Privacy Policy

Effective: June 14, 2026  ·  Last updated: June 14, 2026

BobLazarWasRight.com ("we," "our," or "us") is operated by Canyon, Inc. It is an editorial website publishing informational and opinion content about Bob Lazar, UAP disclosure, and related science and government history. This Privacy Policy applies to all visitors and describes the information we collect, how we use it, how we share it, and your choices.

This policy does not cover third-party websites or content linked from our site. Review the privacy policies of any third-party sites you visit. For EU/EEA and UK residents, we act as the data controller within the meaning of the UK GDPR and EU GDPR.

1. Information We Collect

1.1 Information collected automatically

When you visit the site, we and our analytics providers automatically collect certain information about your device and browsing behavior:

• IP address (processed and anonymized by Google Analytics 4 before storage)
• Browser type, version, and language settings
• Operating system and device type (desktop, tablet, or mobile)
• Pages viewed, including URL, referral URL, and exit page
• Date and time of each page visit and session duration
• Geographic region derived from IP address (country, state, or city level — not precise location)
• Scroll depth, outbound link clicks, and engagement events configured in GA4
• New vs. returning visitor status, based on first-party cookies
• Traffic source: organic search, direct, referral, or social

This site does not process e-commerce transactions and does not collect payment card information, Social Security numbers, or government-issued identification. We have no user accounts or comment systems.

1.2 Cookies and similar technologies

We use first-party cookies and similar technologies to operate the site and collect analytics data. The cookies currently set are:

These are analytics cookies and are not strictly necessary for the site to function. EU/EEA and UK visitors: we load GA4 only after you have given consent via the cookie notice on your first visit. All visitors can opt out at any time (see Section 2.6).

2. Google Analytics 4 — Detailed Disclosure

2.1 What is Google Analytics 4?

Google Analytics 4 ("GA4") is a web analytics service operated by Google LLC ("Google"), 1600 Amphitheatre Parkway, Mountain View, CA 94043. GA4 uses cookies and similar technologies to collect information about how visitors use this site and sends that information to Google servers, which may be located in the United States or other countries. Google's privacy practices are governed by the Google Privacy Policy. We are the data controller; Google acts as our data processor under the Google Analytics Data Processing Terms.

2.2 Data collected by GA4

GA4 collects the following when you visit this site:

• Pseudonymous client ID assigned via first-party _ga cookie (up to 2 years)
• Session ID, session count, and session duration
• Page title and URL for each page viewed
• Events: page views, scrolls, outbound link clicks, and custom events we configure
• Engagement metrics: engaged sessions, average engagement time, bounce rate
• Acquisition data: traffic source, medium, campaign (UTM parameters)
• Technology data: browser, operating system, device category, screen resolution
• Geographic data: country, region, and city, derived from anonymized IP address

We do not send names, email addresses, form contents, or other direct identifiers to GA4. Google prohibits its Analytics customers from sending data that could identify an individual.

2.3 How we use GA4 data

We use GA4 data solely for editorial and operational purposes:

• Understanding which articles and topics attract the most reader interest
• Identifying technical issues such as high exit rates on specific pages
• Optimizing site navigation and content structure
• Measuring the effectiveness of referral sources
• Compiling aggregate audience reports to inform editorial planning

We do not use GA4 data to build individual user profiles, serve targeted advertising, or make automated decisions that affect individuals.

2.4 IP anonymization and data minimization

Our GA4 configuration includes the following privacy-enhancing settings:

• IP anonymization: enabled — IP addresses are masked before storage
• Data retention: set to 14 months at the user and event level, after which data is automatically deleted or aggregated
• Google Signals: not enabled — we do not use cross-device behavioral data tied to Google accounts
• User ID feature: not enabled — we do not assign persistent user identifiers

2.5 Google's use of data

Google may use data collected through GA4 for its own purposes, including improving Google products and services, consistent with Google's Terms of Service and the Google Analytics Data Processing Terms. We have entered into a Data Processing Agreement with Google as required by applicable law.

2.6 Opting out of Google Analytics

You may prevent GA4 from collecting data about your visits through any of the following:

• Browser opt-out add-on: install the Google Analytics Opt-out Browser Add-on
• Cookie controls: delete or block _ga and _ga_D8X15PQ66R in your browser settings — this does not affect your ability to read content on the site
• Google's Ads Settings: adjust personalized advertising preferences at adssettings.google.com

3. Server Logs (Vercel)

This site is hosted on Vercel. Vercel's infrastructure automatically records server-side request logs that may include your IP address, the URL you requested, HTTP method, browser user agent, response status code, and timestamp. These logs are used for security, debugging, and performance. Vercel's data handling is governed by the Vercel Privacy Policy. Server logs are retained for up to 90 days.

4. How We Use the Information We Collect

• Operating and maintaining the site and ensuring it functions correctly
• Measuring and analyzing traffic, readership patterns, and content performance
• Improving editorial content, navigation, and user experience based on aggregate usage data
• Detecting, preventing, and addressing security issues or technical errors
• Complying with applicable laws, regulations, and legal obligations

We do not use personal information to serve targeted advertisements, and we do not engage in automated decision-making that produces legal or similarly significant effects on individuals.

