Privacy

Who is responsible

This site is ekonook, published at ekonook.eu. For data protection law, we are the controller of the personal data described below. You can reach us at hello@ekonook.eu about anything on this page.

This policy has not been reviewed by a lawyer. It is written to describe honestly what the site does. If you think something here is wrong or incomplete, tell us and we will fix it.

Reading the site

You do not need an account to read anything here, and we do not ask you to identify yourself. If you agree to it, we count which pages are read - see Audience measurement below. If you refuse, nothing at all is counted and the site works exactly the same.

As with any website, the server that delivers these pages keeps technical logs - your IP address, the time, the page requested, and what your browser reports about itself. These exist to keep the site running and to investigate faults and abuse, they are kept for a short period, and they are not used to build any profile of you.

Audience measurement

With your agreement, this site counts what is read, so we know which guides are worth writing and which pages nobody finds. It is our own counting, running on our own server: no Google Analytics, no third-party script, and nothing is shared with anyone.

What is recorded for each page you open: the page address without its language prefix, the language shown, the site you came from if you followed a link from elsewhere (the site, for example google.com - never what you searched for), whether you are on a phone, a tablet or a computer, and a random token that lives in the tab and disappears when you close it, so that one person reading eight pages is not counted as eight people. Clicks on links leaving the site are counted the same way, by destination shop, because that is how we know a recommendation was useful.

What is not recorded: your IP address (it is used in memory to stop automated abuse and is never written down), the full address of the page you came from, any identifier that outlives the tab, and anything at all about who you are - we do not know, and cannot work out, your age, your sex, your income or whether you are expecting. Analytics products that report those figures obtain them from advertising networks; we do not, and we would rather say so than show you a number we made up. Records are deleted after six months. You can also ask not to be counted at all, whatever you answered to the banner: open /ek/no-count and this browser stops being recorded for five years. The same address undoes it. We use it ourselves - the people who write this site read it all day, and counting them would tell us nothing about you.

Cookies this site sets itself

A handful of small cookies, and only when they are needed. NEXT_LOCALE remembers which of the 24 languages you chose, so the site does not send you back to English on every visit, and ek_consent remembers whether you said yes or no to the banner, so the question is not put to you on every page. Each holds a single word - a language code, or granted / denied - and nothing else. Neither can be refused, because refusing them is what they are for.

If you sign in - to an account of your own (ek_account), or as one of us to edit the site (payload-token) - a session cookie keeps you signed in, and a companion marker (ek_editor) tells the page that an editor is present so the editing bar can appear. A visitor who never signs in never receives them. Products you save before signing in are held in your browser (ek_favourites), not sent to us.

None of these are advertising cookies and none of them identify you across other websites. If you ask not to be counted, ek_no_count remembers that choice, and only that: a single digit, readable by the server alone. It exists in order not to record anything.

Advertising

This site carries advertising from Google AdSense, which is how it pays for itself instead of charging brands for placement. Google may set cookies or read identifiers on your device to select and measure ads, and in doing so acts as an independent controller of that data.

Inside the European Economic Area and the United Kingdom, personalised advertising requires your consent. You are asked before any advertising cookie is set, you can refuse as easily as accept, and you can change your mind at any time. If you refuse, you may still see advertising, but it will not be based on a profile of you.

What Google does with advertising data is governed by its own policies, at policies.google.com/technologies/ads and policies.google.com/privacy. This may involve processing outside the European Economic Area, under the safeguards described there. We receive only aggregate figures - how many times ads were shown and what they earned - never anything about an individual reader.

Links to shops

When you follow a link to a shop, you leave this site. That shop sets its own cookies, applies its own privacy policy and, where the link is an affiliate link, may record that you arrived from here so that a commission can be attributed. We never receive your name, your address, your payment details or the contents of your basket - only, at most, the fact that a purchase happened.

We have no control over what those sites do with your data. Their privacy policy applies from the moment you arrive there.

If you send us a suggestion

The suggestion form asks for a product or brand, optionally your name and email address, and whatever you want to tell us. What you type is stored in this site’s own database so that we can read it, act on it and reply. Giving your name and email is optional; without them we simply cannot come back to you.

To stop the form being used by robots, we count how many suggestions arrive from the same IP address within an hour. That count is held in the server’s memory for the length of the window and is never written to the database or attached to your message.

We keep suggestions for as long as they are useful - a product still on the list to review, or a conversation still open - and delete them once they are not. If you want yours deleted sooner, ask.

If you create an account

An account stores your email address - which is also how you sign in - a password we never see in clear (it is hashed by the software that runs this site), optionally a first name, used only to sign a registry you choose to share, and the language you last picked while signed in, so the site opens in it on any device you sign in from. We ask for nothing else: no date of birth, no due date, no postal address.

An account holds the products you save and any baby registry you create. Saved products stay in your browser until you sign in; once you have an account they are kept with it, so you find them again on another device. A registry you share is reachable by an unguessable link - anyone holding that link can see the list, which is the point of sharing it, and the page is not indexed by search engines.

You can delete your account from the site at any time, which deletes the saved list and any registry with it. If you forget your password, we email you a link that lets you set a new one; that link expires within the hour. When you create an account, we also send one message confirming it, so that whoever owns the address knows - and can ask us to delete an account they did not create. Those two emails are the only messages this site sends you - we run no newsletter and no marketing, and they are sent through Resend, the delivery service we use, which sees your address in order to deliver it.

On what legal basis

Advertising cookies, the identifiers that go with them, and our audience measurement: your consent, asked for before anything is stored or counted, refused as easily as accepted, and withdrawable at any time from the bottom of any page. Everything else on this site works whether or not you consent.

The language cookie, the cookie holding your answer to that question, the server logs and the handling of a suggestion you chose to send: our legitimate interest in running a site that works, resists abuse and answers the people who write to it. Session cookies are strictly necessary for the person signing in.

Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Write to hello@ekonook.eu and we will answer within a month. In practice, unless you have sent us a suggestion, we hold nothing that identifies you.

You can also complain to the data protection authority in your country if you think we have handled your data badly. You are entitled to do that whether or not you contact us first.

Children

This site is written for adults buying for babies and children. It is not directed at children, and we do not knowingly collect anything about them. Nothing here asks for information about your child, and we would rather you did not send any.

Changes to this policy

If what the site does changes - an audience measurement tool added, notification emails switched on, anything sold directly - this page changes with it, and the review date above is updated. It is worth re-reading if you have not looked at it in a while.