Privacy Policy

1. Who is the data controller

Wrongbuy is operated by David Z, an independent editor based in Sweden ("we", "us", "Wrongbuy"). Contact: hello@wrongbuy.com.

2. What personal data we collect

Directly: None.

We do not:

• Run Google Analytics, Plausible, Umami, Matomo, or any other analytics service
• Set first-party cookies
• Embed tracking pixels (Meta, TikTok, X, LinkedIn, or similar)
• Operate a newsletter signup or email capture
• Host user accounts or logins
• Provide contact forms that capture data server-side (we publish an email address instead)
• Log, retain, or analyze server-side request data

Our hosting provider (Cloudflare Pages) processes standard HTTP request metadata — your IP address, user-agent string, and requested URL — for the sole technical purpose of serving the page to your browser. We do not receive, access, or analyze this data. Cloudflare's own practices are governed by Cloudflare's privacy policy.

3. Third-party affiliate links

Wrongbuy publishes editorial recommendations that link to Amazon and other retailers' product pages. When you click an affiliate link and arrive at the destination site, that site may set cookies, track your session, and record your purchase in order to attribute a commission to Wrongbuy.

This tracking is performed by the destination site, not by Wrongbuy, and is governed entirely by that site's own privacy policy. Amazon's affiliate tracking is covered by the Amazon Privacy Notice. Similar principles apply to every other retailer we link to.

If you want to avoid this tracking: use private browsing, block third-party cookies in your browser, or do not click our affiliate links.

4. Legal basis under the GDPR

For the limited technical processing that occurs when Cloudflare serves our pages, the legal basis under Article 6(1)(f) of the General Data Protection Regulation is legitimate interest — specifically, the interest of delivering editorial content to readers who have voluntarily requested it.

Because Wrongbuy collects and retains no personal data about you, no further lawful-basis analysis is required for our own processing.

5. Your GDPR rights

Under the GDPR, if we held personal data about you (which we do not), you would have the right to:

• Access the data we hold about you
• Rectify inaccurate data
• Erase your data ("right to be forgotten")
• Restrict processing
• Object to processing based on legitimate interest
• Port your data to another controller

Because we do not collect your data in the first place, these rights have no practical application to Wrongbuy. If you believe we have mistakenly collected data about you, contact hello@wrongbuy.com and we will investigate immediately.

6. Supervisory authority

If you are in the EU and believe your data-protection rights have been violated, you have the right to lodge a complaint with your national supervisory authority. In Sweden, the competent authority is:

Integritetsskyddsmyndigheten (IMY)
imy@imy.se · imy.se

7. International transfers

When you click a Wrongbuy affiliate link to Amazon.com or another US-based retailer, your browser will communicate directly with servers outside the EU — typically in the United States. Wrongbuy does not facilitate this transfer beyond linking to the destination. The destination site's own privacy policy governs any transfer of your data.

8. Children

This site is intended for general audiences. We do not knowingly direct content at, or collect data from, persons under 16 years of age.

9. Data retention

We retain no personal data. Retention period: none.

10. Changes to this policy

If we materially change this policy — for example, if we ever introduce analytics or a newsletter — we will publish a revised version on this page and announce the change at least 30 days before it takes effect. The "Last updated" date at the top of this page always reflects the most recent revision.

11. Contact

Questions about this policy: hello@wrongbuy.com.