Privacy Policy
Last updated: 30 September 2026 · Effective: 30 September 2026
1. Who we are
This site is operated by a private individual based in Cyprus. The data controller in the meaning of GDPR Art. 4(7) is the individual named on our Imprint page. For privacy enquiries, contact [email protected].
2. What we collect
We collect only what is necessary to operate the site and improve it editorially:
- Server access logs — IP address, user-agent, requested URL, timestamp. Retained by our hosting provider (Cloudflare Pages) for security and abuse-prevention; not aggregated by us beyond standard provider analytics.
- Google Analytics 4 — aggregated, anonymised page-view and event data via the GA4 measurement ID. We use IP-anonymisation and do not enable Google Signals or cross-device features. The legal basis is consent (GDPR Art. 6(1)(a)): Google Analytics loads only after you accept cookies.
- Affiliate click events — when you click an affiliate link marked
rel="sponsored", we record the partner name and the page you were on. This is sent to GA4 as a custom event (affiliate_click) and to the affiliate network so the partner can attribute the referral. No personal data is added. - Email correspondence — if you write to us, we retain the message until your enquiry is closed plus any retention period required by applicable law.
We do not run remarketing tags, fingerprinting scripts, social-media trackers, or third-party advertising networks.
3. Cookies and similar technologies
Our site uses a small number of cookies:
- Strictly necessary: session-storage entries that remember whether you dismissed a sticky banner. No legal basis required (ePrivacy Recital 25).
- Statistics: GA4 sets
_gaand_ga_*cookies (max 2 years), only after you click “Accept” on the consent banner, for every visitor. Nothing loads from Google before you choose.
The full list of cookies, their purposes and retention periods is in our Cookie Policy. You can change or withdraw your choice at any time via “Cookie settings” in the footer of every page, refuse cookies through your browser settings, or install the Google Analytics Opt-out Browser Add-on.
4. International transfers
GA4 is operated by Google LLC (US). Transfers rely on Google’s EU-US Data Privacy Framework certification. Cloudflare hosting may route requests through edge locations outside the EU; Cloudflare provides Standard Contractual Clauses for any incidental personal-data exposure.
5. Affiliate links
Many outbound links to vendors are affiliate links and earn us a commission if you sign up. These are clearly marked with rel="sponsored" and disclosed at the top of every review. The partner network sees the click but receives only what is necessary for attribution. See our Methodology for how affiliate relationships affect (and do not affect) our editorial verdicts.
6. Your rights
If you are an EU/UK resident, GDPR Art. 15-22 grants you the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interest. California residents have analogous rights under CCPA/CPRA. Send any request to the contact on the Imprint page; we respond within one calendar month.
You also have the right to lodge a complaint with your supervisory authority. The lead supervisory authority for this site is the Office of the Commissioner for Personal Data Protection (Cyprus) — dataprotection.gov.cy. EU/EEA residents may also contact their local national authority.
7. Children
This site is not directed at children under 16. We do not knowingly collect data from children.
8. Changes
We will update this page when our processing changes. The “last updated” date at the top of the page reflects the most recent revision; substantive changes will be flagged in the introduction for at least 30 days.
Questions about this policy: see Imprint. Material errors: see Corrections Policy.