Effective date: 27 March 2026
Website: https://www.betterchecked.com
Controller: HuMe GmbH, Postgasse 8b, 1010 Vienna, Austria
Company No.: 602205 x
VAT ID: ATU81895889
Contact (privacy): hello@hummelmedia.io
Terms and Conditions: https://betterchecked.com/terms-and-conditions
This document explains how we process personal data when you use BetterChecked.com and any pages we control (the “Site”). It also contains our Cookie Policy. We drafted it to be understandable and compliant with GDPR (EU/EEA), UK‑GDPR, and California’s CCPA/CPRA (if applicable). If anything is unclear, contact us at the email above.
1) Who we are and scope
HuMe GmbH operates the Site worldwide. We provide editorial content, tools and comparisons relating to online “mystery box” platforms. The Site is intended for adults (18+) and must not be used by minors. We do not knowingly collect data from children.
This Privacy Policy applies when you:
- visit and browse the Site;
- interact with embedded services (e.g., comments, partner iframes);
- subscribe to our newsletter (when available);
- contact us via email.
It does not apply to third‑party websites, platforms, or services we link to or embed (e.g., partner iframes, Hyvor Talk). Those are controlled by their own privacy notices.
2) What data we collect
2.1 Data you provide
- Newsletter signup (planned): email address and, optionally, your name, so we can send promo code alerts, platform updates, and industry news. Opt‑in is required.
- Email support: when you email us, we receive your email address and the content of your message.
We do not run native contact forms on the Site. For comments we embed Hyvor Talk (see §7.2), which is a third‑party controller/processor of its own data.
2.2 Data collected automatically
- Server and CDN logs: our CDN Cloudflare automatically receives your IP address, device/OS/browser information, timestamps, pages requested, and security‑related signals (e.g., bot scores) to protect the Site and deliver content efficiently.
- Analytics: we use Google Analytics (GA4) to measure usage (e.g., pageviews, device categories, approximate location based on IP at the city/region level). Where required by law (e.g., in the EEA/UK), we only set analytics cookies after you give consent (see §5 & §6).
We do not intentionally collect special categories of data (Art. 9 GDPR) via the Site.
3) Purposes and legal bases (GDPR/UK‑GDPR)
| Purpose | Examples | Legal basis |
|---|---|---|
| Site operation & security | content delivery, DDoS and bot mitigation, availability monitoring | Legitimate interests (Art. 6(1)(f)): running a secure, reliable website |
| Audience measurement | page analytics, product interest insights | In the EEA/UK: Consent (ePrivacy + Art. 6(1)(a) GDPR). Outside EEA/UK where permitted: Legitimate interests |
| Newsletter | send promo alerts and updates | Consent (Art. 6(1)(a)); you can withdraw anytime |
| Communications | respond to your email inquiries | Legitimate interests or pre‑contractual steps (Art. 6(1)(f) / 6(1)(b)) |
| Compliance & defense | record‑keeping, enforcing rights, responding to authorities | Legal obligations (Art. 6(1)(c)) and/or legitimate interests (Art. 6(1)(f)) |
We do not use automated decision‑making or profiling with legal or similarly significant effects.
4) Cookies and similar technologies
We use cookies and similar technologies for (i) strictly necessary purposes (security, load balancing), (ii) analytics (with consent in EEA/UK), and (iii) to support embedded third‑party services (e.g., comments and partner iframes). See the Cookie Policy in §6 for details.
We recommend using the Cookie Preferences link on the Site (once enabled) to manage non‑essential cookies. You can also manage cookies via your browser settings, but this may impact functionality.
5) Analytics and tracking
- Google Analytics (GA4): helps us understand how the Site is used (e.g., which pages are popular). In the EEA/UK, GA4 is only loaded after you consent in our banner/preferences. GA4 uses first‑party identifiers (e.g.,
_ga,_ga_<property-id>) and may collect IP addresses (with IP anonymization/geo‑IP features offered by Google), device and event data. Google acts as our processor under a DPA and international transfer safeguards (see §8). You can withdraw consent at any time in the Cookie Preferences or use Google’s tools to opt out. - No ad networks or behavioral advertising: we do not use Google AdSense/Ad Manager or similar ad tech. We negotiate partner placements directly. Some partners may provide embedded iframes; those iframes are controlled by the partner. See §7.3.
6) Cookie Policy
6.1 How we use cookies
- Strictly Necessary cookies – required for the Site to work (e.g., security, load balancing, consent storage). Always active.
- Analytics cookies – help us measure and improve the Site (loaded only with consent in the EEA/UK).
