Privacy Policy

This Privacy Policy explains how Massage Review (the operator of themassagereview.com, “we,” “us,” or “our”) collects, uses, shares, and protects information when you visit or use our website and related services (the “Service”).

By using the Service, you agree to this Privacy Policy. If you do not agree, please do not use the Service.

Massage Review is a United States directory that helps people find and compare massage listings. We operate the Service under the product name Massage Review at themassagereview.com. We have not published a separate legal entity name or street address in this policy.

Privacy and data requests: privacy@themassagereview.com. That mailbox is the contact address for this policy and must be monitored.

The public Service today includes a homepage, typed location search with nearby published listing results and filters, public listing pages, a design-system showcase, and these legal pages. First-party reviews, seller claim accounts, and advertising are planned and are not live consumer features as of the effective date. Google Analytics 4 is live on the public Service. We still describe planned advertising here so this policy stays accurate as ads ship.

We collect information in these categories:

a. Information you provide

• The public site does not currently offer consumer accounts, contact forms, review submission, or listing-claim flows.
• When you use search, you may type a city, ZIP code, or place name. When Mapbox suggestions are configured, you may also pick a suggested label that includes coordinates.
• If we add claim flows, first-party reviews, compare tools, or other forms later: information you submit there (such as email, messages, or listing updates).
• Any other information you choose to send us by email, including messages to privacy@themassagereview.com.

b. Information collected automatically

• Standard server and hosting logs that can include your IP address, user agent, requested URL, referring URL, and approximate timestamps. These logs are created by operating the website.
• Google Analytics 4, which uses cookies and similar identifiers to measure how people use the Service (for example page views and approximate location derived by Google). The measurement ID in production is G-QTKXJ9J3VF.
• We do not currently set first-party advertising cookies. We do write a first-party search-location record to your browser’s local storage when you submit a location search, as described in Section 3.c.

c. Location-related information

• We do not request your device’s precise GPS location through the browser geolocation API. Search is text-first: you type a city, ZIP code, or place name.
• When you submit a location search, we store the label (and any optional coordinates you selected) in your browser’s local storage as the current search and a short history of about 25 recent places. That record stays on your device. We do not send it to our servers as an account profile. The search request itself does send the label and optional coordinates to our servers so we can look up published listings nearby.
• Search URLs may include the same label and optional coordinates as query parameters so a link can reopen the same place. Opening a search URL updates the stored current location on that device.
• When a Mapbox access token is configured, we may send the typed city, ZIP, or place name to Mapbox so we can return suggested places and resolve coordinates. If that token is not set, suggestions stay off and we cannot place a free-typed query. That is not the same as reading your device GPS.
• Listing records we store include business addresses and map coordinates for the listed business. Those coordinates describe the seller’s location, not your personal device location.

d. Listing and public-source information

We maintain a directory of US massage businesses (“sellers”) and related listing details. Listing content may include names, addresses, phone numbers, emails, websites, hours, categories, modalities, photos, ratings, and similar details gathered from public sources (including Google Maps scrapes), enrichment tools, operators, or (when available) claimed listing owners. That information is about organizations and public points of contact, not a private consumer profile you create by browsing.

When we ingest a listing from Maps, we may store third-party review snippets as a seed package (for example an author display name, rating, comment text, and relative time). Those comments were not written on Massage Review. We do not treat them as first-party reviews submitted through the Service. When a listing has those seeds, we may show a synthesized take and a “reviews from around the web” label on cards and listing pages. We may also quote the collected review text on the listing page, with a disclosure that it was scraped from Google Maps. When a listing has no scraped web reviews, we hide that label and the quoted-review section so we do not imply proof we do not have.

We also keep a first-party review record shape in our database for a future review feature. There is no public review-submission UI today, and we do not currently collect first-party reviews from visitors.

e. Internal operator tools

We operate internal tools to maintain the directory. Those include draft category management endpoints, a Maps scrape ingest used to seed listing records, and an internal enrichment API used to write editorial listing fields and publish or hold decisions. Those tools are intended for operators, not for the public. The scrape ingest and enrichment API are restricted by shared secrets. Category and setup endpoints are currently draft and are not a public consumer feature. They must be protected before production use. Do not submit personal information through those endpoints.

We use information to:

• Operate, maintain, and improve the Service (including the directory, typed location search, and site performance).
• Seed, enrich, and later publish listing records. Editorial enrichment and publish decisions run through an internal operator API. That is not a public consumer feature.
• Understand how people use the Service using Google Analytics 4.
• Show advertising, including ads served by Google AdSense, if and when ads are enabled. Advertising is planned. It is not live on the Service today and is not described here as a current primary revenue feature.
• Prevent abuse, debug issues, secure the Service, and enforce our Terms of Service.
• Communicate with you when you contact us or when you opt into messages we later offer.
• Comply with law and respond to lawful requests.

