Privacy & Cookie Policy

Effective date: July 21, 2026 · Last updated: October 1, 2026

GraiLogic (grailogic.com, the "Site") is an independent editorial project operated from Hungary (see our Public Beta Status page for details on the project’s current operating status — the "operator", "we", "us"). This policy explains what personal data we process when you visit the Site, subscribe to email updates, contact us, request or order video production from GraiLogic Studio, or join the GraiLogic Studio referral program, why, and what rights you have under the EU General Data Protection Regulation (GDPR). It also explains our use of cookies (Section 10).

1. Who is the data controller

The controller of personal data processed through the Site is the Site operator identified on our Public Beta Status page. For all privacy matters, contact us at info@grailogic.com.

2. What data we collect

The Site is an editorial, informational website, and through GraiLogic Studio it also offers video production. There are no user accounts. We collect personal data only in these limited situations:

When you subscribe to email updates — our newsletter, notifications about new posts, or replies to a comment: your email address, and the date and time you subscribed. Subscriptions are confirmed by a double opt-in email, so we only send to addresses that have actively confirmed. Every message we send carries an unsubscribe link.
When you email us (info@, editor@, investigations@, partners@ or affiliate@grailogic.com): your email address, name if you provide it, and the content of your message.
When you request a quote or order from GraiLogic Studio: your name, email address, company, the details of your project, any material you send us (for example product photos or brand files), a referral code if you arrived through one, whether you ticked the box to receive GraiLogic Studio updates by email (and when), and our quotes, invoices and payment records.
When you join the GraiLogic Studio referral program: your name, contact email, where you plan to share your code, the PayPal or Wise email you want to be paid to, your referral code, and the record of each referral (reference number, status, commission and payout date).
When you visit the Site: our hosting provider automatically processes technical data such as IP address, browser type, device information, pages visited, and timestamps (server logs), and we see aggregated, non-identifying visitor statistics.
Cookies and similar technologies: see Section 10.

We do not knowingly collect data from children, and the Site is not directed at children. We do not collect special categories of personal data.

3. Why we process it and on what legal basis

Sending you the email updates you asked for — legal basis: your consent (Art. 6(1)(a) GDPR), given when you confirm your subscription. You can withdraw it at any time by unsubscribing, which does not affect anything sent beforehand.
Responding to your enquiries — legal basis: our legitimate interest in communicating with people who contact us (Art. 6(1)(f) GDPR), or steps taken at your request.
Handling complaints and investigation tips — legal basis: our legitimate interest in editorial reporting and in verifying claims made on the Site (Art. 6(1)(f) GDPR); see Section 4.
Operating, securing, and improving the Site (server logs, aggregate statistics) — legal basis: our legitimate interest in running a secure, functional website (Art. 6(1)(f) GDPR).
Measuring and improving our email updates (for example whether a message was opened or a link clicked, and grouping subscribers by interest or activity so we can send more relevant content) — legal basis: your consent, together with our legitimate interest in running an effective publication (Art. 6(1)(a) and 6(1)(f) GDPR).
Preparing quotes and delivering GraiLogic Studio orders — legal basis: steps taken at your request before a contract, and performance of the contract (Art. 6(1)(b) GDPR); keeping invoices and payment records — legal obligation (Art. 6(1)(c) GDPR).
Sending GraiLogic Studio updates by email (new work, behind-the-scenes and offers) — legal basis: your consent, given by ticking the box on our quote form (Art. 6(1)(a) GDPR). If you have ordered from us, we may also tell you about similar Studio services based on our legitimate interest (Art. 6(1)(f) GDPR); you can object at any time. Every message carries an unsubscribe link, and unsubscribing does not affect anything sent beforehand.
Running the referral program and paying commissions — legal basis: performance of the program terms you accepted (Art. 6(1)(b) GDPR) and, for payment records, legal obligation (Art. 6(1)(c) GDPR). Recording which referrer introduced a client is based on our legitimate interest in paying the correct referrer (Art. 6(1)(f) GDPR). A referrer only receives the reference number, status, commission and payout date of a referral — never the client's own details.
Non-essential cookies, if any — legal basis: your consent (Art. 6(1)(a) GDPR), which you can withdraw at any time.
Legal obligations — where we must retain or disclose data to comply with applicable law (Art. 6(1)(c) GDPR).

GraiLogic is funded by affiliate commissions and, from time to time, by sponsored placements. Our email updates are part of the Site’s editorial output and are funded the same way: they may contain tool recommendations, affiliate links, and clearly marked sponsored content. See our Affiliate Disclosure for how this works and how it does not influence our rankings.

4. Complaints and investigation submissions

If you submit a complaint, tip, or evidence about an AI tool vendor (typically to investigations@grailogic.com), we process your submission under our Complaints & Investigations Policy. In addition to the general rules in this policy:

We treat complainant identities as confidential and do not publish your identity without your permission.
We may store your submission and related correspondence for as long as the related investigation, published finding, or any legal dispute concerning it remains live, because the evidence base for published reporting must be preserved.
If we contact a vendor about your complaint, we describe the substance of the complaint without identifying you, unless you have agreed otherwise.

5. Who receives your data

We do not sell personal data. We share it only with service providers (processors) who help us run the Site:

Hosting, platform, and email delivery: the Site runs on WordPress.com, operated by Automattic Inc., which processes server logs and site statistics on our behalf under its own data processing terms. Automattic also stores our subscriber list and delivers the email updates described in Section 2 on our behalf.
Email: our mailboxes are hosted by Titan (titan.email), provisioned through WordPress.com. Messages you send to any of our addresses, and our replies, are stored and processed on Titan’s systems on our behalf under its own data processing terms.
Studio quote form: requests sent through the quote form on our Studio page are received and stored in our workflow automation account on n8n Cloud, operated by n8n GmbH (Germany), on our behalf under its data processing terms. The internal notification we receive about a new request contains only a reference number, the service and any referral code, never your name or contact details.
Payments: when we pay referral commissions, PayPal or Wise process the payment as independent controllers under their own terms.
Future service providers: if we move our email updates to a dedicated newsletter platform, or add analytics, audience, or advertising services, those providers will process the relevant data on our behalf under equivalent terms. We will update this section when that happens.

