Site information
Privacy
This policy explains the information involved when you browse CompareFoundry, compare products, or contact us. Its account and review sections apply when those features are available to you.
CompareFoundry is operated by Usama Zafar, a sole trader, at Salixvägen 5, lgh 1003, 756 42 Uppsala, Sweden. Contact support@comparefoundry.com with a privacy question or request.
Comparison selections and search
The comparison tool keeps selections in the page and its shareable URL. Your browser sends the selected product IDs, filters or search terms to the website to load the results you request. We do not save comparisons in a user account or use cookies or browser storage to remember them.
A shared link reveals its selected options and filters to anyone who receives it. URLs can also remain in your browser history and appear in website request logs. Do not enter personal information in a search or comparison URL.
Hosting and security
Cloudflare serves and protects this website. It processes connection and request information, which can include IP addresses, requested URLs and technical details about your browser. We use website error and request logs to diagnose faults and maintain the service. This processing is separate from the traffic measurements described below. See Cloudflare’s privacy policy for more information about its processing.
Review accounts and contributions
For a review account, we store your email address, its verification status, your confirmation that you are at least 18, the policy version and time associated with that confirmation, account and sign-in records, and the review actions associated with your account. We do not ask for your date of birth. We use these records to provide sign-in, manage your contributions, protect the service and handle account or privacy requests. Your email address and age-confirmation record are not part of your public review.
Providing an email address you control and confirming that you are at least 18 are required to create or access a review account. You can decline and continue browsing the catalogue and comparing products, but cannot use an account without those requirements. We keep active account contact and verification records to provide that account; deletion follows the process and retention limits below.
When a review is approved, its alias, rating, text, product or package context, experience details, relationship disclosure, original language, publication and edit dates, and helpful-vote count may be shown publicly. We display the original review text; choosing a different interface language does not translate it. Do not include contact details or other sensitive personal information in a review or alias.
Pending or rejected review text, private report and appeal details, contact information supplied with a report, and moderation explanations are not published as part of the public review. The authorized operator uses them to assess contributions, investigate reports, explain decisions and consider appeals. Public readers do not receive the identity of a reporter.
Information about a contribution can also come from people who report it or provide evidence in an appeal. The operator makes publication and moderation decisions. Automated security checks and request limits may block or delay a protected request; they do not approve a review or decide its rating.
Why we use this information
We rely on performance of the service contract described in our terms to process the information necessary for the account, contributions and account functions you request. We use limited security and moderation records for our legitimate interests in protecting participants, preventing abuse, making fair publication decisions, handling support correspondence and preventing removed content from returning after a restore. We assess whether each use is necessary and whether its impact on you outweighs that interest. Where a specific legal duty requires processing, we use only the information needed for that duty. Optional analytics has a separate consent choice; confirming your age is not consent to unrelated processing.
Service providers and processing locations
Cloudflare provides our website hosting and security. When account and review functions are available, Cloudflare also provides their database, private recovery storage, abuse checks and outgoing service email. Google processes support correspondence as described below. Access is limited to the operator and the providers needed for the relevant service; we do not sell account contact details or private reports. We may disclose limited information where a specific legal obligation requires it.
These providers may process information outside your country, including in the United States. We do not promise that all processing stays within Sweden or the European Economic Area. Cloudflare describes its safeguards in its Data Processing Addendum, including the EU-U.S. Data Privacy Framework for covered transfers and standard contractual clauses where required. Google describes the safeguards for its processing in its data transfer frameworks. You can contact support for details of the applicable recipients and safeguards and how to obtain a copy.
Website traffic and performance
We use Cloudflare Web Analytics on public content pages to measure visits and page performance. We do not add its measurement script to search results, custom comparisons, filtered pages, previews or error pages.
The service reports the page visited, the referring page and browser performance measurements. Cloudflare states that Web Analytics does not use cookies or browser storage and does not track people across customer websites. Hosting and security processing still applies as described above. See Cloudflare’s Web Analytics privacy documentation.
Google Analytics and your choice
If you allow analytics, we use Google Analytics 4 to understand visits and engagement across our pages, including search and comparison tools. Google’s analytics script loads only after you choose “Allow analytics”. Declining analytics leaves the comparison tools available.
