Privacy policy

Last revised: 9 October 2026

This policy explains what personal data we process when you use CheckTechOut, what we use it for, who we share it with and what you can do about it. It is written to match what the site actually does: when the product changes, this page changes with it.

In short: you can read the whole site without an account and nothing is recorded. We only process your data if you create an account, write a review or send a proposal, and analytics only load if you accept them.

1. Who processes your data

The controller is the owner of this site. You can write to hello@checktechout.com about this policy or about your data.

2. What we process and why

What	Why	Legal basis	How long
Account: email, name, role and active sessions. There is no password: you sign in with your Google account, and we keep the identifier it returns, not your credentials.	To create your account, identify you and let you write reviews and proposals.	Performance of a contract (the service you ask for when registering).	While the account exists. Deleting it deletes your account data.
Reviews: title, rating, text, pros and cons, and a public label for the author.	To publish your opinion on the product page.	Your consent when submitting it, and performance of the contract.	While the review is published. You can ask us to withdraw it.
Proposals: the parameters you correct or the model you suggest, the reason you write, and your account email.	To review and apply improvements to the catalog, and to be able to answer you.	Performance of the contract and legitimate interest in keeping the catalog correct.	While it is under review. Once the decision is made — and for a rejected proposal, immediately — your account, your email, the address hash and the reason you wrote are deleted; the proposal itself stays as a record of what was asked and what was decided, with nothing left that identifies you.
Salted hash of the IP address (never the address itself) attached to each proposal.	To rate-limit the form and react to bulk submissions.	Legitimate interest in protecting the service.	With the proposal, for security. It is salted and cannot be turned back into an IP address.
Server logs: IP, date, requested resource and user agent.	Security, diagnosing errors and defending against attacks.	Legitimate interest in keeping the service available and safe.	The retention period of the server hosting the site (usually days or weeks).
Analytics (PostHog): page views, events such as "search" or "comparison started", approximate country, device and browser, and —only when you open the feedback button yourself—the feedback survey you answer.	To understand which products people compare and improve the site.	Your consent, asked before anything is loaded.	As configured in the PostHog project. You can withdraw consent at any time.
Session recording (PostHog): a video of how the page is used, with every text field masked. Account, login, review, proposal and contact pages are never recorded.	See a real walkthrough to find usability problems without asking anyone to explain them.	Your consent, the same as for analytics: nothing is recorded until you press "Accept".	30 days (the retention configured in the PostHog project).
Country and currency, language, wishlist, comparison and collapsed sections.	To remember your preferences between visits.	Signed out, they never leave your browser: local storage and one preference cookie. Signed in, your wishlist and saved comparisons are also stored on your account, so you see them from any device.	Until you clear your browser data (the country cookie lasts a year). What is on your account, until you close it.

We resolve your country from your IP on our own server to show the right currency and stores. We do not store it: if you pick a country by hand, that choice wins and we do not ask again.

We do not sell or share your data for advertising, we do not profile you, and we make no automated decisions that legally affect you. Where automatic moderation is enabled, the text of a review or proposal may be analysed by a language model (OpenAI) to spot spam or mistakes; a person always makes the decision to publish.

3. Cookies and local storage

Before you accept anything we only use what is strictly necessary. Analytics do not load until you press "Accept", and only then does PostHog write its own cookies and browser storage. If you answer a feedback survey, that answer travels to PostHog as part of the same analytics.

Name	Type	Purpose	Duration
payload-token	Essential (cookie)	Keeps you signed in. It is httpOnly: page JavaScript cannot read it.	2 hours
country	Preference (cookie)	Remembers the country you picked by hand, which decides currency and stores.	1 year
cookie-consent and cookie-consent-date	Preference (local storage)	Remembers whether you accepted or rejected analytics, and when, so we do not ask again.	30 days
user	Preference (local storage)	Lets the interface know you are signed in (email, name, role). The session itself is the cookie.	Until you sign out
wishlist and compare-ids	Preference (local storage)	Your saved products and the comparison in progress.	Until you clear them
spec-collapsed	Preference (local storage)	Remembers which specification sections you collapsed.	Until you clear it
ph_* (PostHog)	Analytics (cookie and local storage)	Distinguishes sessions and visits, stores your feature preferences and reconstructs session recordings. Written only if you accept.	Up to 1 year, as configured in PostHog

You can change your mind at any time: clear this site’s storage in your browser and the notice appears again on your next visit with both options.

5. Your rights

You can exercise your rights of access, rectification, erasure, objection, restriction of processing and portability, and withdraw your consent at any time, by writing to the contact address. We answer within one month.

Access: know what data of yours we process.
Rectification: correct anything that is wrong.
Erasure: delete your account and your data, including withdrawing your reviews if you ask.
Objection and restriction: ask us to stop processing a specific thing, analytics for instance.
Portability: receive what you gave us in a reusable format.
Complaint: you may complain to the Spanish data protection authority (aepd.es) if you believe we have not handled your request properly.

6. Minors

The site is not aimed at children under 14 and we do not create accounts below that age. If we find one, we delete it.

7. Changes to this policy

When the way we process data changes, we update this page and the date at the top. If the change matters to account holders, we say so when they sign in.