Skip to main content

Privacy Policy

Reviewed:

This policy describes what data MakeMoneyOnline.lk actually collects, from whom, why, how long it's kept, and who else can see it. It is written from what the site actually does, not from a generic template — if you spot a discrepancy between what's stated here and what the site actually does, that's a bug we want to fix.

Who runs this site

MakeMoneyOnline.lk is an independent Sri Lanka-specific publishing site edited by Alston Antony (Colombo, Sri Lanka). See the editorial methodology page for how the site's editorial positions are formed. For privacy-specific questions, contact us via the contact page.

What we collect, from whom, and why

The site is a static publisher. It does not have user accounts, comments, or logins. Data collection is limited to the following:

1. Anonymous usage analytics — from every visitor

  • Provider: Google Analytics 4 (measurement ID G-Q5SWQWBDGF).
  • What is collected: Google's standard GA4 event stream — page views, approximate location (country/region derived from IP; the full IP is not retained by GA4 by default), device/browser type, referral source, and interactions on the page (clicks on some elements). GA4 assigns a first-party cookie (_ga) that identifies your browser to us as a returning or new visitor.
  • Why: to understand which pages are useful, which are not, and how readers arrive here. The data feeds the editorial review cadence documented on the methodology page — pages nobody reads get pruned; pages that are read get refreshed.
  • Retention: Google Analytics retains event-level data for 14 months by default; longer aggregated reporting persists in the GA4 property indefinitely at Google's discretion.
  • Legal basis: legitimate publishing interest in understanding audience behaviour. GA4 is configured with IP anonymisation on Google's side.

2. Newsletter signup — only if you enter your email

  • What is collected: your email address.
  • Where it goes: the newsletter form posts directly to Pabbly Connect (an automation service), which forwards the address to our email list. Pabbly and the underlying email service (currently Pabbly Email Marketing) store the address to be able to send you the newsletter.
  • Why: to send you occasional updates about new content on the site.
  • Frequency: intended to be occasional (not more than a few times per month). We do not sell, rent, or share this list.
  • Retention: until you unsubscribe. Every newsletter includes an unsubscribe link, and unsubscribing removes your address from the list.
  • Legal basis: your explicit consent (you type your email into the form and click Subscribe).

3. Web server logs — from every visitor

  • Provider: Cloudflare Pages (our hosting provider).
  • What is collected: Cloudflare records the standard set of information every web server records — IP address, request URL, HTTP status, response size, browser user-agent, referrer, and timestamp. Cloudflare additionally applies its edge network's standard security features (bot filtering, DDoS mitigation).
  • Why: operational — to serve the site, prevent abuse, and diagnose errors. We do not use these logs for behavioural profiling.
  • Retention: per Cloudflare's default retention.

What we do NOT collect: we do not use any advertising cookies or ad retargeting. We do not have user accounts, comments, or login sessions. We do not operate a payment processor — no financial data reaches this site.

Third-party services embedded on the site

The site embeds content from a small set of third parties. When you view a page, those third parties may set their own cookies or receive request headers:

  • Google Analytics 4 (analytics) — see the section above.
  • Google Fonts (fonts.googleapis.com, fonts.gstatic.com) — serves the Inter font used across the site.
  • YouTube — some method pages embed relevant YouTube videos. When you play one, YouTube's own privacy terms and cookies apply. Un-played embeds do not set cookies but the page does load YouTube's embed player script.
  • Cloudflare Pages (hosting) — see the section above.
  • Pabbly Connect (newsletter forwarder) — only receives your data if you submit the newsletter form.

Some outbound links on the site are affiliate links. When you click through and buy something at the destination, we may earn a commission at no extra cost to you. Affiliate relationships do not influence which methods we publish, the order of recommendations, or which platforms we list — the editorial criteria in the methodology page come first. See §9 of the methodology page for the full affiliate disclosure. Clicking an affiliate link takes you to the destination site, whose privacy policy governs what happens there.

Your choices

  • Analytics opt-out: install Google's GA opt-out browser add-on, or use any browser feature that blocks the Google Analytics cookie / script. Enabling Global Privacy Control (GPC) or "Do Not Track" in your browser will also signal your preference; GA4 respects the Consent Mode signals for regions where it applies.
  • Newsletter unsubscribe: click the unsubscribe link at the bottom of any newsletter we send. Your address is removed from the list.
  • Data access, correction, deletion: if you want a copy of any personal data we hold about you, or want it corrected or deleted, contact us via the contact page. For analytics data, Google is the data controller for GA4 and Google's own tools are the primary channel (browser add-on, Google Account privacy settings). For newsletter data, we can remove your address on request.

Content and children

The site is aimed at adult readers making income decisions. We do not knowingly direct content at children, and we do not knowingly collect data from children under 16. If you are under 16 and you have submitted the newsletter form, ask a parent or guardian to contact us and we will remove your data.

Jurisdiction and cross-border data flows

MakeMoneyOnline.lk is operated from Sri Lanka. Because the site uses Google Analytics, Google Fonts, YouTube, Cloudflare, and Pabbly Connect, data collected through those services is processed on infrastructure operated by those companies (typically in the US and elsewhere). Sri Lanka's Personal Data Protection Act, No. 9 of 2022 governs personal data of Sri Lankan residents processed by this site; the third-party services above have their own respective privacy terms.

Changes to this policy

When the site's data flows change — for example, if we add a comments system, replace the analytics provider, or start using a different newsletter tool — this page is updated. The "Reviewed" date at the top reflects the last update. Material changes will be flagged inline in an upcoming newsletter issue as well as here.

Contact

For any privacy question — including a request to access, correct, or delete personal data we hold about you — please use the contact page.

This page describes actual data flows as of the Reviewed date. It is not legal advice. Sri Lanka's Personal Data Protection Act imposes specific obligations on data controllers that a small independent publisher may not fully address in the form above; if you rely on this policy for regulatory purposes, verify against your own current legal requirements.