1. Who is responsible (controller)
AFFYNOR is the controller for the processing described in this policy. You can reach us at support@affynor.com for any privacy question or request. Where we act on behalf of a business client (for example, running a campaign for a merchant), we may act as a processor and that client is the controller of the underlying data.
2. Scope
This policy applies to the AFFYNOR website, its editorial reviews, the newsletter, the account area and dashboard, and the private-beta operational services available through affynor.com. Public customer funding and unrestricted advertising execution remain disabled unless explicitly enabled as part of a controlled pilot.
3. Information AFFYNOR may process
Depending on how you use the service, AFFYNOR may process:
- Account information: name, email address, account role, acceptance of terms and authentication records. Passwords are stored as cryptographic hashes rather than readable passwords.
- Session and security information: session identifiers, login attempts, rate-limit events and security records needed to protect accounts and infrastructure.
- Advertising operations data: campaign identifiers, campaign status, budgets, CPC settings, impressions, clicks, search-term signals, policy status and other advertising metrics returned by connected advertising platforms.
- Affiliate and attribution data: click references, advertiser and programme identifiers, transaction status, order value, commission amount, validation status and campaign attribution returned by affiliate networks and partner programmes (for example Awin, Admitad, Impact or programmes administered through a partner-network portal).
- Newsletter data: the email address you subscribe with, subscription status, and engagement information such as opens and clicks, processed by our newsletter platform.
- Support and partnership communications: information you choose to send when contacting AFFYNOR.
- Technical information: hosting, CDN and security providers may process IP address, browser, device and request metadata as necessary to deliver and secure the website.
4. How information is used
AFFYNOR uses information to provide and secure accounts, operate the dashboard, publish and measure editorial content and the newsletter, connect campaign and affiliate-attribution records, measure advertising performance, enforce campaign safety controls, prevent abuse and fraud, diagnose technical issues, respond to support requests and meet applicable compliance obligations.
Our legal bases are: performance of a contract (providing the service you signed up for), consent (newsletter subscription and non-essential cookies, which you can withdraw at any time), legitimate interests (security, fraud prevention, attribution integrity and improving the service) and legal obligation (accounting and compliance records).
5. Google services and Google Ads data
AFFYNOR currently connects to the Google Ads API to read and, only when the required execution gates are enabled, manage advertising resources for the connected advertising account. Data obtained from Google Ads is used for campaign planning, policy checks, measurement, risk controls and performance analysis. AFFYNOR does not sell Google Ads data to third parties.
AFFYNOR does not currently request access to Gmail, Google Contacts or Google Drive as part of the performance-marketing service. If additional Google user-data permissions are introduced in the future, the requested scope and purpose will be disclosed before consent is requested.
6. Affiliate networks, partner programmes and attribution
AFFYNOR publishes editorial reviews that may contain affiliate links. When a visitor follows one of those links, the destination programme — or the affiliate network that administers it — may record the click and set its own tracking technology so that a later purchase can be attributed. This is how affiliate programmes pay publishers, and it is described in section 7 below.
AFFYNOR also exchanges campaign references and attribution information with affiliate networks and partner programmes so that clicks, transactions, commissions and validation status can be reconciled. AFFYNOR does not need the buyer's identity to display campaign-level economics and is designed to retain only the transaction evidence required for attribution and reconciliation.
Some partner programmes are administered through third-party network portals. These portals are typically built on affiliate-network software such as HasOffers/TUNE, and may be operated on behalf of the advertiser by a third-party agent. In those cases the advertiser or its network acts as an independent controller for the data it collects through its own tracking, and its privacy policy applies in addition to this one.
7. Cookies and tracking technologies
We use cookies and similar technologies (pixels, web beacons and local storage) for four purposes:
- Strictly necessary: keeping the site working, security, load balancing and remembering your cookie choices. These cannot be switched off because the site cannot function without them.
- Functional: remembering preferences such as language or dismissed notices. You can block these, though some conveniences will stop working.
- Analytics: our first-party measurement of page views, and it runs only with your consent: before you accept the consent banner no analytics record is created at all — not even an anonymous one. After you accept, page views are counted together with a persistent anonymous visitor identifier.
- Affiliate tracking (third-party): when you click an affiliate link in one of our reviews, the destination programme or its affiliate network (including network portals built on HasOffers/TUNE) may set a cookie or pixel in your browser to attribute a later purchase to that click. These cookies are set by that third party, not by AFFYNOR, and their lifetime and content are defined by that programme's own cookie policy — commonly a fixed attribution window such as 30 days.
