Short version: this site does not track you. There is no analytics, no advertising, and nothing watching which pages you read. The only personal information kept is what somebody typed into a form on purpose.

Who is responsible

Mr Lather Man is one person and a lot of soap. Questions, corrections, or a request to delete something go to hello@mrlatherman.co.uk, which is read by the same person who washes the bars.

Reading the site

Nothing is stored about you for reading. No analytics, no tracking pixels, no third-party scripts watching what you look at. The web server keeps ordinary request logs, which include IP addresses, because a server that logs nothing cannot be kept secure.

Cookies

Two, and both are strictly necessary, which is why there is no consent banner asking you about them. Consent is required for cookies that track you or measure you, and this site sets none of those.

• A session cookie. Keeps a form working across a page load, and keeps a squad member signed in. Deleted when you close the browser, or when the session expires.
• A CSRF token cookie. Stops somebody else's website submitting a form to this one in your name. It is a security control, nothing more.

Neither is shared with anybody, and neither follows you to other sites. If you block them, forms and member sign-in stop working, but reading the site is unaffected.

Joining the squad, or asking for soap

Those forms store what you type: a name or handle, an email address, and whatever you write in the message. The email address is used to send you a sign-in link and to reply. It is not put on a mailing list, because there is no mailing list.

A squad member's washes, reviews and donations are kept against their account. Reviews and a chosen display name appear publicly, which is the point of them. An email address never does.

Buying a box, and donating

Payments go through Stripe. Card details are never sent to this site: the checkout hands you to Stripe, and Stripe takes the card and the delivery address on its own pages. This site holds no card number and no postal address at any point.

When a donation completes, Stripe tells this site the amount and the name and email address the donor gave it, and those two are stored so the man knows who to thank. They are never published. Stripe is its own data controller for what it collects; its privacy notice is on stripe.com.

How long any of it is kept

Squad accounts and their logged washes are kept while the account is active, since the whole point is a record built up over time. Ask for it to go and it goes. Donation records are kept for as long as the tax rules require, which is six years.

What you can ask for

You can ask for a copy of whatever is held about you, ask for it to be corrected, or ask for it to be deleted. Email hello@mrlatherman.co.uk and it gets done. No form to fill in, no reason needed.

If that goes badly, the people to tell are the Information Commissioner's Office at ico.org.uk. It really should not come to that. It is one man writing about soap.

Last updated 27 October 2026.