Privacy policy
This policy explains what data Alltoknowabout processes, why, who it is shared with and how to exercise your rights (Regulation (EU) 2016/679, “GDPR”, and its UK equivalent).
Controller
Billy Berthod, publisher of alltoknowabout.com.
Address: 7 rue du Moulin, 39380 Vaudrey
Contact: [email protected]
Data processed and purposes
In the EEA, the United Kingdom and Switzerland, with your consent, the site processes browsing data (cookie identifiers, IP address used for an approximate location, pages viewed, visit duration, browser, system, interactions with ads) for two purposes:
- audience measurement and improving the site (Google Analytics 4);
- showing advertising (Google AdSense), possibly personalised if you consent, which funds the site.
The site does not directly collect your name, e-mail address or phone number unless you write to us or sign up for a recall alert.
Recall alerts by e-mail
Where the recall checker offers it, you can ask to be told by e-mail when a new safety recall is published for a vehicle. To do so the site stores the e-mail address you enter and the make, model and year of that vehicle, and nothing else about you. The alert starts only after you click the confirmation link sent to that address (consent, Article 6(1)(a)); a request left unconfirmed is deleted within 8 days.
The address is used only to send these alerts: no newsletter, no advertising, no sharing with advertisers. Every alert carries an unsubscribe link, and unsubscribing deletes the address and the vehicle at once. Until then the subscription is kept.
The form is protected against automated sign-ups by Cloudflare Turnstile, and salted, non-reversible hashes of the IP address and of the e-mail address are kept for at most 48 hours to limit abuse (legitimate interest, Article 6(1)(f)).
Legal basis and consent
Placing audience-measurement and advertising cookies or similar technologies, and the processing that follows, rely on your consent (Article 6(1)(a) GDPR / UK GDPR; Regulation 6 of the UK PECR for visitors in the United Kingdom).
In the European Economic Area, the United Kingdom and Switzerland, this consent is collected by Google’s consent message (“Privacy and messaging”) before any of these cookies is set. In those territories these cookies are only set with your consent. Outside them, that message is not shown and these cookies are set by default. Without consent, non-personalised or limited ads may be shown, and Google may receive cookie-less signals (IP address, page view).
In those territories, you can withdraw or change your choice at any time, as easily as you gave it, with the “Manage cookies” button at the bottom of every page except the error page. Withdrawal does not affect processing carried out before it.
Technical logs of the host and delivery network (IP address, requests) are processed on the basis of the legitimate interest in delivering and securing the site (Article 6(1)(f)).
Recipients
- Google Ireland Limited (EEA, Switzerland) and Google LLC (United Kingdom and rest of the world): audience measurement and advertising. policies.google.com/privacy
- Hetzner Online GmbH (Germany): hosting. hetzner.com/legal/privacy-policy
- Cloudflare, Inc.: delivery and protection of the site, storage of recall alert subscriptions. cloudflare.com/privacypolicy
- Resend, Inc.: sending of the recall alert e-mails. resend.com/legal/privacy-policy
Transfers outside the European Union
Data may be transferred to the United States (Google LLC, Cloudflare, Inc., Resend, Inc.). These transfers rely on the EU–US Data Privacy Framework, including its UK and Swiss extensions, for certified companies, and otherwise on standard contractual clauses.
Retention
Google Analytics 4 event data is kept for the retention period configured in the site’s GA4 property. Google caps it at 14 months (2 months by default). Advertising cookie lifetimes are set by Google: policies.google.com/technologies/cookies.
GA4 cookies (_ga, _ga_*) can last up to 2 years and, in the EEA, the United Kingdom and Switzerland, are only set with your consent.
Technical server logs (Hetzner) and delivery-network logs (Cloudflare) are kept for at most 12 months, for the security and proper operation of the site (legitimate interest).
E-mails received at the contact address are kept for as long as needed to handle the request, then deleted at the latest 3 years after the last exchange.
Your rights
You have the rights of access, rectification, erasure, objection, restriction and portability, and the right to withdraw your consent.
To exercise them: [email protected].
You may also lodge a complaint with the CNIL or with the data protection authority where you live.
You can delete cookies in your browser or install the Google Analytics opt-out add-on.
Changes
This policy may change. Last updated: October 2026.