This site is deliberately boring in privacy terms, and this page describes what actually happens rather than what a template would say.
We set no cookies and store nothing on your device. There is no login, no account, no newsletter, no contact form and no comment section. Nothing you do here is written to your browser's storage.
This is also why you will not see a consent banner. Consent is required for storing or reading information on your device — and there is nothing here to consent to.
When you simply read a page, our own code stores nothing about the request. It writes a record only when you click a link to Amazon; what that record holds is described under “When you click through to Amazon” below. Delivering any page still means that our host, Cloudflare, processes technical request data; that is described under “Hosting”. We do not store your IP address and we do not build a profile of you.
Buy links pass through our own /go address, which counts the click
and then forwards you to Amazon. The record holds only the product that was
clicked, the page and the spot on the page the click came from, the time, the
country the request came from (country level, nothing finer), and your browser's
user agent, which we use to tell automated requests apart from visits; the result
of that check is stored with the record as a flag. It does not include your IP
address, we set no cookie, and we assign no identifier that would let us recognize
you. We use these records only to see which content on this site is useful. They
are stored with our host Cloudflare (see Hosting below). The legal basis is
Art. 6(1)(f) GDPR (legitimate interest in shaping the site around what
visitors need).
Once you land on Amazon, you are on Amazon's site under Amazon's privacy policy, and what they collect from that point on is between you and them.
The site is hosted by Cloudflare (Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA). Serving a page necessarily means Cloudflare processes the request, including your IP address, date and time, the requested URL, referrer and browser identifier, in order to deliver it and to protect against attacks. Because the operator is based in Germany, the EU General Data Protection Regulation applies; the legal basis is Art. 6(1)(f) GDPR (legitimate interest in secure and stable operation).
Cloudflare acts as a processor under Art. 28 GDPR: its Data Processing Addendum is part of its terms of service and incorporates the EU Standard Contractual Clauses. For transfers to the United States, Cloudflare relies on its certification under the EU-U.S. Data Privacy Framework (adequacy decision under Art. 45 GDPR).
If any of the above stops being true, this page changes first. It describes the site as it is built, not as we would like it to appear.