Privacy Policy

This Privacy Policy applies to trustedbuyerreport.com and all services operated under the Trusted Buyer Report brand ("we", "us", "our"). It explains how we collect, use, share, and protect your personal information when you visit our site, use our AI tools, submit a review, subscribe to our newsletter, or contact us.

Data controller: Trusted Buyer Report  ·  Contact: privacy@trustedbuyerreport.com

• Log data: IP address, browser type and version, operating system, referring URL, pages visited, time spent, error logs. Retained for 90 days. Used for security, analytics, and abuse prevention.
• Device data: Screen resolution, device type (desktop/mobile), language setting. Used to serve the correct layout and improve site performance.
• Analytics data: Aggregated page-view and session data via Google Analytics 4 (anonymised IP). Used to understand which content is useful and improve the site.

• Account data: First and last name, email address, bcrypt-hashed password, profile photo (optional), account creation date.
• Review data: Store or product reviews you submit, star ratings, verified-purchase flag (if you connect a purchase receipt), and any photos you attach.
• Newsletter data: Email address, subscription date, and whether you open or click emails (via ESP tracking pixel, which you can opt out of).
• Contact data: Name, email, subject, and message body when you use our contact form.

• Affiliate networks: Click-through and purchase confirmation events from Amazon Associates, ShareASale, CJ, Impact, Rakuten, Walmart, and eBay Partner Network. This data is used solely to attribute commissions.
• Social login (optional): If you choose to sign in via Google or Apple, we receive your name, email, and profile picture from that provider. We do not receive your social media password.

We do not use your data for automated decision-making that produces legal or similarly significant effects. Our AI tools analyse store data — not individual user profiles.

We use cookies and similar tracking technologies (local storage, pixel tags) on this site. Strictly necessary cookies are set automatically. All other categories require your consent via the cookie banner shown on your first visit.

• When you click a link to Amazon.com on this site, a referral tag (e.g. tag=trustedbuy-20) is appended to the URL.
• Amazon sets a 24-hour session cookie on Amazon.com. If you purchase within that session, we receive a commission of 1–10% depending on the product category.
• We receive aggregated commission data from Amazon — we do not receive your name, address, payment details, or any personally identifiable information about your purchase.
• Amazon's tracking operates under Amazon's own privacy policy. If you are an Amazon Prime member or logged-in user, Amazon's privacy terms apply to data Amazon collects about your behaviour on its platform.

We do not sell your personal data to data brokers, advertising networks, or any other third parties for their own commercial use. This applies to all users, including California residents under CCPA.

You may request early deletion of your personal data at any time — see §9 GDPR rights and §10 CCPA rights. Note that published reviews credited to your account will be anonymised (not deleted) to preserve the integrity of our editorial record, unless there is a legal basis for full deletion.

• All data transmitted between your browser and our servers is encrypted with TLS 1.3 (HTTPS enforced site-wide).
• Passwords are hashed with bcrypt (cost factor 12) — we never store plaintext passwords and cannot retrieve them.
• Database access is restricted to application-layer processes; no direct external database access is permitted.
• All internal staff access to personal data is role-based and logged. Only staff with a legitimate operational need can access user data.
• Automated security scanning and dependency updates are run on a weekly schedule.
• Backups are encrypted at rest using AES-256 and stored in a geographically separate region.

This site is intended for users aged 13 and older. We do not knowingly collect personal data from children under 13 (or under 16 in the EU/UK where applicable). If we become aware that we have inadvertently collected personal data from a child under the applicable age threshold, we will delete it promptly.

If you believe a child has provided us with personal information, please contact us immediately at privacy@trustedbuyerreport.com.

We review this Privacy Policy at minimum every 6 months and whenever there is a material change to our data practices. The version number and effective date at the top of this page always reflect the current version.

For material changes — changes that affect how we use your personal data in a significant way — we will notify registered users by email at least 14 days before the change takes effect. Continued use of the site after the effective date constitutes acceptance of the revised policy.

Non-material changes (grammar, formatting, clarifications that do not alter the substance of our data practices) will be updated without individual notification, though the version number will increment.