Privacy Policy

Last updated: July 2026

1. Information We Collect

1.1 Analytics Data

If you accept analytics cookies, we use Google Analytics 4 to understand how visitors interact with our website. Google Analytics may collect:

  • Page views: Which pages you visit and in what order
  • Session duration: How long you spend on our site
  • Geographic data: Approximate location (country/city level)
  • Device information: Browser, operating system, screen resolution
  • Traffic sources: How you found our site (search engine, direct, referral)
  • User interactions: Tool views, searches, affiliate link clicks

1.2 Cookies

We use necessary preference storage and, only with consent, analytics and attribution cookies to:

  • Analyze site traffic and user behavior (Google Analytics)
  • Remember your cookie consent preferences
  • Associate outbound clicks with a pseudonymous 30-minute session and campaign parameters
  • Improve site performance and user experience

1.3 Submitted Form Data

If you choose to submit a form, we collect only the fields needed for that request:

  • Newsletter signup: email address and signup source
  • Tool submission: tool name, website, description, and optional contact email
  • We do not collect payment details, government IDs, or user-account passwords through these forms

2. How We Use Your Information

We use analytics and submitted form data to:

  • Improve content: Understand which AI tools users find most valuable
  • Optimize UX: Identify navigation patterns and pain points
  • Track performance: Monitor site speed and technical metrics
  • Send requested newsletter updates and manage duplicate signups
  • Review submitted tools and contact submitters when needed
  • Support affiliate partnerships: Count eligible outbound visits without storing raw IP addresses or user-agent strings in our application database

3. Google Analytics & GDPR

3.1 Google's Data Processing

Google Analytics is a service provided by Google LLC. Google processes data in accordance with their Privacy Policy.

3.2 Anonymization

We limit optional analytics with:

  • No raw IP address or user-agent string stored in the WhichAITools application database
  • Google Analytics loaded only after this version of consent is accepted
  • Advertising storage disabled
  • Advertising personalization disabled

3.3 Your Rights Under GDPR

If you are located in the European Union, you have the right to:

  • Opt-out: Decline the cookie banner or use browser settings
  • Access: Request a copy of data associated with your submitted email
  • Rectification: Request correction of inaccurate data
  • Erasure: Request deletion of your data
  • Restrict: Object to processing of your data
  • Data Portability: Receive your data in a structured format

To exercise these rights, contact us at the email provided at the bottom of this page.

4. Cloudflare Web Analytics

We also use Cloudflare Web Analytics, which is privacy-first and does not use cookies. Cloudflare collects:

  • Page views and visitor counts
  • Geographic regions (country level)
  • Referring websites

Cloudflare does not track individual users across sessions or collect personally identifiable information. Learn more in the Cloudflare Privacy Policy.

5. Affiliate Links & Disclosure

Some links on our site are affiliate links. This means we may earn a commission if you make a purchase through these links, at no additional cost to you.

We clearly mark affiliate content with:

  • Disclosure statements on tool detail pages
  • rel="sponsored" attributes on affiliate links
  • Visual badges for sponsored placements

Affiliate partnerships do not influence our editorial recommendations. We prioritize user value over commission rates.

6. Third-Party Links

Our website contains links to external AI tool websites. We are not responsible for the privacy practices or content of these third-party sites. We encourage users to read the privacy policies of any external sites they visit.

7. Children's Privacy

Our service is not intended for children under 13. We do not knowingly collect information from children under 13. If you are a parent or guardian and believe your child has provided us with data, please contact us.

8. Data Retention

Google Analytics: Google retains analytics data according to the retention settings configured for the property.

Cloudflare: Retains analytics data according to its service settings and privacy terms.

Newsletter and tool-submission records are stored in Supabase until they are no longer needed for the requested update or editorial review, or until a valid deletion request is completed.

Outbound redirect events may include a random event identifier, tool, source label, destination type, consent state, and bot classification. If analytics is accepted, they may also include a one-way session digest, referrer path, and UTM campaign fields. Detailed consent-based attribution is limited to a 90-day operational retention window; longer-term reporting uses aggregates.

9. Data Security

We use safeguards for the website and submitted form data, including:

  • HTTPS encryption for all connections
  • Server-side validation for newsletter and tool-submission fields
  • Turnstile verification when the deployment keys are configured
  • Generic error responses that do not expose database details

10. International Data Transfers

Google Analytics, Cloudflare, and Supabase may process data outside the European Economic Area. Their applicable safeguards include:

  • Google: EU Standard Contractual Clauses (SCCs)
  • Cloudflare: EU-US Data Privacy Framework and SCCs
  • Supabase and its infrastructure providers: contractual and regional safeguards described in their privacy terms

11. How to Opt-Out

You can disable analytics in several ways:

  • Cookie banner: Click "Decline" when prompted
  • Browser settings: Block or delete cookies in your browser preferences
  • Ad blockers: Enable privacy-focused extensions (uBlock Origin, Privacy Badger)
  • Google Analytics opt-out: Google Analytics Opt-out Browser Add-on

Declining or withdrawing analytics consent does not prevent you from browsing the site or submitting forms. Withdrawal clears our 30-minute session and campaign cookies. We may still record a coarse outbound redirect event without a stable session, referrer, or UTM data for redirect reliability, bot filtering, and aggregate integrity.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify users of significant changes by:

  • Posting the new policy on this page
  • Updating the "Last updated" date
  • Displaying a notice on our website

We encourage you to review this policy periodically.

13. Contact Us

If you have questions, concerns, or requests regarding this privacy policy or our data practices, please contact us at:

Email: [email protected]

We will respond to your inquiry within 30 days.