No cookies, no trackers
This site sets no cookies, stores nothing in your browser and loads no third-party scripts, fonts or analytics. Our own product photos are served from this site. Some product images are loaded from Amazon's image servers; Amazon's own privacy notice applies to those requests.
Server logs
Our web server keeps standard access logs (IP address, requested page, time, referring page and browser type). We use them to keep the site secure, for example to block automated attacks. The logs are deleted automatically after 14 days and are not shared with anyone. The legal basis is our legitimate interest in running a secure site.
Counting visits
To learn which pages are read, our own script on this site sends a short note to our server each time a page is shown. It contains the page address (without anything after a question mark), the name of the website that linked to us if you came from another site (for example google.com, never the full address of that page), whether you are on a phone, tablet or computer (worked out from the screen size and whether it is a touch screen) and a random number for this page view, which is new every time a page is opened and is not stored anywhere in your browser. If you then tap, click, scroll or press a key on the page, the same note is sent once more, marked as a real visit. That is how we tell readers apart from programs that only load pages.
When the note arrives, our server works out a visitor code from your IP address (for IPv6 only the network part), your browser's identification string, today's date and a secret key, using a one-way function (SHA-256). Only the code is stored with the note; your IP address and browser details are not. To stop floods of fake notes, the server also keeps a scrambled form of the address in its working memory, as a counter that expires after two minutes; it is never written to disk. Within one day the code shows that several page views came from the same browser, which is how we count visitors. Because the date is part of the calculation, the code changes every day, so we cannot follow you from one day to the next or across other websites, and we do not try to find out who you are.
Known search engines and automated tools are not counted. If your browser sends a Do Not Track or Global Privacy Control signal, the script sends nothing at all.
The stored rows (time, page, linking website, device type, the random page-view number, visitor code and whether you interacted) are deleted automatically after 25 months. We use them only as totals, such as visits per day and the most read pages, and share them with no one. The legal basis is our legitimate interest in knowing which guides help readers.
Counting clicks on Amazon links
When you click a link to Amazon, our own script sends us two things: which product the link was for and which page it was on. We store only that and the time, to learn which guides actually help readers. No cookies, no IP address, no browser details and no personal data are stored with it, and nothing is shared with anyone.
When you click a link to Amazon
You leave this site. Amazon's privacy notice applies from that point. Amazon knows that you arrived from NextPick4You so that it can attribute a commission.
Your rights
Under the GDPR you may ask what data we hold about you and request its deletion. Write to info@nextpick4you.com. The site is operated from Sweden.