Privacy Policy

1. Data we collect

• Account data: email, hashed password (bcrypt), display name, saved preferences.
• Newsletter data: email address, subscription source, and unsubscribe token.
• Community review data: display name, email, role, plan used, duration of use, review text, conflict disclosure.
• Affiliate click data: clicked product, retailer, page path, IP address, user agent.
• Analytics data: page paths, referrers, device class, country (Google Analytics 4 only with consent).
• Advertising data: Meta Pixel and Google Ads conversion events (only with consent).
• Cookie consent log: visitor identifier, consent choices, timestamp, IP, user agent.

2. Why we collect it (purposes)

• Provide editorial content and software recommendations.
• Authenticate users and store their preferences.
• Send newsletters the user opted into.
• Moderate community reviews.
• Track affiliate clicks for revenue attribution.
• Measure traffic and improve content (only with consent).
• Retarget visitors and measure ad conversions (only with consent).

3. Legal basis (EEA/UK visitors)

We process the data above under one or more of the following legal bases: (a) your consent (e.g. analytics, advertising, optional newsletters), (b) performance of a contract (e.g. account and alert services), or (c) legitimate interest (e.g. basic site security, fraud prevention). You can withdraw consent at any time via Cookie Preferences.

4. Cookies and tracking

We use cookies for authentication, language, and analytics. Analytics and advertising cookies are only set after you grant consent. You can change your choices at any time from Cookie Preferences.

5. Sharing and processors

We share data only with vetted processors:

• Email delivery: Operator-configured SMTP.
• Database and application hosting: PostgreSQL on managed VPS; backups retained for 30 days.
• Analytics: Google Analytics 4 (only with consent).
• Advertising: Meta Platforms and Google Ads (only with consent).
• Affiliate networks: partner programs that pay us when you purchase.

6. International transfers

Some processors are located outside your jurisdiction. We rely on Standard Contractual Clauses or equivalent safeguards where required.

7. Retention

We retain personal data for as long as necessary to provide our services or to comply with legal obligations. Account data is deleted within 24 months of account closure. Cookie consent records are retained for 6 months. Affiliate click records are retained for 24 months for tax and audit purposes.

8. Your rights

Depending on where you live, you have some or all of the following rights:

• Access: obtain a copy of personal data we hold about you.
• Correction: fix inaccurate or incomplete data.
• Deletion: request that we delete your data.
• Restriction: limit how we process your data.
• Portability: receive data in a portable format.
• Objection: object to processing based on legitimate interest.
• Withdraw consent: at any time, without affecting prior processing.
• Complaint: lodge a complaint with your local data protection authority.

9. Children

Our services are not directed to children under 16. We do not knowingly collect personal data from children.

10. Changes to this policy

We will update this page when our practices change and will revise the effective date. Material changes will be announced on the homepage.

11. Contact and supervisory authority

Operated by

TopRatedSoftware

Address

Online-only publisher; no public office

Privacy and data requests

privacy@topratedsoftware.net

EEA and UK residents may also lodge a complaint with their local data protection authority. We will cooperate with any investigation.