Your data, plainly explained.

1. Who we are

The data controller.

ATrueReview is an independent editorial site publishing research-based buying briefs and reviews. The site is operated from Latvia, European Union. For privacy questions or to exercise the rights described below, contact us via the address listed on the contact page.

2. What we collect today

Analytics and standard server logs.

ATrueReview runs Cloudflare Web Analytics, a cookieless analytics service that measures aggregate page views, referrers, and performance metrics without tracking individuals across sites and without collecting personal data. The Cloudflare Insights script (beacon.min.js) loads from static.cloudflareinsights.com on every page. Cloudflare's privacy practices for this service are described at cloudflare.com/web-analytics.

We also run Google Analytics 4 (measurement ID G-68X71BVBZG), provided by Google LLC in the United States. Unlike the Cloudflare service, Google Analytics sets cookies in your browser — typically _ga and _ga_* — and processes data such as a truncated IP address, device and browser information, the pages you view, and on-site interactions to produce aggregate audience and usage reports. The gtag.js script loads from googletagmanager.com on every page, and the resulting data is transferred to Google in the United States under the European Commission's Standard Contractual Clauses. Google's handling of this data is described in the Google Privacy Policy. You can opt out across all sites by installing Google's Analytics opt-out browser add-on, or by blocking or clearing cookies in your browser at any time.

Other than the Google Analytics cookies described above, the site sets no cookies of its own, runs no advertising scripts, no social-media pixels, and no fingerprinting libraries. Fonts are self-hosted; images are same-origin.

Our hosting provider (Hostinger) and CDN (Cloudflare) record standard server-access logs as part of operating the service. These typically include the requesting IP address, user-agent string, timestamp, and requested URL. We use these only to investigate availability or security incidents. They are retained per our providers' policies, not ours.

If you send us an email through the address on the contact page, we receive your message, your email address, and whatever you choose to include. We use that information solely to reply.

3. What we may add

What this policy will need to disclose later.

When the site begins running any of the following, this policy will be updated and the version number incremented before the change goes live:

• A further analytics or measurement tool beyond the Cloudflare and Google Analytics services already named in section 2 — if added, this policy will be updated to describe what it collects and whether it sets cookies before the change goes live.
• Affiliate-link click tracking — when you click a link to a retailer or service provider, that provider may set their own cookies and record the click for attribution. These cookies are set by the destination site, not by ATrueReview. The per-link rel="sponsored" attribute and the disclosure on each affected page make this visible.
• Display advertising (AdSense, Mediavine, Ezoic, or similar) — if and when display ads are introduced, an explicit consent banner will be added at the same time and this policy will describe each network used, the cookies it sets, and how to opt out.

Until then, the answers in section 2 apply.

4. Legal basis for processing

Why we are allowed to process what we do.

Under GDPR Article 6, our current processing rests on two grounds:

• Legitimate interest (Article 6(1)(f)) for our analytics — Cloudflare Web Analytics and Google Analytics 4 — and for hosting-level server logs. These help us understand, secure, and improve how the site is used. Cloudflare's service is aggregate and cookieless; Google Analytics sets cookies, and you can decline it at any time through the browser-level opt-out controls described in section 2.
• Consent (Article 6(1)(a)) for any email correspondence you initiate with us — sending the message is the consent.

When display advertising is added, the legal basis for ad scripts and any related cookies will be explicit consent collected through a banner.

5. Your rights

What you can ask us to do.

Under GDPR you have the right to:

• request a copy of any personal data we hold about you (access),
• have inaccurate data corrected (rectification),
• have your data deleted where we have no overriding ground to keep it (erasure),
• restrict our processing while a question is resolved,
• receive your data in a portable format,
• object to processing based on legitimate interest, and
• lodge a complaint with the Latvian Data State Inspectorate (Datu valsts inspekcija) or your local supervisory authority.

To exercise any of these rights, write to us at the address on the contact page. We respond within 30 days, usually sooner.

In practice, because we do not maintain user accounts and do not associate server logs with identified individuals, most requests will return the empty set. We answer them anyway.

6. Children

This site is not directed at children under 16.

We do not knowingly collect personal data from children under 16. If you believe a child has sent us personal data through the contact page, write to us and we will delete it.

7. International transfers

Where your data may travel.

Hostinger hosts the site within the European Economic Area. Cloudflare operates a global CDN; if a request is served from a node outside the EEA, the transfer relies on the standard contractual clauses Cloudflare publishes for that purpose. We do not transfer personal data ourselves.

8. Changes to this policy

How updates are signaled.

When this policy changes in any way that affects your rights, we update the version number and the "last updated" date at the top of the page before the change goes live. Material changes — for example, introducing analytics or advertising — are also called out in the next site update note.

9. Automated decision-making

We do not profile you.

ATrueReview does not run automated decision-making or profiling in the sense of GDPR Article 22. Editorial recommendations are made by humans.