We send the page name and path, without URL query strings or fragments, so search terms and comparison selections are not included in our page-view reports. External referrals are reduced to the referring website’s origin. Google also processes browser and device information and analytics identifiers. This is separate from Cloudflare’s hosting and performance processing.
When you follow a seller link after allowing analytics, we also record the product, purchase package, category and seller, where the link appears, and whether it uses affiliate tracking. We do not include the seller URL or its tracking parameters in this event. A click tells us that you followed a link; it does not tell us whether you made a purchase.
Google Analytics can store first-party analytics cookies for up to 180 days. We remember your choice in this browser for 180 days. Use “Analytics preferences” in the footer to change it. Withdrawing consent stops further Google Analytics collection from this browser and removes the analytics cookies created by this integration; it does not delete information already received by Google.
Our Google Analytics property retains user-level and event-level data for two months, without extending user-data retention on each new visit. This setting does not limit the retention of aggregated standard reports. Our Analytics account also permits Google to use analytics data to improve its products and services, contribute to aggregated business insights, provide technical support and make business recommendations.
We do not enable advertising signals, advertising personalization or user-provided data collection in this integration. See how Google uses information from sites that use its services and Google’s privacy policy.
Cookies, sign-in and payments
Browsing the catalogue and comparing products do not require an account. Where account access is available, it uses the security cookies described below. We do not collect card details or load advertising scripts or advertising cookies on CompareFoundry. Optional website analytics has separate controls, described above. Private account and operator pages do not load analytics, and review form-start counting is disabled.
__Host-cf_preauth: Binds a sign-in or protected action to this browser and helps prevent forged requests. It expires after 30 minutes and may be renewed while you use the relevant pages. It does not sign you in.
__Host-cf_session: Keeps you signed in. The cookie lasts up to 7 days; the server also ends the session after 24 hours without qualifying activity. Signing out or another security action may end it sooner.
__Host-cf_challenge: Connects this browser to a pending sign-in or account-confirmation code. It lasts up to 10 minutes and contains a reference to the code request, not the code itself.
__Host-cf_email_old, __Host-cf_email_new: Connect this browser to the two verification steps for an email-address change. Each lasts up to 10 minutes and contains a request reference, not an email address or code.
__Host-cf_erasure: Lets the same browser view the private status of an account-deletion request for up to 30 days. It does not restore the account or grant access to its data.
The owner’s protected account setup also uses __Host-cf_bootstrap_challenge to connect the browser to a pending verification-code request for up to 10 minutes, and __Host-cf_bootstrap_locale to remember the setup language for 30 minutes. The language cookie may be renewed when a setup page is used. These two cookies are used only for private owner setup, not ordinary member journeys.
These cookies are limited to CompareFoundry, use encrypted HTTPS connections and are not accessible to page scripts. Blocking or clearing them can interrupt sign-in, protected actions or access to a deletion-status receipt. They are used for account security and request handling, not advertising.
When account and review functions are available, expired sign-in challenges, email-change flows and temporary abuse counters are removed by bounded cleanup jobs. Invalid sessions no longer grant access even if their database records await cleanup. The validity periods of the cookies above are not promises that every related server or provider record is physically deleted at that moment.
The review service uses temporary keyed identifiers derived from account or connection information to enforce request limits. Its abuse counters do not store raw IP addresses, sign-in codes or review text. This does not change the separate connection and request processing described for our hosting and security services.
Protected account and review forms use Cloudflare Turnstile to check for automated abuse. It processes technical signals, including an IP address, connection and browser signals, and the site involved. Cloudflare processes signals on our behalf to protect this site and acts as a separate controller when using them to improve its bot detection. See Cloudflare’s Turnstile Privacy Addendum. If the check fails or is unavailable, contact support; it cannot be bypassed to submit the protected action.
We use your account email address for sign-in codes and account or review notifications sent through Cloudflare Email Service. These are service messages; creating an account does not subscribe you to marketing. Cloudflare and your email provider process the recipient address, message and delivery information. Sent-message previews are disabled for our sending domain, but this does not mean that delivery or suppression records are absent. A send confirmation does not guarantee inbox delivery. Deletion status uses the private browser receipt described below, not a completion email.
