Privacy Policy
Effective date: 27 September 2026
This Privacy Policy explains how HonestReviews handles information in connection with honest-reviews.org, including site usage, links to providers and messages you send us.
Who is responsible for your information
The operator and controller for this website is Honest Reviews Tech LLC, referred to in this policy as “HonestReviews,” “we,” “us” or “our.”
Privacy contact: privacy@honest-reviews.org
Postal address: 611 South Dupont Highway, Suite 102, Dover, DE 19901, United States
This policy applies to HonestReviews. Our sister site, HonestFarewell, has its own Privacy Policy. Providers and affiliate networks you visit through our links also have their own policies.
Information we handle and why
| Activity | Information involved | Purpose |
|---|---|---|
| Website analytics | Page-view records, a random per-tab identifier, country, device type and referring site | Understand which pages are used and improve the website |
| Links to providers | Click-out records and a click identifier used for affiliate attribution; see the field details below | Record referrals and reconcile resulting affiliate activity |
| Affiliate conversion reports | Conversion information returned by Impact, CJ or the relevant advertiser and matched to a click identifier | Determine whether a qualifying action occurred and reconcile commissions |
| Correction reports | The page and issue you report, supporting information, and an optional reply-to email address | Investigate and correct errors, and respond if you provide contact details |
| Other correspondence | Your email address, message and any information you choose to send | Answer questions, provide support and handle legal or privacy requests |
| Website delivery and security | Technical information processed by our infrastructure and anti-abuse providers | Deliver pages, protect forms and maintain the service |
Click-out and conversion fields: With the relevant permission, our click-out records contain a random click ID (ULID), product, network link, source page path, list position and variant, country, device type, consent state and referring site (origin only). An affiliate link can send the click ID to the network as Impact subId1 or CJ sid. The network and destination also receive the technical information necessary for your browser connection. Our outbound links are configured not to send the referring page URL.
We limit conversion-report imports to the click ID, network or advertiser, transaction reference, qualifying action and date, status, transaction value and currency, and commission information needed to reconcile a referral. We do not request customer names, email addresses, delivery addresses, payment details or purchased-item descriptions in those imports. Network report fields are checked before use; a transaction reference can still be personal information.
As of 27 September 2026, no affiliate network relationship or network link is active, and no click identifier has been transmitted to a network. The affiliate descriptions explain how these features will operate if activated.
Please send only information needed for your request. Do not include medical records, protected health information, payment-card details, passwords or identity documents in a general support message or correction report.
Our cookieless analytics
Our optional first-party analytics do not use analytics cookies. With your permission, they use a random identifier kept in your browser’s session storage for that tab. This helps us understand activity within a tab session. Refusing or withdrawing analytics permission stops this collection and removes our analytics identifier from that tab.
The descriptive information collected with our page-view analytics is limited to country, device type and the referring site. We do not store IP addresses in our first-party analytics dataset.
“Cookieless” does not mean that no information is processed. Session storage is a browser storage technology, and an identifier can still relate to a browsing session. Our website infrastructure must also process technical information to deliver pages and protect the service. That processing is separate from our first-party analytics dataset.
We retain raw page-view records for 90 days. After that, we retain daily totals rather than individual page-view records.
Affiliate links and conversion information
When you permit referral tracking and follow a provider link, our redirect service records the click. If an affiliate arrangement is active, it can pass a click identifier to the network and later match a permitted conversion report to that identifier. Without permission, or when GPC is detected, we use an available direct provider link without our affiliate tracking.
This process shares information with the network and advertiser. It lets us determine whether a referral resulted in a qualifying action and whether a commission is payable. The identifier is not your name, but it should not be assumed to make the activity anonymous.
Once you visit an external website, that website and any involved network may process additional information under their own privacy notices and applicable choices. Our description of first-party cookieless analytics does not describe every technology used by those third parties.
Your analytics and tracking choices
Optional analytics and affiliate attribution are off until you make an affirmative choice. You can allow them separately, reject both, or withdraw a previous choice in Privacy settings. We honor Global Privacy Control (GPC) as a refusal of both. GPC is a browser or extension setting that communicates a privacy preference to websites. Necessary page delivery, security and storage of your privacy choice continue.
