Privacy Policy
We collect as little as we can get away with, and this page says exactly what that is — who processes it, how long it's kept, and how to have it deleted.
Last updated · August 10, 2026
The short version
- We don't sell or rent your personal data. Ever.
- We don't run advertising networks, retargeting pixels or third-party ad cookies on this site.
- Our analytics are aggregate and cookieless — we can see that a review was read 4,000 times from Germany, not who read it.
- The only personal data we actively store is what you type into a form: your email address if you subscribe, plus your name and message if you contact us.
- Affiliate links are the exception we can't control: when you click through to a retailer, that retailer sets its own cookie so it knows the visit came from us.
The rest of this page is the detail behind those five points, written so you can check it rather than take our word for it.
Who we are
Keen Review is an independent product-review publisher. For the purposes of the UK and EU GDPR we are the data controller for personal data collected through this site. Privacy questions and data requests go to privacy@keenreview.com, and we aim to reply within five business days.
What we collect
- Information you give us
- Your email address when you subscribe to the newsletter. Your name, email address, chosen subject and message when you use the contact form. Nothing on this site asks for a payment method, a date of birth, or a government ID.
- Information collected automatically
- Standard web-server information — IP address, browser user agent, the page requested, the referring page and a timestamp — recorded in short-lived hosting logs, plus aggregate analytics about which pages are read, from which country, on which device type.
- Information stored in your own browser
- Your cookie-banner choice and any reviews you save with the bookmark button are kept in your browser's local storage on your device. They are not transmitted to us and we cannot read them from our servers.
We do not knowingly collect special-category data (health, biometrics, political or religious views), and we ask you not to include any in a contact message.
How we use it, and our legal basis
- To reply to you. If you write to us, we use your name and email to answer and, where relevant, to correct a review. Legal basis: our legitimate interest in responding to correspondence.
- To send the newsletter. Only to addresses that asked for it. Legal basis: your consent, withdrawable at any time.
- To understand what's useful. Aggregate analytics tell us which guides are read and which pages are slow, so we know what to test and fix next. Legal basis: legitimate interest in running and improving the site, using measurement that cannot identify you.
- To keep the site up and secure. Server logs let us diagnose errors and block abuse. Legal basis: legitimate interest in site security.
- To get paid. Affiliate attribution — handled by the retailer, not by us — is what funds the testing. See our affiliate disclosure.
We never use your data for automated decision-making or profiling, and we don't build advertising profiles.
Who else touches your data
We use a small number of service providers, each bound to process data only on our instructions. We do not sell, rent or share personal data with data brokers, and we have no advertising partners.
| Provider | Purpose | Data involved | Location |
|---|---|---|---|
| Vercel | Hosting, CDN and server logs | IP address, user agent, requested URL (in short-lived request logs) | United States / global edge network |
| Vercel Web Analytics & Speed Insights | Aggregate traffic and page-speed measurement | Page path, referrer, country, device and browser type, performance timings — no cookies, no cross-site identifier | United States / EU |
| Supabase (PostgreSQL) | Our database — stores site content plus anything you type into a form | Newsletter email addresses; contact-form name, email, subject and message | Managed cloud infrastructure |
| Affiliate networks and retailers | Attributing a purchase to the link you clicked | Set by the retailer once you leave our site — see their own privacy policy | Varies by retailer |
Fonts are self-hosted and served from our own domain, so viewing a page makes no request to a third-party font provider.
We may also disclose data where the law requires it, or to establish or defend a legal claim. If Keen Reviewis ever sold or merged, personal data may transfer as part of that transaction, and this policy will continue to apply until you're told otherwise.
International transfers
Our providers operate globally, so data — including data from readers in the UK and EEA — may be processed in the United States and other countries. Where that happens we rely on the providers' Standard Contractual Clauses or an equivalent approved safeguard.
How long we keep things
- Newsletter subscriptions — until you unsubscribe or ask us to delete the record, whichever comes first.
- Contact-form messages — up to 24 months, so we can follow up on a correction and keep a record of how it was handled. Deleted sooner on request.
- Hosting request logs — short-lived, retained by our host for operational and security purposes only.
- Aggregate analytics — retained indefinitely, because it contains no personal data by the time it reaches us.
Your rights
Depending on where you live you may have the right to access a copy of your data, correct it, delete it, restrict or object to how we use it, port it elsewhere, and withdraw consent you previously gave. Under US state privacy laws such as the CCPA/CPRA you also have the right to know what is collected and to opt out of sale or sharing — we do not sell or share personal information, and we do not use it for cross-context behavioural advertising, so there is nothing to opt out of.
To exercise any right, email privacy@keenreview.comfrom the address concerned. We won't charge you, we won't treat you differently for asking, and we'll respond within 30 days. If you think we've got it wrong, you can complain to your local data-protection authority — in the UK, the Information Commissioner's Office.
Security
The site is served over HTTPS. Form submissions are stored in an access-controlled managed database, and administrative access is limited to the people who need it. No system is perfectly secure, so we keep the amount of personal data we hold as small as possible — the best protection for data is not collecting it.
Children
The site is intended for adults and isn't directed at children under 16. We don't knowingly collect their data. If you believe a child has given us personal information, write to privacy@keenreview.comand we'll delete it.
Changes to this policy
We update this policy when the site changes or the law does. The revision date at the top of the page always reflects the current version; for material changes we'll flag them here and in the newsletter.
Contact
Privacy questions and data requests: privacy@keenreview.com. Anything else: hello@keenreview.com or the contact page.