Your account data and deletion requests
After confirming your sign-in again, you can request a copy of the account data available through the privacy page. The download is provided in sections; each section reflects the current records when requested. It does not include another reporter’s identity or staff credentials. You can also contact support about an access or correction request.
Withdrawing a review removes its text and rating contribution from new public responses after the withdrawal is confirmed. A page that someone has already received, or a request already in progress, cannot be recalled. Withdrawal and account deletion are different actions.
Requesting account deletion requires a recent sign-in confirmation and an explicit confirmation of deletion. The request disables the account, ends its sessions and removes its contributions from public display. Private erasure then continues separately. A status of processing does not mean that every retained record has already been erased.
Keep access to the browser used for the deletion request to revisit its private status page while the 30-day status cookie remains valid. If you lose that access, or the request remains unresolved after the cookie expires, contact support@comparefoundry.com. We do not retain a separate email address solely to send a deletion-completion message.
Published reviews remain visible while eligible for publication. Private content follows different cleanup rules: withdrawn review content becomes eligible for erasure after 30 days, other retired versions after 90 days, resolved report and appeal details after 90 days, and private moderation explanations after 365 days. A deletion request can remove eligible account content sooner. These periods describe cleanup eligibility; a pending job or a specific legal hold can delay completion. Minimal linked decision records are separate from the private text. Once the account and review service opens, we will monitor unresolved requests and can explain a continuing restriction through support.
Deleting data from the active service does not immediately erase earlier database recovery copies. Earlier account data can remain in database recovery copies for up to 30 days. A separate private removal journal records identifiers and deletion or withdrawal events so that restoring the service does not make removed content public again. That journal does not contain review text or email addresses. Recovery access is restricted. A restore must apply the removal records and be checked before the service reopens.
After 365 days, eligible native review and case decision records are deleted when no remaining reference requires them, or lose private actor identifiers, reasons and explanations when a necessary historical reference remains. This requires the related review content to have been erased and relevant cases and holds to have cleared. Active publication approvals retain their provenance. Required factual links and separate security, account, role or hold audit records may remain; we do not describe these records as anonymous. A continuing legal hold must have a specific purpose and review date.
Private recovery markers become eligible for disposal only after their signed expiry and the current recovery safety window have passed, and the active database confirms that the associated content was erased longer ago than that window. Markers for unresolved cases, holds or records without sufficient erasure evidence remain. Once the account and review service opens, we will monitor these bounded cleanup jobs; an eligibility date is not an exact physical deletion deadline.
Email correspondence
If you email support@comparefoundry.com, we receive your email address, the message and any attachments you send. We use this information to answer your question or investigate a correction. Cloudflare Email Routing forwards incoming messages to our Gmail inbox, where Google processes and stores them. Your own email provider also processes the message.
We keep correspondence only while needed to handle the request or retain a continuing record of a correction. Please avoid sending sensitive personal information. See Google’s privacy policy for its processing practices.
Your privacy questions and rights
Email support@comparefoundry.com with a question or request about personal information processed through this website or our correspondence. Tell us which information or interaction your request concerns, without sending unnecessary sensitive details.
Depending on applicable law, you may have rights to access, correct or delete your personal information, restrict or object to its processing, or receive a portable copy. Where processing relies on consent, you may withdraw that consent. You may also have the right to complain to your local data-protection authority. These rights can be subject to legal conditions and exceptions.
If you believe your personal information has been processed incorrectly, you can contact the Swedish Authority for Privacy Protection (IMY) to make a complaint. You can also contact the relevant data-protection authority in your country. Contacting support does not prevent you from exercising that right.
External websites
Seller and source links take you to other websites. Their privacy policies apply when you visit them or place an order. CompareFoundry does not receive your payment details or order information from these ordinary links.
Links marked “Affiliate link” may pass through an affiliate network before reaching the seller. Our QIDI affiliate links use Awin; see Awin’s privacy policy for its handling of consumer information. The network or seller may use identifiers or cookies to attribute a purchase under its own privacy policy. We do not load affiliate-network tracking scripts or set affiliate cookies on CompareFoundry. Our optional Google Analytics measurement is described above and is separate from a seller's or network's processing after you follow a link.
Changes to this policy
We will update this page when our data practices change. Original policy reviewed: . Awin affiliate-link information updated: . Account and review additions reviewed: .