Privacy Policy

1. Information We Collect

1.1 Analytics Data

If you accept analytics cookies, we use Google Analytics 4 to understand how visitors interact with our website. Google Analytics may collect:

• Page views: Which pages you visit and in what order
• Session duration: How long you spend on our site
• Geographic data: Approximate location (country/city level)
• Device information: Browser, operating system, screen resolution
• Traffic sources: How you found our site (search engine, direct, referral)
• User interactions: Tool views, searches, affiliate link clicks

1.2 Cookies

We use necessary preference storage and, only with consent, analytics and attribution cookies to:

• Analyze site traffic and user behavior (Google Analytics)
• Remember your cookie consent preferences
• Associate outbound clicks with a pseudonymous 30-minute session and campaign parameters
• Improve site performance and user experience

1.3 Consent and Analytics Reliability Logs

Before and after you choose an analytics preference, our first-party service may record a bounded operational event so we can verify that the banner, preference storage, withdrawal cleanup, and analytics script are working correctly.

• The application event contains only a fixed event name, banner surface, accepted or declined choice when applicable, coarse failure or HTTP status class, an hourly server bucket, and the deployed release identifier when available
• The application event does not contain free text, a stable visitor or session identifier, page URL, referrer, email address, raw IP address, or user-agent string
• These events are used only for reliability, security, and consent enforcement; they are not Google Analytics events, advertising data, user profiles, or proof that Google received an analytics event
• Detailed operational events are retained for no more than 30 days; longer-term reliability reporting uses aggregate counts without visitor identifiers

1.4 Submitted Form Data

If you choose to submit a form, we collect only the fields needed for that request:

• Newsletter signup: email address and signup source
• Tool submission: tool name, website, description, and optional contact email
• We do not collect payment details, government IDs, or user-account passwords through these forms

1.5 Commercial Inquiries

If you contact us about a commercial pilot, we use the information you choose to send to assess fit, prepare and administer a written scope, deliver the requested service, handle refunds or disputes, and meet legal obligations. An inquiry is not an order, and no payment is collected on the inquiry page. If you later accept a paid scope and an approved checkout is available, the checkout identifies the payment processor before payment and the processor handles the transaction under its own terms and privacy notice.

• Contact name, business email address, company or product name, and product URL
• Requested outcome, preferred timing, scope details, source materials, and correspondence you choose to provide
• Written order, delivery, correction, cancellation, refund, and dispute records if both sides later accept a service scope
• For an accepted paid order, the processor may handle buyer contact and billing details, product and order identifiers, amount, currency, tax, payment, receipt or invoice, refund, and dispute information needed to process the transaction
• We do not collect or store card or bank credentials; those details are entered directly into the processor checkout
• Do not send passwords, API keys, card or bank details, government identifiers, health information, or personal data that is not needed for the requested scope

2. How We Use Your Information

We use analytics, submitted form data, and commercial inquiry data to:

• Improve content: Understand which AI tools users find most valuable
• Optimize UX: Identify navigation patterns and pain points
• Track performance: Monitor site speed and technical metrics
• Monitor consent reliability: Detect failures in preference storage, withdrawal cleanup, and analytics script loading
• Send requested newsletter updates and manage duplicate signups
• Review submitted tools and contact submitters when needed
• Assess commercial pilot fit, prepare written scopes, deliver accepted services, and administer cancellations, refunds, or disputes
• Create and administer an accepted order through the payment processor identified at checkout, including payment, tax, receipt or invoice, refund, and dispute processing
• Support affiliate partnerships: Count eligible outbound visits without storing raw IP addresses or user-agent strings in our application database

3. Google Analytics & GDPR

3.1 Google's Data Processing

Google Analytics is a service provided by Google LLC. Google processes data in accordance with their Privacy Policy.

3.2 Anonymization

We limit optional analytics with:

• No raw IP address or user-agent string stored in the WhichAITools application database
• Google Analytics loaded only after this version of consent is accepted
• Advertising storage disabled
• Advertising personalization disabled

3.3 Your Rights Under GDPR

If you are located in the European Union, you have the right to:

• Opt-out: Decline the cookie banner or use browser settings
• Access: Request a copy of data associated with your submitted email
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data
• Restrict: Object to processing of your data
• Data Portability: Receive your data in a structured format

To exercise these rights, contact us at the email provided at the bottom of this page.

