Privacy Policy

Spectrum Joy is the data controller for personal data collected through this website. You can reach us at [email protected].

We are a small affiliate publication. We do not sell or ship physical products ourselves; product purchases are completed on AliExpress under their own privacy terms.

We try to collect as little personal data as possible. Categories we may collect:

• Device & usage data: IP address (truncated for analytics), browser type, device type, pages viewed, referrer, country/region — collected via Google Analytics 4 only after you consent.
• Language preference: the locale (en/es) you choose, stored as a cookie.
• Email address: only if you voluntarily contact us at [email protected] or subscribe to a newsletter (currently we do not run one).
• Affiliate click identifiers: anonymous click IDs passed to AliExpress when you click an affiliate link, so they can attribute the visit. We do not pass your name or email.
• Cookie consent state: your choice from our cookie banner is stored locally in your browser.

We do not collect: payment information, government IDs, biometric data, precise GPS location, or sensitive personal information (health, sexuality, religion, politics).

• Run and secure the website (essential cookies, server logs) — legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Measure aggregate traffic and improve content (Google Analytics 4) — legal basis: consent (Art. 6(1)(a) GDPR). Disabled by default until you accept analytics cookies.
• Affiliate attribution — legal basis: legitimate interest, limited to what is needed to credit referrals.
• Respond to your messages — legal basis: legitimate interest / pre-contractual steps.

We use a small number of cookies and local-storage entries:

• Essential: language preference, cookie consent record. Always on; cannot be disabled. No legal basis required other than necessity.
• Analytics (Google Analytics 4, _ga, _ga_*): only loaded if you click 'Accept all' or enable analytics in the customize panel. IP anonymized, ads_data_redaction enabled. Retention: 14 months.
• Marketing & advertising: not used at this time. Reserved as a category for future advertising features and listed in the consent banner so you can pre-decline.
• Preferences: small UI choices (e.g., dismissed banners). Off by default unless enabled in the customize panel.

We use Google Consent Mode v2 to respect your choice across Google services. You can change your decision anytime via the Cookie settings link in the footer.

We share data only with the processors strictly needed to run the site:

• Cloudflare — CDN, DDoS protection, server logs (legitimate interest, security).
• Google LLC — Google Analytics 4 (only after consent). Data may be transferred to the US under Google's EU-US Data Privacy Framework certification and Standard Contractual Clauses.
• Hosting provider — server logs.
• AliExpress (Alibaba Group) — only when you click through an affiliate link, and only for attribution. Their own privacy policy applies once you arrive on their site.

We do not sell or share personal information for cross-context behavioral advertising as defined under the CPRA. We never sell, rent, or trade personal data.

Some of our processors (e.g., Google, Cloudflare) are based in the United States. Where data leaves the EEA or UK, we rely on the EU-US Data Privacy Framework, the UK Data Bridge, or Standard Contractual Clauses approved by the European Commission.

• Server logs: up to 30 days.
• Google Analytics 4 data: 14 months (default), then automatically deleted.
• Cookie consent record: 12 months in your browser.
• Email correspondence: kept while needed to handle your request, then deleted within 24 months.

If you are in the EEA, UK, or Switzerland, you have the right to:

• Access — get a copy of your personal data.
• Rectification — correct inaccurate data.
• Erasure ('right to be forgotten') — request deletion.
• Restriction — limit how we use your data.
• Portability — receive your data in a machine-readable format.
• Object — to processing based on legitimate interest, including direct marketing.
• Withdraw consent at any time — does not affect prior lawful processing.
• Lodge a complaint with your supervisory authority (e.g., your country's Data Protection Authority).

To exercise any right, email [email protected]. We respond within 30 days, free of charge.

If you are a California resident (or a resident of Colorado, Connecticut, Virginia, Utah, Texas, Oregon, Montana, or another US state with a comprehensive privacy law), you have the right to:

• Know what personal information we collect, use, disclose.
• Delete personal information we hold about you.
• Correct inaccurate personal information.
• Opt out of the 'sale' or 'sharing' of personal information for cross-context behavioral advertising.
• Limit the use and disclosure of sensitive personal information.
• Non-discrimination for exercising your rights.

We do not sell or share personal information as defined under the CPRA. Even so, you may submit an opt-out request: rejecting non-essential cookies in our cookie banner satisfies a Global Privacy Control / opt-out signal, and we honor browser-level GPC signals.

To submit a verifiable consumer request, email [email protected] with the subject 'Privacy Request — [your state]'. We respond within 45 days.

This website is intended for adults (parents, caregivers, educators). It is not directed at children under 13. We do not knowingly collect personal information from children. If you believe a child has provided us personal data, please contact us and we will delete it.

We use HTTPS, security headers, and least-privilege access. No method of transmission over the Internet is 100% secure; we strive to protect your data but cannot guarantee absolute security.

We may update this Privacy Policy. The 'Last updated' date at the top reflects the most recent version. Material changes will be highlighted on this page for at least 30 days.

Privacy questions, rights requests, complaints: [email protected].

If you are in the EU and prefer a national authority, you can find your supervisory authority at https://edpb.europa.eu/about-edpb/about-edpb/members_en.