We may display advertisements on the Service when advertising is enabled. Ads are not live as of the effective date. The disclosures in this section apply when Google AdSense or similar advertising is turned on.

Third-party vendors, including Google, use cookies to serve ads based on a user’s prior visits to this website or other websites.

Google’s use of advertising cookies enables it and its partners to serve ads to your users based on their visit to our sites and/or other sites on the Internet.

Users may opt out of personalized advertising by visiting Google Ads Settings. You can also visit www.aboutads.info to opt out of personalized advertising from many participating companies.

Learn more about how Google uses information from sites that use its services in Google’s Partner Sites Policy.

Other third-party vendors or ad networks may also use cookies or similar technologies to serve ads on the Service. Where those vendors offer opt-outs, you can use their tools or the industry opt-out pages linked above.

Cookies are small files stored on your device. Similar technologies include pixels, local or session storage, and scripts that read or write identifiers.

On the Service today:

• The public pages load Google Analytics 4 in production. Google may set or read cookies and similar identifiers on your device for that measurement.
• Search uses first-party local storage to remember the current location label (and optional coordinates) plus a short history of recent searches on that browser. You can clear it by clearing site data in your browser.
• Hosting and server infrastructure may still process technical request data as described in Section 3.
• We do not currently set first-party advertising cookies. When Google AdSense (or related Google advertising tags) is enabled, Google and its partners may set or read cookies and similar technologies on your device. Advertising is not live as of the effective date.
• When Mapbox geocoding is configured, Mapbox may process the location text you submit. That processing is governed by Mapbox’s own policies. If the token is not set, we do not send typed queries to Mapbox.
• If we later add accounts or claimed listings, we may set a session cookie so you stay signed in on protected pages.

You can control cookies through your browser settings. Blocking cookies may limit some features, especially advertising and analytics. Where required by law (for example for visitors in the EEA, UK, or Switzerland), we will use an appropriate consent mechanism before storing or accessing information on your device for ads or non-essential cookies. A consent banner is not implemented as of the effective date.

We use Google Analytics 4 on the public Service to measure traffic and engagement. Google Analytics may use cookies and collect device and usage data as described in Google’s documentation and privacy policy. We may also collect first-party analytics events on our own systems later. Advertising measurement is separate and is not live as of the effective date.

Google Analytics opt-out tools and browser controls are described on Google’s opt-out page.

We may share information with:

• Service providers that help us run the Service (for example hosting, databases, Google Analytics, and, when enabled, geocoding and advertising partners), under contracts that limit use to providing services to us where applicable.
• Google Analytics 4, which is live, and other advertising or measurement partners when ads are enabled, as described in this policy.
• Internal enrichment or publishing tools we use to maintain listing quality. Those tools are operator workflows, not a public consumer feature.
• Professional advisors, or authorities, when needed to protect rights, safety, or comply with law.
• A buyer or successor if we are involved in a merger, acquisition, financing, or sale of assets, subject to this policy’s protections where required.

We do not sell your personal information for money. Google Analytics receives identifiers and usage data to measure the Service. When advertising partners are enabled, they may receive identifiers and usage data to show and measure ads. In some U.S. state privacy laws, that kind of disclosure can be treated as a “sale” or “sharing” of personal information for cross-context behavioral advertising. You can opt out of personalized advertising using the links in Section 5.

Depending on where you live, you may have rights to:

• Access, correct, or delete certain personal information.
• Opt out of personalized advertising (see Section 5).
• Appeal a decision we make about a privacy request, where the law gives you that right.

To make a request, email privacy@themassagereview.com. We may need to verify your request before responding. If you use browser or device controls to block cookies or clear storage, some analytics, ad features, and remembered search locations may stop working as described above.

The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us personal information, contact us and we will take steps to delete it.

We keep information only as long as needed for the purposes described in this policy, including to operate the Service, meet legal obligations, resolve disputes, and enforce agreements. Retention periods vary by data type (for example server logs versus listing records). Public listing details and third-party review seed packages we store for directory maintenance are kept as part of the listing record. We do not expire them on a fixed schedule. Google Analytics retention follows the settings in our Google Analytics property and Google’s documentation.

We use commercially reasonable safeguards to protect information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

We operate the Service from the United States. If you access the Service from another country, your information may be processed in the United States or other locations where we or our providers operate. Those places may have different data protection laws than your home country.

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date at the top of this page and may provide additional notice when appropriate. Continued use of the Service after an update means you accept the revised policy.

Questions about this Privacy Policy: privacy@themassagereview.com.

Related: Terms of Service.