Privacy
What this site collects, what leaves your browser, and who sees it. Short, because there is not much to describe.
SanCap365 has no accounts, no sign-up, no newsletter, no advertising and no comments. There are now two forms: /feedback, for telling us a listing is wrong, and /feedback/vendor, a standardised report for someone who has actually used a contractor from the directory. Those are the only places on this site that ask you for anything, both are entirely optional, and what they do with what you type is set out below. There are also links that open your own email program, and those send nothing until you press send yourself.
Cookies
None. Not one, first-party or third-party. There is no cookie banner on this site because there is nothing to consent to.
How the page views are counted
Netlify, our host, counts page views by reading its own server logs — the ordinary record of which addresses asked for which pages. Nothing runs in your browser to make that happen, and nothing is stored on your device. Every web server keeps logs like these; the only difference here is that Netlify totals them for us and shows us the totals.
What they can see from those logs is what any host sees: the page requested, roughly when, the IP address the request came from, and the browser's user-agent string. We are shown counts — page views, unique visitors, which pages, where people arrived from — never a list of individuals.
There is no measurement script at all
Between 21 and 23 August 2026 Netlify also added a small performance script to every page, meant to measure how fast they rendered. On this site it never ran — our Content Security Policy permits no external scripts — and on 23 August 2026 it was switched off across every project, so it is not in the page any more either.
That leaves the simplest version of this: nothing on this site runs in your browser except the site itself, and your browser sends nothing to anyone else. The counting described above happens entirely on Netlify's side, from records the server keeps anyway.
Said plainly because the alternative was worse: for two days this page described a script sending data to a third party, and by then the policy was already blocking it. Over-stating what is collected is still getting it wrong, and this is the page that has to be right.
What this site does not load
Every page here was fetched and checked for what it pulls in automatically. The answer is nothing:
| Webfonts | None. The site is set in whatever font your device already has, which is also why it loads fast. |
|---|---|
| Third-party scripts | None. No Google Analytics, no Tag Manager, no Meta Pixel, no Hotjar, no Clarity, no chat widget. |
| Advertising | None. No ad tags, no retargeting, no data brokers. |
| Embeds | None, on any page. No maps, no video, no social embeds, no iframes anywhere on this site. The webcam page used to play four cameras behind a press-play button and no longer does — every camera now opens on its operator’s own page, which is the only place they all actually work. |
| Images from elsewhere | None. Every image is served from this domain. |
No page on this site makes an automatic external request at all. Not one — including /cams, where the cameras wait to be asked. This paragraph used to begin "the measurement beacon above is the only", which was written when there was a beacon and left standing for a day after it was switched off, twenty-five lines below the section explaining that it no longer exists. Both halves of a page have to move together.
Links you choose to click
The directories link out to restaurants, shops, charters and vendors, and the conditions page links to NOAA, FWC and the National Weather Service. Those are ordinary links. Following one takes you to someone else's site, which then sees you arriving exactly as it would if you had typed the address. We are not told that you clicked and we get nothing when you do.
Affiliate links and sponsorship
two pages carry affiliate links:
the gear page and the bike page.
Every Amazon link on them carries the tag
sancap365-20, which means Amazon can tell that a visit
came from here, and a purchase may pay us a small commission at no extra
cost to you. As an Amazon Associate I earn from qualifying purchases.
One item on that page links straight to the maker instead, and that link earns us nothing at all. It is there because it is the right answer, not because it pays.
Nowhere else. The conditions page, the four directories, the beaches and the cameras carry no paid link of any kind. Clicking a restaurant, a shop, a charter or a vendor earns us nothing and we are not told that you clicked.
No listing was paid for and no business paid to be included in a directory, and inclusion will not be for sale, because a directory that charges to be listed correctly stops being worth reading. If a listing is ever sponsored it will be labelled on the card.
This page was wrong about that until 24 August 2026. It said there were no affiliate links on the site while the gear page was already serving them, and the paragraph promising to update this page before such links went live was still sitting underneath. The gear page shipped and this one was not touched. The test written to prevent it listed four pages by name and the gear page was not one of them, because it did not exist when the list was written; it now walks every page the site builds. Recorded rather than quietly corrected, for the same reason the other corrections on this page are.
Hosting and server logs
The site is hosted by Netlify. Like any web host, their servers record standard request information — IP address, timestamp, the page requested, the user agent — for delivery, security and abuse prevention. We do not build profiles from it and we do not combine it with anything else.
Your choices
- Cookies. We set none, so there is nothing here to opt out of.
- Do Not Track and Global Privacy Control. There is no cross-site tracking here to disable, so these signals change nothing about how the site behaves. We would rather say that than imply we honour a signal that has nothing to act on.
- Access or deletion. We hold no personal data, so there is nothing to retrieve or erase. If you think otherwise, write and we will look.
Children
This site is aimed at adults planning a day on the islands. It is not directed at children and it knowingly collects information from nobody, children included.
When this changes
If what the site does changes — an analytics tool, a form, a mailing list, an affiliate link, a sponsored listing — this page is updated before that goes live, and the date below changes with it. A privacy page that quietly falls out of date is the failure worth avoiding, and it has already happened once on a sister site.
The links that open your email
Some pages here carry links that say things like "Out of date?",
"Recommend" or "Confidential feedback". Those are ordinary
mailto: links. Following one opens your own email
program with the subject and a few questions already filled in. Nothing is
sent, and this site is not involved, until you press send yourself.
And now there are two forms. Until 23 August 2026 there was none, deliberately, and the argument for that was good: a mail link means your message goes to a mailbox and there is no store of submissions on this end at all.
The argument had a hole, and it is the hole that mattered. A
mailto: link only works if your device has a mail program set
up. On a desktop using webmail, which is most people, clicking one does
nothing whatsoever — no error, no fallback. The most private channel
available was, for a large share of readers, not a channel.
What the forms change, said plainly. Both post to Netlify, who already host every page you are reading and already see every request you make here, so no new company is involved. But Netlify does now STORE what you submit, where a mail link stored nothing. The /feedback form stores the listing, the kind of problem, your message, and your email address if you chose to give one. The /feedback/vendor form additionally asks for the vendor's own name, contact details and whether you paid for the work, and whether you are connected to the business — none of it required beyond the vendor's name, whether you paid, your comments, and the connection question. Neither form requires your own email, and both arrive without it.
There is no captcha on either form. Spam is caught by a field that is hidden from you and visible to robots. A captcha would mean loading Google's script on this page, and this site removed the last Google script it had on the same day the first form arrived; trading one for the other would be an exact round trip.
The mail link is still there, on both form pages, for anyone who would rather their words never sat in a form store at all. That is a legitimate preference and picking for you would be worse than explaining the difference.
If you write to us about a contractor, we treat who you are and what you said as confidential. It is used to check and correct listings, not published. We do not print names, individual accounts, project costs or addresses, and we do not pass your message to the business you are writing about.
Contact
Anything on this page: mike@sancap365.com.
Claims on this page were last checked against the live pages on 23 August 2026. There is no longer a measurement script to check.