Effect on affiliate attribution after refusal, withdrawal or GPC: We do not create a new affiliate click ID, record the click, add affiliate tracking parameters or route the request through an affiliate network. We use a direct provider link without our tracking where available. We do not use a later report or callback to reconstruct an opted-out visit. We may retain limited records of an earlier, lawfully attributed transaction to reconcile a commission, meet legal duties or address a dispute, under the retention limits below. Your choice does not erase records already held by a provider or network; their notices explain how to exercise rights with them.
These controls address our collection and affiliate routing. After you choose to visit a provider directly, that provider still receives the information needed to deliver its site and is responsible for its own tracking choices. We do not promise that a third-party website uses no cookies or other identifiers.
For help with a privacy choice, contact privacy@honest-reviews.org. A preference applied to one browser or device may not apply to another. GPC and other browser preferences do not, by themselves, remove information already retained; you can separately request deletion where applicable.
California and other US state privacy rights
Sale, sharing and targeted advertising: As of 27 September 2026, we have not disclosed click identifiers or conversion records to affiliate networks or advertisers because no affiliate arrangement is active. If activated, affiliate attribution involves online identifiers, browsing or referral information and transaction-related information disclosed to networks and advertisers for commission attribution. We treat these remunerated disclosures as a sale for our opt-out controls. If a recipient uses the information for cross-context behavioral advertising, that use may also be sharing or targeted advertising under applicable state law. This classification does not depend on receiving a separate payment for each identifier. We do not knowingly sell or share information about anyone under 16.
Some privacy laws define “sale” to include certain transfers for valuable consideration, and “sharing” can have a specific advertising-related meaning. An affiliate relationship therefore cannot be assessed solely by whether we receive a direct payment for a particular data record.
Available opt-out methods: Select Do Not Sell or Share My Personal Information in the footer, reject optional tracking in Privacy settings, or enable GPC. These choices are available to all visitors and stop future covered affiliate disclosures as described above; no account or identity verification is required for the browser opt-out. Email privacy@honest-reviews.org for help or other rights requests. A browser choice applies to that browser, so repeat it on other devices or use GPC there.
Where applicable law gives you these rights, you may request access to information about you, correction, deletion or a portable copy, and opt out of covered sale, sharing or targeted advertising. You may use an authorized agent where allowed. We will not unlawfully discriminate against you for exercising a privacy right.
Send requests to privacy@honest-reviews.org. We may need proportionate information to verify a request or an agent's authority. We do not require identity verification for an opt-out where the law prohibits that requirement. If a right to appeal applies, you can reply to our decision to request an appeal.
EEA and UK visitors
Legal bases: Where the EU or UK GDPR applies, we rely on consent for optional analytics and affiliate attribution. As an operating policy, we use prior consent for those activities for all visitors. We rely on legitimate interests in secure website delivery, abuse prevention, responding to correspondence, investigating corrections and defending legal claims, after considering your rights. Limited commission reconciliation uses our legitimate interest in accurate accounts; processing required by an applicable legal duty uses that duty as its basis. Consent to optional tracking is not required to read the website, send a correction or exercise privacy rights.
Where consent is required, relevant optional processing must remain off until valid consent is given. Withdrawing consent does not affect processing that was lawful before withdrawal.
Depending on applicable law and the circumstances, you may have rights of access, correction, erasure, restriction, portability and objection, and the right to withdraw consent. You may also complain to the data-protection authority responsible for your location.
EEA and UK contact: Honest Reviews Tech LLC has no EEA or UK establishment and has not appointed an EU or UK representative. Contact privacy@honest-reviews.org or write to the US mailing address above. We will publish the name and contact details of any representative required for our operations before starting the activity that requires that appointment. Our US contact details are not presented as an Article 27 representative.
Organizations involved in operating the service
We use Cloudflare for hosting, delivery, Turnstile form protection, evidence storage and Email Routing, and Neon for database services. Messages to our published email addresses are forwarded through Cloudflare to a Google Gmail inbox, so Google also processes those messages and related information. These services may process connection and security information, including IP addresses, even though our first-party analytics dataset does not store IP addresses. Their contractual roles and any separate processing responsibilities depend on the particular service.
If affiliate arrangements are activated, Impact, CJ and participating advertisers will be involved in permitted referral and conversion processing. They may have responsibilities of their own under privacy law; their role is not necessarily the same as a hosting or database provider acting on our instructions.
We may also disclose information when legally required, to respond to a valid legal process, or to investigate abuse and protect legal rights, subject to applicable law.
