1. Who we are
FutureFavs is a publication based in the Netherlands. For this privacy policy, the data controller is the operator of futurefavs.com. You can reach us at hello@futurefavs.com for any privacy-related question. This site is operated by the FutureFavs editorial team, Amsterdam, Netherlands. Operating as an individual below the KVK registration threshold.
2. What we collect, and why
Server logs
Our hosting provider (Vercel) logs incoming requests, including IP address, user agent, the URL requested, and timing data. We use these for security and to spot abuse. Logs are kept for roughly 30 days and then deleted automatically.
Analytics
We use privacy-respecting analytics to count page views and understand which reviews people read. Where the analytics service uses cookies that read personal data, we ask for your consent first via the cookie banner.
Google AdSense
This site displays Google AdSense ads. AdSense uses cookies and similar technologies to serve relevant ads and measure performance. Google may collect IP addresses, browser identifiers, and inferred interests. You can opt out of personalised advertising at adssettings.google.com.
Affiliate tracking
When you click an affiliate link (e.g. to Amazon, Payhip), the destination site sets its own cookies to credit the purchase to us. We don't see your purchase details — Amazon and other partners only tell us aggregated commission data.
Newsletter (if you sign up)
If we run a newsletter and you subscribe, we store your email address and signup timestamp so we can send you the newsletter. You can unsubscribe with one click in any email. We never sell or share your email.
3. Legal basis
- Essential cookies and server logs: legitimate interest (GDPR Art. 6(1)(f)) — the site has to load and we have to defend it against abuse.
- Analytics, advertising, affiliate tracking: your consent (Art. 6(1)(a)), captured via the cookie banner. You can withdraw consent any time by clearing cookies for this domain.
- Newsletter: consent at signup (Art. 6(1)(a)) — you can unsubscribe at any time.
4. Third parties that may receive your data
- Vercel (USA) — hosting. Data covered by Standard Contractual Clauses and the EU–US Data Privacy Framework.
- Google AdSense (USA) — advertising. Same legal basis for transfer.
- Amazon Associates (USA / EU) — affiliate tracking for product links.
- Payhip (UK) — when you click through to our digital products. Payhip's privacy policy applies once you arrive there.
- YouTube (Google, USA) — when a YouTube embed loads on a review or video page.
- Google Fonts (USA) — font CSS. We load fonts via CSS only, with no PII transmitted from your side.
5. Your rights under GDPR
You have the right to:
- Access the personal data we hold about you (Art. 15)
- Have inaccurate data corrected (Art. 16)
- Have your data deleted (Art. 17)
- Restrict our processing of it (Art. 18)
- Receive your data in a portable format (Art. 20)
- Object to processing based on legitimate interest (Art. 21)
- Withdraw consent at any time (Art. 7)
Email hello@futurefavs.com to exercise any of these. We'll respond within 30 days (Art. 12(3)).
6. Complaints
If you're not happy with how we've handled your data, you have the right to lodge a complaint with the Dutch Data Protection Authority: Autoriteit Persoonsgegevens. You can also complain to your local DPA if you're outside the Netherlands.
7. Cookies summary
- Essential — none currently required beyond session cookies set by linked services when you visit them.
- Analytics — set only after consent. Typical lifespan: 30 days to 24 months.
- Advertising (AdSense) — set only after consent. Lifespan: up to 13 months.
- Affiliate — set by Amazon and other partners after you click through. Lifespan and behaviour governed by their own policies.
8. Data retention
Server logs: ~30 days. Newsletter subscriber records: until you unsubscribe, plus a short suppression list afterwards (legal basis: legitimate interest in not re-emailing you). Affiliate commission records: 7 years (Dutch tax law). Aggregated analytics: indefinitely, but with no PII linked.
9. Changes to this policy
We update this policy when we add new tools or change how we handle data. The "Last updated" date at the top reflects the most recent change. Material changes will also be flagged in a banner at the top of the site for at least 14 days.