Privacy & Cookie Policy

Effective date: July 21, 2026 · Last updated: August 23, 2026

GraiLogic (grailogic.com, the "Site") is an independent editorial project operated from Hungary (see our Public Beta Status page for details on the project’s current operating status — the "operator", "we", "us"). This policy explains what personal data we process when you visit the Site, subscribe to email updates, or contact us, why, and what rights you have under the EU General Data Protection Regulation (GDPR). It also explains our use of cookies (Section 10).

1. Who is the data controller

The controller of personal data processed through the Site is the Site operator identified on our Public Beta Status page. For all privacy matters, contact us at info@grailogic.com.

2. What data we collect

The Site is an editorial, informational website. There are no user accounts. We collect personal data only in these limited situations:

When you subscribe to email updates — our newsletter, notifications about new posts, or replies to a comment: your email address, and the date and time you subscribed. Subscriptions are confirmed by a double opt-in email, so we only send to addresses that have actively confirmed. Every message we send carries an unsubscribe link.
When you email us (info@, editor@, investigations@, or partners@grailogic.com): your email address, name if you provide it, and the content of your message.
When you visit the Site: our hosting provider automatically processes technical data such as IP address, browser type, device information, pages visited, and timestamps (server logs), and we see aggregated, non-identifying visitor statistics.
Cookies and similar technologies: see Section 10.

We do not knowingly collect data from children, and the Site is not directed at children. We do not collect special categories of personal data.

3. Why we process it and on what legal basis

Sending you the email updates you asked for — legal basis: your consent (Art. 6(1)(a) GDPR), given when you confirm your subscription. You can withdraw it at any time by unsubscribing, which does not affect anything sent beforehand.
Responding to your enquiries — legal basis: our legitimate interest in communicating with people who contact us (Art. 6(1)(f) GDPR), or steps taken at your request.
Handling complaints and investigation tips — legal basis: our legitimate interest in editorial reporting and in verifying claims made on the Site (Art. 6(1)(f) GDPR); see Section 4.
Operating, securing, and improving the Site (server logs, aggregate statistics) — legal basis: our legitimate interest in running a secure, functional website (Art. 6(1)(f) GDPR).
Measuring and improving our email updates (for example whether a message was opened or a link clicked, and grouping subscribers by interest or activity so we can send more relevant content) — legal basis: your consent, together with our legitimate interest in running an effective publication (Art. 6(1)(a) and 6(1)(f) GDPR).
Non-essential cookies, if any — legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Legal obligations — where we must retain or disclose data to comply with applicable law (Art. 6(1)(c) GDPR).

GraiLogic is funded by affiliate commissions and, from time to time, by sponsored placements. Our email updates are part of the Site’s editorial output and are funded the same way: they may contain tool recommendations, affiliate links, and clearly marked sponsored content. See our Affiliate Disclosure for how this works and how it does not influence our rankings.

4. Complaints and investigation submissions

If you submit a complaint, tip, or evidence about an AI tool vendor (typically to investigations@grailogic.com), we process your submission under our Complaints & Investigations Policy. In addition to the general rules in this policy:

We treat complainant identities as confidential and do not publish your identity without your permission.
We may store your submission and related correspondence for as long as the related investigation, published finding, or any legal dispute concerning it remains live, because the evidence base for published reporting must be preserved.
If we contact a vendor about your complaint, we describe the substance of the complaint without identifying you, unless you have agreed otherwise.

5. Who receives your data

We do not sell personal data. We share it only with service providers (processors) who help us run the Site:

Hosting, platform, and email delivery: the Site runs on WordPress.com, operated by Automattic Inc., which processes server logs and site statistics on our behalf under its own data processing terms. Automattic also stores our subscriber list and delivers the email updates described in Section 2 on our behalf.
Email: our mailboxes are hosted by Titan (titan.email), provisioned through WordPress.com. Messages you send to any of our addresses, and our replies, are stored and processed on Titan’s systems on our behalf under its own data processing terms.
Future service providers: if we move our email updates to a dedicated newsletter platform, or add analytics, audience, or advertising services, those providers will process the relevant data on our behalf under equivalent terms. We will update this section when that happens.