How long information is kept
| Information | Retention |
|---|---|
| Raw first-party page-view records | 90 days, followed by deletion of individual records and retention of daily totals |
| Aggregate daily analytics totals | Up to 25 months from the date summarized, then deleted. Totals exclude session and click identifiers; small groups are combined or suppressed where needed to prevent identification. |
| Optional correction reply-to email | Deleted from the report and our related mailbox copies within 12 months of receipt, unless the specific legal-hold exception below applies. |
| Click-out identifiers and conversion records | Click-level records and identifiers: up to 90 days after the click. Conversion reconciliation records: up to 24 months after final settlement or resolution of the transaction. Source CSVs: deleted within 30 days after verified import. Accounting totals and settlement records without browsing identifiers: up to 7 years after the relevant financial year ends. We retain no more detail than the accounting purpose needs. |
| Correction content, verification evidence and editorial history | Correction reports: up to 24 months after closure, with contact details removed within 12 months of receipt. Verification evidence and editorial history: while the relevant content is published or relied on, then up to 3 years after its last use. We review necessity annually and redact unnecessary personal information. Non-identifying public correction notes may remain with the article. |
| General support, legal and privacy correspondence | General support and legal correspondence: up to 24 months after the matter closes. A minimal record of a privacy-rights request and our response: 24 months after the final response. Correction reply-to information follows the shorter 12-month limit. Active disputes and legal holds are addressed below. |
| Infrastructure/security logs and related provider records | Routine operational and security logs under our control: up to 30 days. Selected evidence of an actual incident: up to 24 months after the investigation closes. Providers may keep separate records for their own security or legal responsibilities under their notices; our limits do not purport to override those independent obligations. |
| Copies awaiting removal from backups | Neon point-in-time recovery history: a rolling 6 hours under the current plan. Additional backup copies we create: no more than 30 days. Deleted information in recovery copies is isolated from ordinary use and expires with the recovery cycle. If a copy is restored, we reapply recorded deletions before ordinary processing resumes. Live mailbox copies, object versions and exports follow the relevant category limit and are not treated as exempt backups. |
Deleting a correction report's reply-to address does not require us to erase a non-identifying correction note or the evidence supporting an editorial change. We avoid publishing private contact details in those records.
A binding preservation duty or a specific, reasonably anticipated legal claim may require a limited exception. We restrict the affected records to that purpose, review the need at least every six months and delete them when it ends. This exception can include a correction reply-to address only where preserving that address is necessary. It does not authorize routine indefinite retention or continued marketing use. We explain an applicable deletion exception when responding to a request, unless the law prevents us from doing so.
International processing
The organizations supporting this website may process information in different countries. Data-protection rules in those locations may differ from those where you live.
Our database is hosted by Neon on AWS in Oregon, United States (us-west-2). Evidence files use Cloudflare R2 with an Eastern North America location hint (ENAM); that hint is not a guarantee that every copy or processing step remains there. Cloudflare serves pages through its global network. Email is routed by Cloudflare to Google Gmail and may be processed in countries where those providers operate.
For a transfer subject to EEA or UK transfer restrictions, we require a valid adequacy basis covering the recipient and data, or appropriate contractual safeguards with any necessary supplementary measures. These may include applicable European Commission standard contractual clauses and, for UK data, the UK Addendum or International Data Transfer Agreement. The mechanism must cover the actual service and transfer; a provider’s general privacy statement alone does not establish this. We do not claim that Honest Reviews Tech LLC is certified under the EU-US Data Privacy Framework or its UK Extension. Contact privacy@honest-reviews.org for details or a copy of applicable safeguards, with confidential terms redacted where necessary.
You can contact us to ask about the safeguards that apply to your information.
Children
This website is intended for adult readers making product and service decisions. It is not directed to children under 13, and we do not knowingly seek personal information from children under 13. If you believe a child has submitted information to us, contact privacy@honest-reviews.org so we can investigate and take appropriate action.
Security and requests we cannot match
We use safeguards appropriate to the information and services involved, but no website or transmission method can guarantee absolute security.
Because our analytics do not use a named account, we may be unable to associate an analytics record with a particular person making a request. We will explain relevant limitations rather than collect unnecessary identifying information simply to create a match.
Changes and contact
We update this policy when our practices or applicable requirements change. The publication date shown on this page identifies when the current version takes effect. When required, we provide additional notice or obtain consent before a change takes effect.
Questions and requests: privacy@honest-reviews.org.