← Back to home

Privacy Policy

Last updated: August 9, 2026 · Controller: AIToolista — Operator Name (replace) (aitoolista.com)

1. Introduction

This Privacy Policy explains how aitoolista.com (“we”, “us”) processes personal data when you visit our AI tools directory, create an account, leave reviews, or click outbound affiliate links. We process data in accordance with the EU General Data Protection Regulation (GDPR) and the German Telecommunications Digital Services Data Protection Act (TDDDG).

2. Controller & contact

The data controller is identified in our Impressum. For privacy requests email aitoolista@gmail.com.

3. Categories of data we process

1. Account data when you register at /AI_Tools/public/register: username, email address, password hash (never stored in plain text), optional profile fields.
2. Authentication / session data when you sign in at /AI_Tools/public/login: PHP session identifiers and related security cookies required to keep you logged in.
3. Usage data: pages viewed, tool detail views, search queries, and technical logs needed to operate the service.
4. Affiliate click data when you use outbound redirects at /AI_Tools/public/go/{id} (see section 6).
5. Reviews & comments you voluntarily submit (name, email, content, rating).
6. Cookie consent choices stored in the user_cookie_consent cookie / localStorage.

4. Purposes & legal bases (Art. 6 GDPR)

1. Art. 6(1)(b) GDPR — contract / pre-contract: creating and managing user accounts, login sessions, password reset, and providing the directory features you request.
2. Art. 6(1)(f) GDPR — legitimate interests: securing the platform (abuse prevention, rate limits), measuring aggregated tool popularity, and operating essential affiliate redirects. Where we rely on legitimate interests, you may object under Art. 21 GDPR.
3. Art. 6(1)(a) GDPR — consent: non-essential cookies and scripts (analytics, marketing / affiliate tracking cookies) loaded only after you opt in via our cookie banner. You may withdraw consent anytime via Cookie Settings in the footer.
4. Art. 6(1)(c) GDPR — legal obligation: where we must retain records required by law (e.g. tax / commercial obligations).

5. Cookies & similar technologies (TDDDG)

Under the TDDDG, storing or accessing information on your device that is not strictly necessary requires consent. Our banner defaults to rejecting non-essential categories.

Non-essential scripts are blocked (type="text/plain" + data-consent) until you accept the matching category.

6. Affiliate redirects (/go/{id})

When you click “Visit” buttons that route through /AI_Tools/public/go/{id}, we redirect you to the tool vendor or affiliate partner. Depending on your marketing consent and our server logs, we may process:

1. Tool ID / destination
2. Timestamp
3. IP address and user agent (for fraud prevention and commission attribution)
4. Your user ID if you are logged in

These redirects may be marked rel="nofollow sponsored". We may earn a commission if you purchase or register with a partner. See also our Terms of Service.

7. Third parties

We may use processors for hosting, email delivery, and (only with consent) analytics/marketing vendors. Outbound AI tool vendors operate under their own privacy policies once you leave aitoolista.com.

8. Retention

Account data is kept while your account remains active and for a limited period afterward as needed for security and legal claims. Affiliate click logs are retained for attribution, fraud prevention, and reporting, then deleted or anonymized. Consent records are kept for the lifetime of the consent cookie (typically up to 12 months) or until you change your choice.

9. Your GDPR rights

1. Access (Art. 15) — obtain confirmation and a copy of your personal data.
2. Rectification (Art. 16) — correct inaccurate data (also via profile settings when logged in).
3. Erasure (Art. 17) — request deletion (“right to be forgotten”), subject to legal exceptions.
4. Restriction (Art. 18) — request limited processing in certain cases.
5. Portability (Art. 20) — receive data you provided in a structured format where applicable.
6. Objection (Art. 21) — object to processing based on legitimate interests.
7. Withdraw consent — anytime via Cookie Settings without affecting lawfulness of prior processing.
8. Complaint — lodge a complaint with a supervisory authority, e.g. Berliner Beauftragte für Datenschutz und Informationsfreiheit, or your local EU authority.

To exercise these rights, contact aitoolista@gmail.com.

10. Security

We use industry-standard measures including hashed passwords, CSRF protection on state-changing forms, and access controls for administration. No method of transmission is 100% secure.

11. Changes

We may update this policy to reflect legal or product changes. The “Last updated” date above will change accordingly. Material cookie changes may trigger a new consent prompt (consent version bump).