5. Legal Basis for Processing (EU/UK)

For visitors in the EU/EEA and United Kingdom:

• Google Analytics cookies: processed on the basis of your consent (Article 6(1)(a) GDPR / UK GDPR). You may withdraw consent at any time.
• Vercel server logs: processed on the basis of our legitimate interests (Article 6(1)(f)) in maintaining the security and availability of the site. These logs are not used for marketing or profiling.

6. Sharing and Disclosure of Information

We do not sell, rent, or trade your personal information. We may share information only in the following limited circumstances:

Service providers

We share data with third-party service providers that assist us in operating the site. These providers act as data processors on our behalf:

• Google LLC — analytics services (GA4). Google Privacy Policy.
• Vercel Inc. — web hosting and CDN. Vercel Privacy Policy.
• YouTube (Google LLC) — embedded video players. When you interact with an embedded video, YouTube may set its own cookies under Google's Privacy Policy.

Legal requirements

We may disclose information if we believe in good faith that disclosure is necessary to comply with a legal obligation, court order, or governmental request; or to protect the safety, property, or rights of the site, its operators, or the public.

Aggregate and de-identified data

We may share aggregate, de-identified, or anonymized data — data that cannot reasonably be used to identify you — for research or editorial purposes.

7. Data Retention

• GA4 analytics data: retained for 14 months at the user and event level, then automatically deleted or aggregated. Aggregate reporting data may be retained indefinitely.
• Vercel server logs: retained for up to 90 days for security and troubleshooting.

8. Data Security

We implement reasonable technical and organizational measures to protect the information we collect, including HTTPS encryption for all data transmitted between your browser and our servers, access controls limiting data access to authorized personnel, and periodic security reviews of our service providers. No method of internet transmission is 100% secure, and we cannot guarantee absolute security.

9. Your Privacy Rights

All visitors

Regardless of where you live, you may opt out of Google Analytics data collection using the methods in Section 2.6 above.

EU/EEA and UK residents (GDPR / UK GDPR)

You have the right to access, rectify, erase, restrict, or object to processing of your personal data; withdraw consent; request data portability; and lodge a complaint with your local supervisory authority (for UK residents, the ICO). Because we hold very limited data directly (most sits with Google and Vercel), many requests are best addressed to those processors directly. We will assist where we can.

10. California Privacy Rights (CCPA / CPRA)

This section applies to California residents and supplements the rest of this policy, pursuant to the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), Cal. Civ. Code § 1798.100 et seq.

Categories of personal information collected

In the 12 months preceding the effective date, we have collected the following CCPA categories:

Sale and sharing of personal information

We do not sell personal information as defined by the CCPA/CPRA. We do not share personal information with third parties for cross-context behavioral advertising. We share Internet/network activity data (Category F above) with Google via GA4 in a manner that may constitute a "share" under CPRA if used by Google for advertising purposes. You may opt out using the methods in Section 2.6.

Your California privacy rights

• Right to Know (§ 1798.110): Request disclosure of categories and specific pieces of personal information we hold, sources, purposes, and third parties.
• Right to Delete (§ 1798.105): Request deletion of personal information, subject to exceptions (security, legal obligations).
• Right to Correct (§ 1798.106): Request correction of inaccurate information.
• Right to Opt Out of Sale/Sharing (§ 1798.120): We do not sell. To opt out of data sharing with Google for advertising, use Section 2.6.
• Right to Non-Discrimination (§ 1798.125): We will not discriminate against you for exercising any CCPA/CPRA right.

To submit a verifiable California consumer request, email privacy@boblazarwasright.com with the subject line "California Privacy Request." We will respond within 45 calendar days (extendable by an additional 45 days with notice). We will not require you to create an account to submit a request.

11. International Visitors

This site is operated from the United States. If you access it from outside the US, your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country. Google relies on Standard Contractual Clauses for EU/UK data transfers. Vercel similarly provides appropriate transfer mechanisms under its Data Processing Agreement. For EU/UK visitors, we load GA4 only with your consent.

12. Children's Privacy

This site is not directed at children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal information from children under 13. If you believe a child has provided personal data through this site, contact us and we will take steps to delete it.

13. FTC Compliance Statement

This Privacy Policy is designed to meet the transparency and disclosure standards set forth by the Federal Trade Commission (FTC) under Section 5 of the FTC Act (15 U.S.C. § 45). Specifically:

• We clearly disclose the categories of data we collect and the purposes for which they are used.
• We identify all third-party analytics providers (including Google) that collect data on this site.
• We provide opt-out mechanisms for analytics data collection.
• We do not engage in deceptive data practices or represent our data collection as less extensive than it is.
• This site does not engage in e-commerce, and no payment or financial information is collected.

14. Changes to This Policy

We may update this policy when our data practices change. Material changes will be reflected in the "Last updated" date above. Your continued use of the site after any update constitutes acceptance of the revised policy.

15. Contact

Privacy inquiries, data requests, and opt-out requests:
privacy@boblazarwasright.com
We will respond within 45 days (45 days for California CCPA requests).

Further reading: Google Privacy Policy  ·  GA4 Terms of Service  ·  GA4 data practices  ·  GA opt-out add-on  ·  Vercel Privacy Policy