Skip to main content
Affiliate Disclosure: SleepRanked may earn commissions from eligible links at no extra cost to you. We evaluate products using consistent editorial standards. Learn more
SleepRanked

Privacy Policy

Last updated: September 9, 2026

Summary: SleepRanked collects email addresses if you subscribe, information you submit through forms, and usage data. Consented analytics uses pseudonymous identifiers, not a guarantee of anonymity. We use cookies for analytics and functionality. You can request access, correction, deletion, or export of your data. We never sell personal information.

1. Who We Are

SleepRanked (“we,” “us,” or “our”) operates the website at sleepranked.com — a sleep-wellness research and comparison platform covering mattresses, pillows, bedding, and related products. For privacy-related inquiries, contact us at privacy@sleepranked.com.

2. What We Collect and Why

2a. Information You Provide

  • Email address: If you subscribe to our newsletter or deal alerts. Used only to send the communications you requested. We use a double opt-in process: you must click a confirmation link in an email we send before your address is added to our active list. You can unsubscribe at any time via the one-click link in every email we send. We also store a timestamped record of your consent (date plus the version of the disclosure text shown) to meet GDPR record-keeping requirements.
  • Contact form submissions: Name, email, and your message if you contact us via our contact form. Used solely to respond to your inquiry.
  • Quiz inputs: Your current quiz responses are processed in the page, not saved to browser storage or sent to our servers. The optional shortlist download contains product names and links, not your responses or email address. Downloading does not subscribe you to emails or price alerts.

2b. Automatically Collected Data

  • Analytics data: With your consent, we use Google Analytics 4 and first-party session measurement to understand pages viewed, session activity, visible experiment exposures, and outbound affiliate interactions. The first-party session token is random, lasts for the browser session, and is one-way hashed before storage. We do not store the raw token or send it to an affiliate network.
  • Cookies: See Section 4 for full details.
  • Server logs: Our hosting provider automatically logs IP addresses, browser type, and pages requested for security and performance purposes. Logs are retained for up to 30 days.

3. Legal Basis for Processing (GDPR)

For visitors in the European Economic Area (EEA) and United Kingdom, we process personal data under the following legal bases:

  • Consent: Analytics cookies, marketing emails (you opted in)
  • Legitimate interests: Security logging, fraud prevention, improving our services
  • Contract performance: Responding to contact form inquiries
  • Legal obligation: Where required by applicable law

4. Cookies

We use the following categories of cookies:

Essential Cookies

Your cookie choice is stored in your browser as sr_cookie_consent. A separate essential preference cookie, sr_analytics_denied, remembers a denial for up to one year and helps keep analytics off if browser storage cannot save your choice. Choosing Accept Analytics removes that denial cookie when the browser permits it. These preferences contain no visitor identifier. If your browser blocks all preference storage, we can remember a failed choice only in the current page.

Analytics Cookies

Used to understand how visitors use our site. Activated only after you provide consent. Includes Google Analytics 4 cookies (_ga, _ga_*), randomly assigned experiment groups, and the session cookie sr_analytics_session_v1. That session cookie expires when the browser session ends and lets us calculate page-level outbound rates without treating an IP address as a person. Analytics consent does not grant Google advertising personalization consent.

Affiliate Tracking Cookies

When you click an outbound affiliate link, the destination retailer or affiliate network (Impact, ShareASale, CJ Affiliate, Rakuten, Amazon Associates) may place cookies on your device to track purchases for commission purposes. These are governed by the retailer's own privacy policy.

Use Cookie preferences in the footer of any page to reopen your choice. Choose Essential Only to withdraw analytics consent, or Accept Analytics to enable it. Withdrawal stops new site measurement and removes the first-party measurement session; it does not erase historical records or cookies previously set by other services. Your browser settings can remove stored cookies. Disabling analytics does not affect your ability to read the site or subscribe to emails separately.

