Privacy Policy
Last updated: 6 May 2026 · Effective: 6 May 2026
1. Who we are
This site is operated by Kulik Media UG (haftungsbeschränkt), registered in Germany. The data controller in the meaning of GDPR Art. 4(7) is the entity named on our Imprint page. For privacy enquiries, contact us via the channels listed there.
2. What we collect
We collect only what is necessary to operate the site and improve it editorially:
- Server access logs — IP address, user-agent, requested URL, timestamp. Retained by our hosting provider (Cloudflare Pages) for security and abuse-prevention; not aggregated by us beyond standard provider analytics.
- Google Analytics 4 — aggregated, anonymised page-view and event data via the GA4 measurement ID. We use IP-anonymisation and do not enable Google Signals or cross-device features. The legal basis is consent (GDPR Art. 6(1)(a)) or, where consent is not required, legitimate interest (Art. 6(1)(f)) limited to anonymised statistics.
- Affiliate click events — when you click an affiliate link marked
rel="sponsored", we record the partner name and the page you were on. This is sent to GA4 as a custom event (affiliate_click) and to the affiliate network so the partner can attribute the referral. No personal data is added. - Email correspondence — if you write to us, we retain the message until your enquiry is closed plus any retention period required by German tax or commercial law.
We do not run remarketing tags, fingerprinting scripts, social-media trackers, or third-party advertising networks.
3. Cookies and similar technologies
Our site uses a small number of cookies:
- Strictly necessary: session-storage entries that remember whether you dismissed a sticky banner. No legal basis required (ePrivacy Recital 25).
- Statistics: GA4 sets
_gaand_ga_*cookies (max 2 years). These require consent in the EEA / UK.
You can refuse non-essential cookies through your browser settings or via the consent banner when implemented. Until the consent banner ships, EU/UK visitors who wish to opt out can install the Google Analytics Opt-out Browser Add-on.
4. International transfers
GA4 is operated by Google LLC (US). Transfers rely on Google’s EU-US Data Privacy Framework certification. Cloudflare hosting may route requests through edge locations outside the EU; Cloudflare provides Standard Contractual Clauses for any incidental personal-data exposure.
5. Affiliate links
Many outbound links to vendors are affiliate links and earn us a commission if you sign up. These are clearly marked with rel="sponsored" and disclosed at the top of every review. The partner network sees the click but receives only what is necessary for attribution. See our Methodology for how affiliate relationships affect (and do not affect) our editorial verdicts.
6. Your rights
If you are an EU/UK resident, GDPR Art. 15-22 grants you the right to access, rectification, erasure, restriction, data portability, and to object to processing based on legitimate interest. California residents have analogous rights under CCPA/CPRA. Send any request to the contact on the Imprint page; we respond within one calendar month.
You also have the right to lodge a complaint with your supervisory authority — in Germany the BfDI; for cross-border issues, the lead supervisory authority of the data controller’s establishment (Berlin Beauftragte für Datenschutz und Informationsfreiheit).
7. Children
This site is not directed at children under 16. We do not knowingly collect data from children.
8. Changes
We will update this page when our processing changes. The “last updated” date at the top of the page reflects the most recent revision; substantive changes will be flagged in the introduction for at least 30 days.
Questions about this policy: see Imprint. Material errors: see Corrections Policy.