Privacy notice

Last updated: 03/11/2026

We collect as little as possible, and we never sell, share or use your data for advertising.

Who is responsible

trustsite.eu, [to be completed], [to be completed] (company number [to be completed]), is the controller of the personal data processed on trustsite.eu. Contact: [email protected].

Searching

Searching sets no cookie. When the website you search for has no report yet, we record its address so that it can be analysed, with a keyed fingerprint of your IP address, deleted after 30 days, to detect abuse. We record nothing when a report already exists. Legal basis: our legitimate interest in informing consumers and protecting the service (GDPR, Art. 6(1)(f)).

Your browser then runs a quick check: it reads a few public pages of that website through a relay run for us by Cloudflare (Cloudflare Workers). The relay keeps neither your IP address nor the pages it downloads. The result of the quick check is shown to you; it is also sent to our server with a keyed fingerprint of your connection's network (not your IP address). When two different connections get exactly the same result, we show it to the next visitors for 48 hours at most, then delete it together with the fingerprints. It contains only what the website itself publishes.

Submitting a website

We record the address of the website, its type and your comment, if any. To detect abuse, we also record a keyed fingerprint of your IP address, not the address itself. It cannot be turned back into your IP address, and it is deleted after 30 days. Legal basis: our legitimate interest in informing consumers and protecting the service (GDPR, Art. 6(1)(f)).

If you give your e-mail address

It is used for one thing only: sending you the report. Your address is not checked. It is stored encrypted until the report is published, used for that single message, then deleted. We keep no trace of it. If no report can be sent within 7 days, we tell you and delete it. If the report is already published, it is sent at once and your address is never stored. We never use it for anything else and never share it.

Legal basis: your consent (GDPR, Art. 6(1)(a)). You can withdraw it at any time by writing to [email protected].

Right of reply

When a website operator asks for a new review, we record their message, and their name and e-mail address, encrypted, to answer them. As for submissions, we record a keyed fingerprint of the IP address, deleted after 30 days. Legal basis: our legitimate interest in handling these requests (GDPR, Art. 6(1)(f)).

Security and technical data

• Abuse counters use keyed fingerprints of IP addresses and are deleted within 24 hours.
• Error logs may contain IP addresses. They are kept for 30 days.
• Cloudflare, Inc. processes the IP address of every visitor to protect the website and, on forms and for the quick check, to check that you are a person (Turnstile); it also runs the relay of the quick check (Cloudflare Workers) and measures the website's audience (Cloudflare Web Analytics: page views, country, device type, loading time, with no cookie and no tracking across websites). Cloudflare is based in the United States and transfers rely on the EU–US Data Privacy Framework.

Cookies

Only pages with a form set one technical cookie, needed for its security. It is deleted when you close your browser. We use no audience-measurement or advertising cookie: our audience measurement (Cloudflare Web Analytics) works without cookies. We load no font or script from third parties, except Cloudflare's: Turnstile on forms and for the quick check, and the audience-measurement script.

About the websites we report on

Reports concern businesses. If a website is run by an individual, we only publish what the law requires that website to display, and nothing else about that person.

Your rights

You can ask to access, correct or delete your data, to restrict its use or to object to it, by writing to [email protected]. Because fingerprints cannot be linked back to you, we may not be able to find data you submitted anonymously.

You can also complain to the Belgian Data Protection Authority, rue de la Presse 35, 1000 Brussels — dataprotectionauthority.be.