Controller
The operator named in the imprint, contact hello@heatandtimber.com. The Swiss Federal Act on Data Protection applies and, where applicable, the EU and UK GDPR.
In short
- No accounts. The only forms are the optional price or stock alert on a product page and the optional weekly digest of price drops.
- No cookies from us, for advertising or anything else.
- We count visits with Cloudflare Web Analytics: no cookies, nothing stored in your browser, no profile of you, no tracking across sites.
- The finders and calculators run entirely in your browser; your answers do not leave your device.
Hosting
The site is served by Cloudflare, Inc. (USA). To deliver the site and protect it from attacks, Cloudflare processes technically necessary data such as IP address, time, page requested and browser details (legitimate interest). See Cloudflare's privacy policy. To show current prices, your browser asks our own server, which asks the shop; the shop does not see your request. Product photos of partner shops load directly from the shop's image server (Shopify), which sees your IP address and browser details.
Visit statistics
To see which pages are read and where visitors come from, our pages load a small script from Cloudflare (Cloudflare Web Analytics). It works without cookies and without storing anything in your browser, and it does not recognise you across visits or across sites. We receive counts only: the page, the site you came from, country, device type and browser, and how fast the page loaded. Cloudflare does not use these data for advertising (see Cloudflare's privacy policy). The legal basis is our legitimate interest in keeping the site working and improving it. If you do not want to be counted, a content blocker stops the script; the site works the same without it.
Where you came from
Some links we publish (in video descriptions and in our profiles) pass through a counter on our site (/api/go) that adds one to a daily total for that link, for example "video 10 on YouTube", and then sends you to our site. While your visit lasts, your browser remembers that label in its session storage (key "ht-v"); it disappears when you close the tab. We use the label for three counts, all as daily totals without any address, IP address or cookie: how many visits came from that link, how many alerts were set after such a visit, and how many clicks on partner links followed. For clicks on a partner link, the label is also added to the link's tracking reference so that the partner network can tell us which video led to a purchase; the network then sees that reference together with the click, as it does for every partner link. If you do not want this, open our site directly instead of through the link, or use a content blocker; the site works the same.
Price and stock alerts
If you set an alert on a product page, we store your email address, the listing and, for a price alert, your price, together with the time of your request and a shortened one-way hash of your IP address (used to limit abuse, not to identify you). The legal basis is your consent, which you give by pressing "Set alert" and confirm with the link in our first email.
We use the address only for that alert: one email to confirm, one when the alert triggers. After it triggers, the alert ends. Every email has a "Stop this alert" link; one click ends the alert, and we keep the address only on a block list so that nothing is sent to it again, or delete it on request. Unconfirmed requests expire after 48 hours. Alerts that never trigger end after 90 days.
Weekly digest: if you sign up for the digest (at the bottom of a page, on the price drops page, with the box in the alert form or with the link in an alert email), we store your email address, the country site you chose, where you signed up, the time of your request and the same shortened IP hash. The legal basis is your consent, confirmed with the link in our first email. We send one email on Thursdays, only in weeks with price drops or restocks to report. Every digest has a stop link; one click ends it, and we keep the address only on a block list so that nothing is sent to it again, or delete it on request. Unconfirmed sign-ups expire after 48 hours. The digest never contains paid links. Links in the digest pass through a counter on our site that adds one to a total for the issue and the section (for example "price drops") and then sends you on. It stores no address, no IP address and no cookie, so a click cannot be traced to a person. We do not measure whether you open the mail.
The form uses Cloudflare Turnstile to keep bots out. It loads from Cloudflare when you open the alert form and may process technical data such as your IP address and browser details (see Cloudflare's privacy policy). The data are stored with Cloudflare (D1, USA and EU data centres) and the emails are sent through Resend (USA), which processes them on our behalf. For transfers outside Switzerland, the UK and the EU we rely on the providers' standard contractual clauses.
Questions in plain words
The search box works on your device. Only if you press "Ask in plain words" do we send your question (up to 200 characters) to our server, which passes it to an AI service (Google Gemini) that turns it into filter values such as category and budget. The service never writes product facts for you: the page searches its own data with those values. Please leave out personal details; we do not ask for any and do not link the question to you.
We store a daily count of questions per day and country, and a shortened one-way hash of your IP address for that day only, to limit abuse. If the question could not be understood, we keep its text without any address for 30 days to improve the search. The legal basis is our legitimate interest in running and improving the search. The button loads Cloudflare Turnstile (see above) when you press it. The data are stored with Cloudflare (D1) and processed by Google (USA) under its standard contractual clauses.
Settings in your browser
Four settings are kept in your browser's local storage, and only if you use them: the appearance you chose in the footer (light or dark), the country of the last search, the country site you chose (key "land"; if you have not chosen one, we ask the network which country your connection comes from, once per visit; the answer stays in your browser session and we do not keep it or your address), and the listings you marked with Compare (key "vergleich", up to three per country). They never leave your device, and clearing your browser's site data removes them.
Links to shops
When you follow a link to a shop, the shop's privacy policy applies from there. After a click on a link marked "Ad", the affiliate network may set a cookie so that a purchase can be attributed to us.
Your rights
You can ask for access, correction or deletion of your data at any time and complain to a supervisory authority (in Switzerland the FDPIC, in the UK the ICO). Write to hello@heatandtimber.com.