Privacy statement

Usage events: which guides and lists get opened, what gets typed into the search box, and which save, share and outbound taps happen. Views are recorded with nothing attached to them — no account exists, none is offered, and one page view is not linked to the next.

If you send us something — a tip, a correction, a takedown request or a store claim — we store what you wrote, the contact email you chose to give, and a random identifier your own browser generated so a second tap is not counted twice.

Submissions are also counted per machine, so a single one cannot flood the review queue. We do not keep the IP address to do it: the address is turned into a one-way fingerprint as the request arrives and only the fingerprint is stored, which cannot be turned back into an address. It is used for that counting and nothing else — never joined to what you read, never used to identify you, and never shared.

The cookie banner itself records something the moment you answer it, before anything else in this section applies: your accept/reject choice, when you made it, and an approximate location (country/region level, from your IP address — never stored as the address itself) used only to decide which rules apply to you. If you accept, Google Analytics then separately records your browser and device type, an approximate location the same way, and how long a visit lasts — standard technical detail Google Analytics always collects, not something specific to this site.

Your saved stores, the guides you have marked as visited, and the random identifier above live in your browser's local storage. The list itself never leaves your device — we count that a save happened, not what is in it. Clearing your browser storage erases all of it, and nothing on our side notices or objects.

No accounts, no location tracking, and no sale of personal data to anyone — full stop. We do not build profiles of readers ourselves, and there is no login to attach one to. This holds regardless of the cookie banner below. What changes with your answer there is narrower: whether Google's own analytics and ad tools, which do use identifiers, run on this device.

A banner from InMobi Choice, our consent manager, asks before anything below is set. Reject it and none of these are used — nothing here is set on arrival, and nothing asks again unprompted. The banner itself lists the specific advertising partners it is asking on behalf of, because the consent infrastructure has to exist before any single partner is actually switched on — but no advertising has been switched on yet, so accepting today only sets an analytics cookie (Google Analytics) and a record of your choice, nothing ad-related. This page gets its own paragraph, naming whichever partner is live, the day that changes. Change your answer any time from Privacy Preferences in the footer.

• IAB TCF consent recordThe standardized record of your choice that lets a future ad partner read itSet by InMobi Choice, only after you answer · 13 months
• aisle:sessionA random id so a second tap on save/vote isn't counted twiceLocal storage, not a cookie · Until you clear it
• op_sessionEditorial console login — only the operator ever holds oneCookie · 7 days
• _ga, _ga_<id>Google Analytics — distinguishes visits for aggregate reportingCookie, only if you accept · Up to 2 years (Google's default)

We do not build a profile that follows you elsewhere: nothing here is shared with, or received from, any other site we do not operate. Google processes what its own cookies record under its own privacy terms, which we do not control past the accept/reject choice above — under the EU-US Data Privacy Framework, which is what makes that US-based processing lawful under EU law in the first place.

The site itself is hosted on Vercel. Once you accept the cookie banner, Google (Google Tag Manager and Google Analytics) and InMobi (the banner itself) also process what their own cookies record, each under its own privacy terms. None of them may use what they see here for their own unrelated purposes — only ours. We do not sell data to anyone, and nothing here is shared with a third party for marketing that is not our own.

This site is not directed at children, and we do not knowingly collect personal data from anyone under 16. If you believe a child has sent us something personal, use the Corrections page and we will remove it.

You can ask for a copy of anything we hold about you, its correction, its deletion, or a portable copy of it — a tip, a correction, an email you left us. You can also ask us to restrict how we use it, or object to a use you believe rests on our interest rather than your consent. The Corrections page has a personal-data route and reaches a human within three business days. Removal requests are actioned without argument.

If you believe we have not handled your data lawfully, you can complain to Sweden's data protection authority, the Integritetsskyddsmyndigheten (IMY, imy.se), or the supervisory authority in your own EU/EEA country.

Anything unclear, or a request that does not fit the form: the Corrections page is the way through to a person, on the same three-business-day acknowledgment.