5. Third-Party Services

  • Google Analytics 4: Analytics — only activated with your consent. Google's Privacy Policy.
  • Affiliate networks: Impact, ShareASale, CJ Affiliate, Rakuten, Amazon Associates — activated when you click outbound links.
  • Email subscriber storage: Subscriber email addresses, double-opt-in confirmation timestamps, consent records, and unsubscribe tokens are stored in our application database (Turso). Confirmation and unsubscribe emails are sent via Gmail SMTP (Google LLC). To analyze conversion of signup forms we additionally store a SHA-256 hash of your IP address (salted, irreversible) and the source page identifier for each signup attempt — we do not store the raw IP, user agent, or referer.
  • First-party consented measurement: After analytics consent, Turso stores a one-way hash of a random browser-session token, normalized public page paths, visible experiment exposures, and whether an outbound click belonged to that measured session. It does not store the raw session token, raw IP address, email address, or cross-site referrer in these measurement records. The session hash is used only inside SleepRanked and is never added to retailer or affiliate-network tracking parameters.
  • Hosting: Our infrastructure provider processes connection data as described above.

We do not sell, rent, or trade personal data to third parties for their own marketing purposes.

6. Data Retention

  • Email subscribers: Retained until you unsubscribe or request deletion
  • Contact form messages: Retained for 12 months from receipt, then deleted
  • Analytics data: Google Analytics data is retained per its configured settings; first-party pseudonymous session and experiment records are retained for operational measurement and are scheduled for a maximum 14-month retention window
  • Server logs: 30 days

7. Your Rights (GDPR — EEA/UK)

If you are located in the EEA or United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

  • Right of access: Request a copy of the personal data we hold about you
  • Right to rectification: Request correction of inaccurate or incomplete data
  • Right to erasure: Request deletion of your personal data (“right to be forgotten”)
  • Right to restriction: Request that we restrict processing of your data
  • Right to data portability: Request your data in a structured, machine-readable format
  • Right to object: Object to processing based on legitimate interests
  • Right to withdraw consent: Reopen Cookie preferences in the footer and choose Essential Only

To exercise any of these rights, email privacy@sleepranked.com. We will respond within 30 days.

8. Your Rights (CCPA — California)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

  • Right to know: Request disclosure of the categories and specific pieces of personal information we collect, use, disclose, and sell
  • Right to delete: Request deletion of personal information we have collected, subject to certain exceptions
  • Right to opt out of sale: We do not sell personal information. If this changes, we will provide a “Do Not Sell My Personal Information” link.
  • Right to non-discrimination: We will not discriminate against you for exercising any CCPA rights
  • Right to correct: Request correction of inaccurate personal information
  • Right to limit use of sensitive personal information: We do not collect sensitive personal information as defined under CCPA

To submit a CCPA request, email privacy@sleepranked.com with “CCPA Request” in the subject line. We will respond within 45 days.

9. International Transfers

Our services are operated primarily in the United States. If you access our site from outside the US, your data may be transferred to and processed in the US, where data protection laws may differ from your jurisdiction. By using our site and providing personal data, you acknowledge this transfer. We implement appropriate safeguards consistent with applicable law.

10. Children's Privacy

Our site is not directed at children under 13 (or under 16 in the EEA). We do not knowingly collect personal information from children. If you believe a child has submitted information to us, please contact us immediately and we will delete it.

11. Data Security

We implement reasonable organizational and technical security measures to protect personal data. Email lists are stored with industry-standard encryption. However, no internet transmission is 100% secure — we cannot guarantee absolute security. In the event of a data breach affecting your rights, we will notify you as required by applicable law.

12. Changes to This Policy

We may update this policy when our practices change or when required by law. Material changes will be indicated by an updated “Last updated” date and, where appropriate, a notice on our site.

13. Contact & Complaints

For privacy questions or to exercise your rights: privacy@sleepranked.com

If you are in the EEA and believe we have not adequately addressed your concern, you have the right to lodge a complaint with your local Data Protection Authority (DPA).

You may also use our contact form.