- Third‑party/embedded cookies – set by services we embed (e.g., comments, partner iframes). These are controlled by the respective third parties.
6.2 Cookies
6.3 Managing cookies
Use the Cookie Preferences link in the footer (to be provided by our CMP) to Accept/Reject/Customize non‑essential cookies at any time. You can also change your browser settings to block cookies.
7) Third‑party services and embeds
7.1 Processors we use
We rely on service providers to help operate the Site:
- Cloudflare, Inc. (CDN/WAF): content delivery, DDoS protection, security headers and caching. Data: IP, request metadata, security telemetry. Location: global infrastructure with safeguards (see §8).
- Google LLC / Google Ireland Ltd. (Analytics): GA4 analytics. Data: online identifiers and usage data.
- Email/Newsletter platform (TBD): when launched, we will use a reputable email service provider to deliver newsletters (data: email, optional name). The provider and DPA details will be added to this section before campaigns begin.
We avoid disclosing specific server hosting details publicly for security reasons, but we use a third‑party hosting provider under appropriate contractual and security safeguards.
7.2 Hyvor Talk (comments)
We embed Hyvor Talk for comments. Hyvor Talk is operated by its own entity under its own privacy policy and terms. If you interact with comments, Hyvor Talk may set cookies or collect data as a separate controller. Please review Hyvor Talk’s policies before using the comment feature.
7.3 Partner iframes and external links
From time to time we embed partner iframes or link out to partner sites. These are operated by third parties that may process data about you (e.g., via cookies, fingerprinting, or other tracking) under their own privacy notices. We do not control these technologies and are not responsible for third‑party content, their practices, or damages arising from your use of those sites or embeds. Use them at your own discretion.
8) International transfers
We may transfer personal data to countries outside the EEA/UK (e.g., to the United States) when using providers such as Google or Cloudflare. Where we do so, we rely on appropriate safeguards such as Standard Contractual Clauses (SCCs) and implement supplementary measures where necessary. Copies of relevant safeguards can be requested via hello@hummelmedia.io.
9) Retention
We keep personal data only as long as necessary for the purposes in §3, unless a longer period is required or permitted by law. In practice:
- Newsletter data: retained until you unsubscribe or we delete inactive subscribers; backups may persist for a limited time.
- Analytics data (GA4): retained per our GA4 settings and Google’s limits (e.g., 2 – 14 months for standard event data; certain aggregated reports may persist longer). We may store aggregated, non‑personal statistics longer.
- Server/CDN security logs: retained for as long as needed for security and audit purposes; some anonymized or aggregated logs may be kept indefinitely where permitted.
- Email correspondence: retained for record‑keeping and defense of claims, then deleted or archived.
10) Security
We implement appropriate technical and organizational measures, including HTTPS/TLS in transit, access controls, least‑privilege administration, regular updates, and CDN/WAF protection via Cloudflare. No method of transmission or storage is 100% secure; we cannot guarantee absolute security.
11) Your rights
Depending on where you live, you may have the right to:
- access your personal data;
- rectify inaccurate data;
- erase data (‘right to be forgotten’);
- restrict or object to processing;
- data portability;
- withdraw consent at any time (without affecting prior processing);
- lodge a complaint with your data protection authority.
EEA/Austria: you can contact the Österreichische Datenschutzbehörde (Austrian Data Protection Authority).
UK: you can contact the Information Commissioner’s Office (ICO).
How to exercise rights: email hello@hummelmedia.io with the subject “Privacy Request” and tell us which rights you want to exercise. We may need to verify your identity.
12) California privacy notice (CCPA/CPRA)
If you are a California resident, you have rights to know, access, correct, delete, and to opt‑out of “sale” or “sharing” (as defined by CPRA). We do not sell your personal information for monetary compensation. We also do not engage in cross‑context behavioral advertising via ad networks on the Site. To manage analytics cookies that could constitute “sharing,” use Cookie Preferences to reject non‑essential cookies.
You can submit CCPA/CPRA requests via hello@hummelmedia.io with the subject “CCPA/CPRA Request.” We will not discriminate against you for exercising your rights.
13) Do Not Track
We do not respond to browser “Do Not Track” signals. Use the Cookie Preferences and your browser settings to control cookies.
14) Changes to this Policy
We may update this Policy from time to time. Substantial changes will be highlighted on the Site. The effective date appears at the top. Continued use of the Site after changes means you accept the updated Policy.
15) Contact
HuMe GmbH
Postgasse 8b, 1010 Vienna, Austria
Email: hello@hummelmedia.io
Join other top mystery box sites and work with us.