Privacy policy

Controller

bytebrand.org — info@bytebrand.org.

In short

diaper.best has no user accounts, no advertising trackers and no embedded third-party content. Every page, script and style is served from our own servers. We count visits with our own Matomo installation, without cookies unless you allow them; nothing is shared with anyone.

Visit statistics (Matomo)

We count page views, how visitors arrive (referring site, search engine), and which outbound links are clicked — for example which Amazon store a "Buy" link led to — to learn which pages and products are useful. We use Matomo, open-source software that runs on our own server (matomo.diaper.best); the data never leaves it.

Matomo receives and stores your IP address, the page, the time, the referring page, your browser's user-agent string, language and screen size. From the IP address it derives an approximate location (country, region, city) using the IP Geolocation by DB-IP database (CC BY 4.0), a copy of which is kept on our server, so no lookup leaves it. Without your consent Matomo sets no cookie: it recognises the pages of one visit from a hash of these data that changes daily. Individual visit records, including the IP address, are deleted after 180 days; only aggregated statistics are kept (legitimate interest in knowing how and from where the site is used, Art. 6(1)(f) GDPR).

A banner asks once whether Matomo may set a cookie to recognise you as a returning visitor. Your answer is kept in your browser's local storage (analytics_consent). Only if you choose "Allow" does Matomo set _pk_id (13 months, a random visitor id) and _pk_ses (30 minutes) (consent, Art. 6(1)(a) GDPR and § 165(3) TKG 2021). You can withdraw it at any time by deleting this site's cookies and stored data in your browser; the banner then asks again.

Server logs

When you open a page, the server records your IP address, the time, the page requested, the HTTP status, the referring page and your browser's user-agent string. We use these records only to operate the site and to detect and fend off abuse (legitimate interest, Art. 6(1)(f) GDPR). The logs are not archived: they are overwritten automatically as new entries arrive (at most 30 MB are kept), and we do not combine them with other data or pass them on, except where the law requires it.

Encrypted connections (HTTPS) are terminated on a server of Hetzner Online GmbH in Falkenstein, Germany, which forwards the request to our server. Hetzner processes the connection data on our behalf.

Cookies

Without your consent the site sets one cookie on its own, csrftoken: a random value that protects requests against cross-site request forgery. It holds no personal data, is not used for tracking, and is technically necessary, so no consent is required (§ 165(3) TKG 2021). It expires after one year; you can delete it in your browser at any time. The Matomo cookies above are set only with your consent.

The settings menu (the gear at the top of the page) keeps what you choose there in cookies, set only when you choose something: pref_theme (light or dark colour scheme), pref_country, pref_currency, pref_unit (cm or inches) and pref_language; likewise ship_to when you filter a product's prices by a shipping country. They hold only that choice, are used only to show the site the way you asked, expire after one year, and are necessary for the setting you requested, so no consent is required (§ 165(3) TKG 2021). "Reset" in the settings menu removes them; until you choose, we guess your country from your IP address as described below and derive currency and unit from it.

Links to Amazon

"Buy on Amazon" links take you to Amazon and carry our Amazon Associates partner tag, so Amazon can credit us with a commission if you buy. Nothing is sent to Amazon until you click. Once you are on Amazon, Amazon's own privacy notice applies (Amazon Europe Core S.à r.l. for the European stores, Amazon.com Services LLC for amazon.com). To pick your Amazon store we look up the country of your IP address in a copy of the DB-IP country database kept on our server, falling back to your browser's language setting; the result is used for that page only and is not stored.