8. Newsletter and Communications
If you subscribe to our newsletter, we collect your email address and preferred language solely to send you our product guides and comparisons each week.
- Legal basis: Consent (Art. 6.1.a GDPR)
- Email provider: Resend (resend.com, United States) — transfer governed by Standard Contractual Clauses (SCC, Art. 46 GDPR)
- Unsubscribe: Every email includes an immediate unsubscribe link. You may also write to [email protected].
- Retention: Your data is deleted within 30 days of unsubscription.
9. Social Media and Third-Party Channels
WiseProductAdvisor distributes content on Pinterest (product pins) and YouTube (comparison Shorts). These platforms have their own privacy policies. We do not collect any personal data through these channels.
10. Virtual Assistant – AI Chatbot
WiseProductAdvisor provides an AI-powered virtual assistant (chatbot), accessible via the « ? » button at the bottom right of your screen.
- Purpose: Answer your product questions and guide you to relevant articles.
- Data collected: Only the message you type and your session language. No personally identifiable information is stored.
- Storage: Conversations are not retained. Each session is anonymous and ephemeral.
- AI model: Open-source language model (Llama 3 / Qwen) running locally on our servers. No data is transmitted to third parties.
- Transparency: In compliance with the EU AI Act, you are informed that you are interacting with AI.
- Legal basis: Legitimate interest (Art. 6.1.f GDPR).
11. Accessibility
WiseProductAdvisor is committed to web accessibility in accordance with EN 301 549 and WCAG. Our target level is WCAG AAA.
- Features: Accessibility panel via the « Accessibility » button: text-to-speech, high contrast, text zoom.
- Keyboard navigation: Full keyboard navigation with visible focus indicators.
- Contrast: Minimum 7:1 ratio for text (WCAG AAA).
- Statement: Full declaration available upon request at [email protected].
12. Security and Infrastructure Services
We use Cloudflare as our content delivery network (CDN) and security service. Cloudflare may collect limited technical data (IP address, browser type, pages visited) solely to provide its security and optimization services. This data is processed in accordance with Cloudflare’s privacy policy and is not used for profiling purposes.
Data Controller: Remy Bully – [email protected]
Analytics Data Collection
Since May 2026, we have implemented a centralized analytics platform that cross-references data from the following tools:
Google Analytics 4 (GA4)
We use Google Analytics 4, a web analytics service by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Data collected: pages visited, session duration, bounce rate, traffic source, approximate country, device type. IPs are anonymized. Legal basis: consent (Art. 6.1.a GDPR). GA4 is disabled until you accept analytics cookies. Retention: 14 months. Data may be transferred to the US (Data Privacy Framework).
Matomo (self-hosted)
We use Matomo, a self-hosted analytics platform on our servers (Hetzner, Frankfurt). Data collected: pages visited, visit duration, device type, traffic source. No third-party data sharing, no tracking cookies, anonymized data. Legal basis: legitimate interest (Art. 6.1.f GDPR).
Sentry (self-hosted)
We use Sentry, a self-hosted error and performance tracking platform. Data collected: error URL, error type, browser, OS, page load time (p95). Legal basis: legitimate interest (Art. 6.1.f GDPR). Retention: 30 days errors, 90 days traces.
Google Trends & YouTube Trends
We use the public Google Trends and YouTube Data APIs. Data: trending keywords, relative interest (0-100). Aggregated and anonymous. Legal basis: legitimate interest (Art. 6.1.f GDPR).
Google Search Console (GSC)
We use Google Search Console for SEO performance analysis. Data: search queries, impressions, clicks, average position. Per-page data, no identifiable visitors. Legal basis: legitimate interest (Art. 6.1.f GDPR).
Unified Analytics Database
We centralize this data in a secure internal database. Local storage, no personally identifiable information, no third-party transfers. Indefinite retention for anonymized aggregated data.