4. Cloudflare Web Analytics

We also use Cloudflare Web Analytics, which is privacy-first and does not use cookies. Cloudflare collects:

• Page views and visitor counts
• Geographic regions (country level)
• Referring websites

Cloudflare does not track individual users across sessions or collect personally identifiable information. Learn more in the Cloudflare Privacy Policy.

5. Affiliate Links & Disclosure

Some links on our site are affiliate links. This means we may earn a commission if you make a purchase through these links, at no additional cost to you.

We clearly mark affiliate content with:

• Disclosure statements on tool detail pages
• rel="sponsored" attributes on affiliate links
• Visual badges for sponsored placements

Affiliate partnerships do not influence our editorial recommendations. We prioritize user value over commission rates.

6. Third-Party Links

Our website contains links to external AI tool websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage users to read the privacy policies of any external sites they visit.

7. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13. If you are a parent or guardian and believe your child has provided us with data, please contact us.

8. Data Retention

Google Analytics: Google retains analytics data according to the retention settings configured for the property.

Cloudflare: Retains analytics data according to its service settings and privacy terms.

Newsletter and tool-submission records are stored in Supabase until they are no longer needed for the requested update or editorial review, or until a valid deletion request is completed.

Outbound redirect events may include a random event identifier, tool, source label, destination type, consent state, and bot classification. If analytics is accepted, they may also include a one-way session digest, referrer path, and UTM campaign fields. Detailed consent-based attribution is limited to a 90-day operational retention window; longer-term reporting uses aggregates.

Consent and analytics reliability events are retained in detailed form for no more than 30 days. After that period, only aggregate operational counts without visitor identifiers may be retained.

Commercial inquiries that do not become an accepted service are ordinarily deleted within 90 days after the last substantive contact. Accepted scopes, delivery evidence, corrections, cancellations, refunds, disputes, and related accounting records are retained only while needed to deliver the service, enforce the written agreement, meet tax or legal obligations, or resolve a dispute, and are then deleted or de-identified. You may request access, correction, or deletion through the privacy contact below, subject to legal retention requirements.

9. Data Security

We use safeguards for the website and submitted form data, including:

• HTTPS encryption for all connections
• Server-side validation for newsletter and tool-submission fields
• Turnstile verification when the deployment keys are configured
• Generic error responses that do not expose database details
• Commercial inquiry mail and working evidence are limited to authorized operators and access-controlled private storage; they are not stored in public analytics artifacts
• Commercial email and evidence providers may process data in the regions and under the safeguards described in their own privacy terms
• The payment processor handles checkout payment details under its own terms; WhichAITools retains only the limited order references, status summaries, and records needed for delivery, support, accounting, refunds, disputes, and legal obligations

10. International Data Transfers

Google Analytics, Cloudflare, Supabase, and the payment processor identified at checkout may process data outside your country or the European Economic Area. Their applicable safeguards and privacy terms include:

• Google: EU Standard Contractual Clauses (SCCs)
• Cloudflare: EU-US Data Privacy Framework and SCCs
• Supabase and its infrastructure providers: contractual and regional safeguards described in their privacy terms
• Payment processor: transaction processing and international-transfer safeguards described in the processor's own privacy notice

11. How to Opt-Out

You can disable analytics in several ways:

• Cookie banner: Click "Decline" when prompted
• Browser settings: Block or delete cookies in your browser preferences
• Ad blockers: Enable privacy-focused extensions (uBlock Origin, Privacy Badger)
• Google Analytics opt-out: Google Analytics Opt-out Browser Add-on

Declining or withdrawing analytics consent does not prevent you from browsing the site or submitting forms. Withdrawal clears our 30-minute session and campaign cookies. We may still record a coarse outbound redirect event without a stable session, referrer, or UTM data for redirect reliability, bot filtering, and aggregate integrity.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes by:

• Posting the new policy on this page
• Updating the "Last updated" date
• Displaying a notice on our website

We encourage you to review this policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at:

Email: Contact channel temporarily unavailable

We will respond to your inquiry within 30 days.