Privacy Policy

Every page view is recorded by Umami, an analytics tool we host ourselves on stats.brokerfit.io. It stores the page you opened, the site that referred you, your browser, operating system, device type and screen size, and a country derived from your IP address. The IP address itself is used to resolve that country and is not kept alongside the record.

We also log clicks on links: through to a broker, to a regulator's public register, to another page of this site and to any other website. Each record holds the kind of link, the page it was on, where it led, the part of the page it sat in (the header, say, or a comparison verdict), the broker for broker links, the interface language, the utm_source tag of the page if it had one, and the time. It also notes where the visit came from: the utm_source tag of the page you first landed on or, if there was none, the domain of the site that sent you to us (chatgpt.com, say) and nothing else of its address; that value is kept only in the open page's memory and is never written to your device. The record holds no identifier — no session, no browser details and no IP address — so it cannot be traced back to a person. Your IP address is used only in passing, as the key of a counter that limits how many clicks one visitor can send per minute; that counter lives in memory for about a minute and the address is never written to the click record. Clicks from browsers that report themselves as automated (the WebDriver flag) are not logged. The same click also reaches Umami as an event and is covered by the paragraph above. Finally, we set one cookie, NEXT_LOCALE, which remembers your chosen language. It carries no identifier and is used for nothing else.

The legal basis is legitimate interest under Article 6(1)(f) of the GDPR: we need to know which pages are read and which links readers follow in order to decide what to write and which evidence to put first, and we need request-rate limits to keep the site from being abused. Neither purpose requires knowing who you are, and we make no attempt to find out.

We do not use cookie banners because we run nothing that would require consent — no advertising cookies, no remarketing pixels, no cross-site identifiers. If that ever changes, this page changes first.

Nobody. The analytics run on our own server rather than a third-party service, so no data about your visit leaves our infrastructure. We do not sell, rent or share it, and there are no advertising networks embedded in these pages.

Following an affiliate link takes you to the broker's own website, at which point their privacy policy applies and ours stops. We pass no personal data to brokers — the link is a plain redirect, and any relationship you form with them is yours alone.

Analytics records, click events in Umami included, are kept for 24 months and then deleted. Rate-limiting counters live in memory for minutes at a time. Click records in our own database carry no personal data and have no set deletion date.

If you believe we hold data about you, you may ask what it is, ask for it to be corrected or deleted, or object to the processing entirely — write to [email protected] and we will answer within 30 days. You also have the right to complain to your national data protection authority.