Privacy and cookie policy

Summary: Necessary storage supports site functions and remembers your privacy choice. For U.S. visitors, analytics and advertising measurement may operate by default where permitted. You can opt out at any time, and supported Global Privacy Control signals automatically disable advertising uses. Other regions remain denied by default. BuyeReports does not sell personal information for money.

1. Scope and who is responsible

This policy applies to buyereports.com and pages operated under the BuyeReports brand. For the processing described here, BuyeReports is the site operator and, where applicable, the controller or business responsible for personal information. Contact us at contact@buyereports.com.

BuyeReports is focused on U.S. consumers. We have not appointed a data protection officer because our current activities do not require one. If an EU or UK representative becomes legally required for our activities, this policy will be updated before the relevant processing begins.

2. Information we collect

Category	Examples	Source
Contact information	Email address and the content of a correction, privacy request or business inquiry.	Directly from you when you email us.
Device and network information	IP address, browser and device type, operating system, language, approximate region, timestamps and security logs.	Automatically from your browser and hosting/security providers.
Site activity	Pages viewed, referring page, navigation, outbound link clicks, campaign parameters and consent choices.	From site functions and, only with required permission, analytics or advertising tools.
Affiliate and campaign information	Click identifiers, referring page, merchant destination and aggregated conversion or commission reporting. We generally do not receive your payment-card details or full retailer order record.	Affiliate networks, merchants and campaign partners.
Local preferences	Cookie choices, compare-list selections and session features such as whether an exit message was shown.	Stored locally in your browser.

3. How and why we use information

4. GDPR and UK GDPR legal bases

Where the GDPR or UK GDPR applies, we rely on the following legal bases:

• Consent: optional analytics, advertising storage and personalized advertising where consent is required. You may withdraw consent at any time through “Privacy choices.”
• Legitimate interests: operating, securing and improving the site; measuring non-intrusive aggregate performance; preventing misuse; and maintaining business records, balanced against your rights.
• Contract or steps at your request: responding to inquiries concerning a potential commercial relationship.
• Legal obligation: complying with tax, accounting, regulatory, legal-process and privacy obligations.

5. Cookies, local storage and Google technologies

Cookies are small text files, and similar technologies include browser local storage, pixels and device identifiers. BuyeReports uses region-aware Google Consent Mode v2 settings. For U.S. traffic, analytics and advertising measurement signals may default to granted where permitted; visitors can opt out or change categories at any time. For regions not specifically configured, advertising, advertising user data, ad personalization and analytics storage remain denied by default. Supported Global Privacy Control signals override the U.S. advertising default. Your choices are remembered for up to 180 days unless you clear browser data or change them sooner.

Category	Examples	Purpose and duration
Necessary	br_cookie_consent_v1, compare-list storage and session preference brExitShown	Consent and local feature settings. Consent is retained up to 180 days; session storage ends when the browser session ends; compare settings remain until cleared.
Analytics, if enabled	Google Analytics cookies such as _ga	Audience and site-performance measurement. Google states that _ga may last up to 2 years. For U.S. visitors these technologies may be active by default where permitted and can be disabled through Privacy Choices.
Advertising, if enabled	Google cookies or identifiers such as _gads, _gcl_*, IDE and related technologies	Ad delivery, frequency controls, fraud prevention, conversion measurement and personalization when allowed. Duration varies by technology, region and user settings.
Affiliate links	Click and campaign identifiers used by merchants or affiliate networks after an outbound click	Attribution and commission reporting under the destination service’s own privacy and retention terms.

Google may process IP address, browser data, cookie or device identifiers, page context and ad interactions when its services are enabled. Google describes its use of cookies at How Google uses cookies and advertising data at Google advertising technologies. You can manage Google ad personalization at My Ad Center.

Google publisher consent: If BuyeReports activates AdSense personalized advertising for visitors in the EEA, UK or Switzerland, we will use a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework as required by Google. This site-level preferences panel does not represent itself as a certified CMP.

Open Privacy Choices

6. When we disclose information

We disclose information only as needed for the purposes described above, including to:

• hosting, security, analytics, advertising and technical service providers;
• affiliate networks and merchants, including Amazon destinations and platforms such as Levanta or PartnerBoost, when relevant to a tracked link;
• professional advisers, auditors or authorities when reasonably necessary to comply with law or protect rights and safety; and
• a buyer, successor or adviser in a genuine merger, financing, reorganization or sale, subject to appropriate confidentiality and notice obligations.

We do not disclose your direct contact message to advertising partners for their own direct marketing.

7. Retention

We keep personal information only as long as reasonably necessary for the stated purpose, legal requirements, dispute resolution and security. Contact correspondence is ordinarily retained for up to 24 months after the last interaction unless a longer period is needed for an active matter or required by law. Consent preferences last up to 180 days. Technical logs and affiliate reports follow the shorter of our operational need, provider controls and applicable contractual or legal retention requirements.

8. International transfers

BuyeReports and its service providers may process information in the United States and other countries that may not provide the same protections as your home jurisdiction. Where European data-transfer rules apply, the relevant party may rely on an adequacy decision, Standard Contractual Clauses or another legally permitted safeguard. You may contact us for information about safeguards relevant to our processing.

9. Your GDPR and UK GDPR rights

Subject to applicable law and exceptions, you may request access, correction, deletion, restriction, objection or portability of your personal data. You may withdraw consent at any time without affecting processing already carried out lawfully. You also have the right to complain to the supervisory authority where you live or work or where an alleged infringement occurred.

Your right to object: you may object at any time to processing based on legitimate interests and to processing for direct marketing. We do not currently conduct email direct marketing.

10. California and other U.S. state privacy rights

This section is a California notice at collection and applies where the CCPA/CPRA governs our processing. During the preceding 12 months, we may have collected the categories described in Section 2: identifiers, internet or electronic network activity, approximate geolocation, commercial/affiliate activity and correspondence. We use and disclose these categories for the business purposes described in Sections 3 and 6.

BuyeReports does not sell personal information for money. If optional advertising technologies are enabled, disclosure of identifiers and internet activity for cross-context behavioral advertising may be considered “sharing” under California law. You can opt out by rejecting advertising technologies, reopening Privacy Choices or sending a request. We do not knowingly sell or share personal information of consumers under 16.

• Know/access: request categories, sources, purposes, recipients and specific pieces of personal information.
• Delete: request deletion, subject to legal exceptions.
• Correct: request correction of inaccurate information.
• Opt out of sale/sharing: direct us not to sell or share covered personal information.
• Limit sensitive personal information: where a business uses sensitive information beyond legally permitted purposes. BuyeReports does not intentionally collect sensitive personal information for such additional purposes.
• Non-discrimination: receive equal service and pricing for exercising privacy rights, subject to lawful differences.

We treat a supported browser Global Privacy Control signal as an opt-out of advertising sharing for that browser. Traditional “Do Not Track” signals are not consistently standardized; GPC is handled as described above.

Do Not Sell or Share My Personal Information

11. Exercising privacy rights

Email contact@buyereports.com with the subject “Privacy Request.” State your jurisdiction and the right you want to exercise. We may request information reasonably necessary to verify identity and authority. Authorized agents may submit requests, but we may require proof of authorization and direct identity verification where permitted. We respond within the period required by applicable law.

12. Security, children and automated decisions

We use reasonable administrative and technical safeguards, but no internet transmission or storage system is completely secure. This site is intended for a general adult shopping audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13. We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.

13. Changes to this policy

We will update this page when data practices, providers or legal requirements materially change and will revise the date below. Material changes will be highlighted through the site or consent interface where required.

Last updated: July 14, 2026.