Cookie Policy
Last updated: March 28, 2026
1. What Are Cookies?
Cookies are small text files stored on your device. They help websites function and provide analytical data.
2. Cookies We Use
Essential Cookies
| Cookie | Purpose | Duration |
|---|---|---|
| cookie_consent | Stores your cookie preferences | 12 months |
| wp_session | WordPress session | Session |
Analytics Cookies (Matomo)
Self-hosted, PIPEDA-compliant. IPs are anonymized. No data shared with third parties.
| Cookie | Purpose | Duration |
|---|---|---|
| _pk_id | Identifies unique visitors (anonymized) | 13 months |
| _pk_ses | Current session tracking | 30 minutes |
Affiliate Cookies (Amazon.ca)
Amazon may set cookies when you click our affiliate links. Governed by Amazon’s Privacy Policy.
3. Managing Preferences
- Cookie consent banner on first visit
- Browser settings: Chrome | Firefox | Safari
- Opt out of Matomo tracking
Analytics Data Collection
Since May 2026, we have implemented a centralized analytics platform that cross-references data from the following tools:
Google Analytics 4 (GA4)
We use Google Analytics 4, a web analytics service by Google Ireland Limited (Gordon House, Barrow Street, Dublin 4, Ireland). Data collected: pages visited, session duration, bounce rate, traffic source, approximate country, device type. IPs are anonymized. Legal basis: consent (Art. 6.1.a GDPR). GA4 is disabled until you accept analytics cookies. Retention: 14 months. Data may be transferred to the US (Data Privacy Framework).
Matomo (self-hosted)
We use Matomo, a self-hosted analytics platform on our servers (Hetzner, Frankfurt). Data collected: pages visited, visit duration, device type, traffic source. No third-party data sharing, no tracking cookies, anonymized data. Legal basis: legitimate interest (Art. 6.1.f GDPR).
Sentry (self-hosted)
We use Sentry, a self-hosted error and performance tracking platform. Data collected: error URL, error type, browser, OS, page load time (p95). Legal basis: legitimate interest (Art. 6.1.f GDPR). Retention: 30 days errors, 90 days traces.
Google Trends & YouTube Trends
We use the public Google Trends and YouTube Data APIs. Data: trending keywords, relative interest (0-100). Aggregated and anonymous. Legal basis: legitimate interest (Art. 6.1.f GDPR).
Google Search Console (GSC)
We use Google Search Console for SEO performance analysis. Data: search queries, impressions, clicks, average position. Per-page data, no identifiable visitors. Legal basis: legitimate interest (Art. 6.1.f GDPR).
Unified Analytics Database
We centralize this data in a secure internal database. Local storage, no personally identifiable information, no third-party transfers. Indefinite retention for anonymized aggregated data.