You can control cookies through your browser settings, and you can withdraw cookie consent at any time via the site's consent banner or your browser controls. Blocking affiliate cookies does not prevent you from using our reviews; it only means that a purchase made after clicking a link may not be attributed to us. You can also limit targeted advertising identifiers through your device's privacy settings ("Limit Ad Tracking" / "Allow Apps to Request to Track").
8. Payments
Public customer deposits and withdrawals are currently disabled. If payment functionality is activated, payment processing may be provided by a specialist payment provider. AFFYNOR does not intend to store full payment-card numbers in its own application database.
9. Website analytics
AFFYNOR uses a first-party analytics system to understand website usage. For visitors who have consented, it records page path, referring hostname, approximate country code supplied by the hosting network, device category and whether a request appears to be automated. AFFYNOR does not store raw IP addresses in its analytics table.
Analytics is consent-gated end to end: without consent no page-view record is written at all, so there is nothing to count — anonymous or otherwise. With consent, page views are recorded together with the persistent anonymous visitor identifier described in section 7, which is never linked to an AFFYNOR account.
10. Service providers and disclosures
AFFYNOR uses infrastructure, CDN and security providers, email-delivery and newsletter platforms, authentication services, advertising platforms, affiliate networks and (if activated) payment providers to operate the service. Those providers process information only to the extent required for their role.
Information may also be disclosed when required by law or a competent authority, to protect users or the service, to enforce our terms, or in connection with a legitimate business restructuring. We do not sell personal data.
11. Data retention
Information is retained only for as long as reasonably necessary for the purpose for which it was collected, including account operation, attribution, fraud prevention, security, dispute handling and applicable legal or accounting requirements. Retention periods may differ by data category and provider. Newsletter data is kept until you unsubscribe or ask us to delete it.
12. Security
AFFYNOR uses technical and organizational safeguards appropriate to the current private-beta service, including server-side provider credentials, encrypted transport, access controls, password hashing, campaign execution guards and rate-limiting controls. No online system can guarantee absolute security.
13. International transfers, including the United States
Some of the providers and partner networks we rely on are located outside the European Economic Area, in particular in the United States. This affects two flows in particular:
- Platform and infrastructure providers — hosting, CDN, email delivery, newsletter and analytics services may process data on servers located in the United States or other third countries.
- Affiliate networks and partner programmes — when you click an affiliate link, the programme or its network portal (including portals built on HasOffers/TUNE) may record and store the click and any resulting transaction in the United States. Those parties act as independent controllers for that processing under their own privacy policies.
Where we transfer personal data out of the EEA, or where a provider does so on our behalf, we rely on appropriate safeguards — such as the European Commission's Standard Contractual Clauses and, where applicable, supplementary measures and transfer-impact assessments — or on your explicit consent where no other basis applies. Where the transfer is made by an affiliate network acting as an independent controller, that network is responsible for its own safeguards; their terms and privacy policies apply in addition to ours.
You should be aware that authorities in third countries may have access rights to data that differ from those in the EU/EEA.
14. Your privacy choices and rights
If you are in the EU/EEA (or another jurisdiction granting similar rights), you have the right to:
- Access the personal data we hold about you and receive a copy;
- Rectify inaccurate or incomplete data;
- Erase data that is no longer necessary (the "right to be forgotten");
- Restrict or object to processing based on legitimate interests, including profiling;
- Portability — receive data you provided in a structured, commonly used format;
- Withdraw consent at any time (for the newsletter and for non-essential cookies), without affecting the lawfulness of processing carried out before withdrawal.
To exercise any of these rights, email support@affynor.com. We respond within one month, and we may need to verify your identity before acting. Step-by-step deletion instructions are available at Data Deletion Instructions.
If you believe we have handled your data incorrectly, you can complain to your local supervisory authority — in our case the Hellenic Data Protection Authority (dpa.gr) — or the authority in the EU/EEA country where you live or work. We would appreciate the chance to resolve it with you first.
15. Children
AFFYNOR is intended for adults and business users and is not directed to children under 18. We do not knowingly collect data from children.
16. Changes to this policy
This policy may be updated as AFFYNOR adds providers, programmes or data flows. The current version remains available at this URL with an updated date, and material changes will be highlighted on the site.