We may also disclose data where required by law or to establish, exercise, or defend legal claims.

6. International transfers

Our hosting provider (Automattic Inc.) is based in the United States, so technical data and subscriber email addresses may be transferred outside the European Economic Area. Such transfers rely on safeguards recognised under the GDPR, such as the EU–US Data Privacy Framework and/or Standard Contractual Clauses, as set out in the provider’s data processing terms.

7. How long we keep data

Email subscriptions: until you unsubscribe. After that we keep a minimal record of your address on a do-not-contact list, so that we do not email you again by mistake.
General correspondence: as long as needed to handle your enquiry, then up to 2 years for reference, unless a longer period is required.
GraiLogic Studio quotes that were not accepted: up to 2 years.
GraiLogic Studio email updates: until you unsubscribe. After that we keep a minimal record of your address on a do-not-contact list.
GraiLogic Studio orders, invoices, payment and commission records: as long as accounting and tax law requires (in Hungary, generally 8 years).
Referral program details: while you take part, and up to 2 years after you leave or your last referral, except payment records, which follow the rule above.
Complaint and investigation material: for the life of the related investigation or published finding, and for the duration of any legal limitation period that applies to the related reporting.
Server logs and statistics: retained per our hosting provider’s standard schedules; we do not separately store raw logs.

8. Your rights

Under the GDPR you have the right to: access your personal data; have it rectified or erased; restrict or object to processing based on legitimate interest; receive your data in a portable format where processing is based on consent or contract; and withdraw consent at any time (without affecting prior processing). To exercise any right, email info@grailogic.com — we respond within one month. If you simply want to stop receiving email updates, the unsubscribe link at the bottom of every message is the fastest route.

You also have the right to lodge a complaint with a supervisory authority, in particular the Hungarian National Authority for Data Protection and Freedom of Information (NAIH, naih.hu) or the authority of your habitual residence in the EU.

9. Security

We use the technical and organisational measures of our platform providers (encrypted connections, access controls) and limit access to personal data to what is necessary to operate the Site. No internet transmission is completely secure, so we cannot guarantee absolute security.

10. Cookie Policy

Cookies are small text files placed on your device. The Site is hosted on WordPress.com (Automattic Inc.), which sets a small number of cookies needed for the platform to work — for example to check whether your browser accepts cookies at all, to establish which country you are visiting from for consent purposes, and to remember your response to a consent notice once you have given one. The Site carries no advertising banners, and we set no profiling or third-party tracking cookies of our own. If you subscribe to email updates or leave a comment, our platform provider may set additional cookies to remember that you have done so; these are set only if you take that action.

Cookie	Category	Purpose	Provider	Duration
country_code	Strictly necessary	Establishes which country you are visiting from, so the platform can determine whether a consent notice needs to be shown	Automattic (WordPress.com)	6 hours
wordpress_test_cookie	Strictly necessary	Checks whether your browser accepts cookies at all	Automattic (WordPress.com)	Session
sensitive_pixel_option, eucookielaw	Strictly necessary	Stores your response to a consent notice so that it is not shown to you again; set only once you have responded	Automattic (WordPress.com)	Persistent
Subscription and comment cookies	Strictly necessary — set only if you subscribe or comment	Remember that you have subscribed to email updates or submitted a comment, so the forms do not ask you for the same details again	Automattic (WordPress.com)	As set by the provider
Site Stats measurement	Analytics / statistics	Counts visits and approximate visitor location in aggregate; we see visitor numbers and trends, not individual profiles	Automattic (WordPress.com)	As set by the provider
gstRef (browser local storage, GraiLogic Studio pages only)	Functional — set only if you click “Save my 10% for 90 days”	Remembers the referral code you chose to save, so the discount is added to your quote request. If you arrive through a referral link without saving, the code is used for that page view only and nothing is stored. The “Remove” button deletes it at any time.	GraiLogic (first party)	90 days
wordpress_logged_in_, wp-settings-	Strictly necessary — site administrators only	Keeps signed-in editors authenticated in the administration area; never set for ordinary visitors	Automattic (WordPress.com)	Session – up to 1 year

This table reflects the cookie documentation published by our hosting provider (automattic.com/cookies, version dated February 5, 2026), which the provider itself describes as representative rather than exhaustive. The Site does not currently display a cookie consent notice. Putting a consent mechanism in place for the analytics cookies described above is part of our public beta work, and we will update this section when it is live. If we introduce any further cookies that require consent we will ask for that consent before setting them and will update this table accordingly. In the meantime you can control cookies through your browser settings, including blocking or deleting them; blocking strictly necessary cookies may affect how the Site works.

11. Changes to this policy

We may update this Privacy & Cookie Policy from time to time. The current version is always available on this page with its effective date. For significant changes, we will indicate the update prominently on this page.

12. Contact

General enquiries and privacy matters: info@grailogic.com
Corrections and content: editor@grailogic.com
Investigations, complaints, and right of reply: investigations@grailogic.com
Vendors, press, partnerships and GraiLogic Studio quotes: partners@grailogic.com
GraiLogic Studio referral program: affiliate@grailogic.com

Methodology About Contact Terms of Use Privacy & Cookie Policy Complaints & Investigations Public Beta Status