We may also disclose data where required by law or to establish, exercise, or defend legal claims.

6. International transfers

Our hosting provider (Automattic Inc.) is based in the United States, so technical data and subscriber email addresses may be transferred outside the European Economic Area. Such transfers rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses, as set out in the provider’s data processing terms.

7. How long we keep data

Email subscriptions: until you unsubscribe. After that we keep a minimal record of your address on a do-not-contact list, so that we do not email you again by mistake.
General correspondence: as long as needed to handle your enquiry, then up to 2 years for reference, unless a longer period is required.
Complaint and investigation material: for the life of the related investigation or published finding, and for the duration of any legal limitation period that applies to the related reporting.
Server logs and statistics: retained per our hosting provider’s standard schedules; we do not separately store raw logs.

8. Your rights

Under the GDPR you have the right to: access your personal data; have it rectified or erased; restrict or object to processing based on legitimate interest; receive your data in a portable format where processing is based on consent or contract; and withdraw consent at any time (without affecting prior processing). To exercise any right, email info@grailogic.com — we respond within one month. If you simply want to stop receiving email updates, the unsubscribe link at the bottom of every message is the fastest route.

You also have the right to lodge a complaint with a supervisory authority, in particular the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu) or the authority of your habitual residence in the EU.

9. Security

We use the technical and organisational measures of our platform providers (encrypted connections, access controls) and limit access to personal data to what is necessary to operate the Site. No internet transmission is completely secure, so we cannot guarantee absolute security.

10. Cookie Policy

Cookies are small text files placed on your device. The Site is hosted on WordPress.com (Automattic Inc.), which sets a small number of cookies needed for the platform to work — for example to check whether your browser accepts cookies at all, to establish which country you are visiting from for consent purposes, and to remember your response to a consent notice once you have given one. The Site carries no advertising banners, and we set no profiling or third-party tracking cookies of our own. If you subscribe to email updates or leave a comment, our platform provider may set additional cookies to remember that you have done so; these are set only if you take that action.

Cookie	Category	Purpose	Provider	Duration
country_code	Strictly necessary	Establishes which country you are visiting from, so the platform can determine whether a consent notice needs to be shown	Automattic (WordPress.com)	6 hours
wordpress_test_cookie	Strictly necessary	Checks whether your browser accepts cookies at all	Automattic (WordPress.com)	Session
sensitive_pixel_option, eucookielaw	Strictly necessary	Stores your response to a consent notice so that it is not shown to you again; set only once you have responded	Automattic (WordPress.com)	Persistent
Subscription and comment cookies	Strictly necessary — set only if you subscribe or comment	Remember that you have subscribed to email updates or submitted a comment, so the forms do not ask you for the same details again	Automattic (WordPress.com)	As set by the provider
Site Stats measurement	Analytics / statistics	Counts visits and approximate visitor location in aggregate; we see visitor numbers and trends, not individual profiles	Automattic (WordPress.com)	As set by the provider
wordpress_logged_in_, wp-settings-	Strictly necessary — site administrators only	Keeps signed-in editors authenticated in the administration area; never set for ordinary visitors	Automattic (WordPress.com)	Session – up to 1 year

This table reflects the cookie documentation published by our hosting provider (automattic.com/cookies, version dated February 5, 2026), which the provider itself describes as representative rather than exhaustive. The Site does not currently display a cookie consent notice. Putting a consent mechanism in place for the analytics cookies described above is part of our public beta work, and we will update this section when it is live. If we introduce any further cookies that require consent we will ask for that consent before setting them and will update this table accordingly. In the meantime you can control cookies through your browser settings, including blocking or deleting them; blocking strictly necessary cookies may affect how the Site works.

11. Changes to this policy

We may update this Privacy & Cookie Policy from time to time. The current version is always available on this page with its effective date. For significant changes, we will indicate the update prominently on this page.

12. Contact

General enquiries and privacy matters: info@grailogic.com
Corrections and content: editor@grailogic.com
Investigations, complaints, and right of reply: investigations@grailogic.com
Vendors, press, and partnerships: partners@grailogic.com

Methodology About Contact Terms of Use Privacy & Cookie Policy Complaints & Investigations Public Beta Status