Privacy policy
This policy explains what we collect when you visit thehabitverdict.com, why, and what you can do about it. We are the data controller. Contact: [email protected].
What we collect
- Analytics data — pages viewed, referring source, approximate location from IP, device and browser type. Collected through Google Tag Manager and Google Analytics, and only if you consent where consent is required.
- Click data — when you click an outbound offer link we record that the click happened and which page it came from, so we can attribute commission.
- Email you send us — the address and content of any message, kept so we can answer it.
We do not ask for or store names, postal addresses, payment details or account credentials. There is no login, no shopping cart and no newsletter on this site.
What we do not do
We do not sell personal information, and we do not share it with data brokers. We do not build advertising profiles about you across other websites.
Legal basis
For visitors in the EEA, UK and Switzerland: strictly necessary and security storage relies on our legitimate interest in operating a working, secure website. Analytics and advertising storage rely on your consent, which is denied by default until you give it and which you can withdraw at any time through the cookie banner. For visitors elsewhere, we rely on legitimate interest and provide the opt-out below.
Cookies and similar technology
- Essential — remember your consent choice. Always on. No opt-out, because the choice has to be stored somewhere.
- Analytics — Google Analytics via Google Tag Manager, to count visits and see which pages are read. Off until you consent.
- Attribution — a click identifier passed to the merchant's affiliate network when you follow an outbound link, so the sale is credited to us. The merchant's own privacy policy governs everything after you leave this site.
Third parties
Google (analytics and tag management), Cloudflare (hosting, CDN and DDoS protection), and the merchant's affiliate network (click attribution). Each processes data under its own policy. Transfers outside the EEA rely on the European Commission's Standard Contractual Clauses.
How long we keep it
Analytics data: 14 months. Click and attribution data: 24 months, which is the commission dispute window. Email correspondence: 24 months from the last message. Server logs: 30 days.
Your rights
Under GDPR you can request access, correction, erasure, restriction, portability, and you can object to processing based on legitimate interest. Under the CCPA/CPRA and comparable US state laws you can request disclosure and deletion, and you can opt out of sale or sharing — we do not sell or share, so that opt-out is already the default. To exercise any right, email [email protected]. We reply within one month. EEA and UK residents may also complain to their national supervisory authority.
Children
This site is not directed to children under 16 and we do not knowingly collect their data. If you believe a child has sent us information, email us and we will delete it.
Changes
We update this page when our practices change and revise the date at the top. Material changes will be flagged on the site.