount, the date and the buyer's email address (encrypted), because the law requires us to keep records of sales; a purchase's page keeps working from its link.

How long it is kept

Contact details and message records are kept while a campaign they relate to is active, and deleted on request. Do-not-contact entries are kept permanently. Analytics events are deleted after about 13 months.

Last updated 20 October 2026.