Legal

Privacy Policy

Last updated: 25 April 2026

Summary

We collect minimal personal data. We use Google Analytics (only with your consent) to understand site traffic, and Formspree to receive feedback form submissions. We use affiliate links that may be tracked by third-party programs. You can opt out of analytics at any time by adjusting your cookie preferences.

1. Who We Are

AI Transparency Hub ("we", "us", "our") is a website providing information about AI model cards, the EU AI Act, and AI-powered software tools. Our website is located at [YOUR DOMAIN].

If you have any questions about this Privacy Policy, please contact us using the feedback form or by emailing [YOUR EMAIL ADDRESS].


2. What Data We Collect and Why

2.1 Analytics Data (Google Analytics)

With your consent, we use Google Analytics 4 to collect anonymised information about how visitors use this website. This includes:

  • Pages visited and time spent on each page
  • Referring website or search engine
  • General geographic location (country/city level — we do not collect precise location)
  • Device type and browser
  • Events such as link clicks and scroll depth

Legal basis: Consent (Article 6(1)(a) GDPR). We only load Google Analytics after you click "Accept analytics" on the cookie banner.

IP addresses are anonymised before being sent to Google. We do not use Google Analytics advertising features, remarketing, or demographic reporting.

Google Analytics data is processed by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. Google's privacy policy is available at policies.google.com/privacy. You can opt out of Google Analytics across all websites using the Google Analytics Opt-out Browser Add-on.

2.2 Feedback Form Submissions (Formspree)

When you submit the feedback form, the data you enter is processed by Formspree, Inc. This includes:

  • Your name (if provided)
  • Your email address (if provided)
  • The feedback type you selected
  • The message you entered
  • Any tool name or page reference you included

Legal basis: Legitimate interests (Article 6(1)(f) GDPR) — we have a legitimate interest in receiving feedback to improve the site, and you have a legitimate expectation that submitting a feedback form results in us receiving it.

Formspree is a third-party service that receives and stores form submissions on our behalf. Formspree's privacy policy is available at formspree.io/legal/privacy-policy. Your submission data is stored by Formspree for up to 30 days in their standard plan. We receive the data by email and retain it only as long as necessary to respond to your message.

2.3 Affiliate Link Tracking

Some links on this website are affiliate links. When you click an affiliate link and visit the linked website, the affiliate program may set cookies on your device to track whether you subsequently make a purchase or sign up.

We do not control the cookies set by affiliate programs. These cookies are set by the third-party merchant's website, not by us. Please refer to the privacy policies of the individual vendors for more information.

We may receive information from affiliate programs about the number and value of conversions attributable to our links. This information is aggregated and does not include your personal details.

2.4 Server Logs

Our web hosting provider may automatically collect standard server log data, which can include your IP address, browser type, pages requested, and timestamps. This data is used for security monitoring and is retained for a short period in accordance with the hosting provider's policy. We do not use this data to identify individual visitors.


3. Cookies

We use the following types of cookies on this site:

Cookie name Type Purpose Duration
cookie_consent Functional (localStorage) Stores your cookie consent preference (accepted / declined) Persistent (localStorage)
_ga Analytics (Google) Distinguishes unique users for Google Analytics 2 years
_ga_XXXXXXXX Analytics (Google) Stores and counts page views (GA4 session data) 2 years

Analytics cookies are only set if you click "Accept analytics" on our cookie banner. You can change your preference at any time by clearing your browser's localStorage data for this site, or by using your browser's privacy settings.

Affiliate cookies

When you click an affiliate link and visit a third-party website, that website may set its own tracking cookies. These are outside our control. Common affiliate cookie durations range from 7 to 90 days depending on the program.


4. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the UK, you have the following rights regarding your personal data:

  • Right of access — You can request a copy of any personal data we hold about you.
  • Right to rectification — You can ask us to correct inaccurate data.
  • Right to erasure — You can ask us to delete your personal data in certain circumstances.
  • Right to restriction — You can ask us to restrict processing of your data in certain circumstances.
  • Right to data portability — You can request your data in a machine-readable format.
  • Right to object — You can object to processing based on legitimate interests.
  • Right to withdraw consent — Where we rely on consent (analytics cookies), you can withdraw it at any time. Withdrawal does not affect the lawfulness of processing before withdrawal.

To exercise any of these rights, please contact us at [YOUR EMAIL ADDRESS]. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority. In Ireland, this is the Data Protection Commission (dataprotection.ie). In the UK, this is the Information Commissioner's Office (ico.org.uk).


5. Data Retention

We retain personal data only as long as necessary for the purpose for which it was collected:

  • Feedback form submissions — retained in our email inbox until no longer needed to respond, typically no more than 12 months.
  • Google Analytics data — retained for 14 months in Google Analytics (the minimum configurable retention period for GA4). You can view Google's data retention settings in their documentation.
  • Server logs — retained by our hosting provider in accordance with their policy, typically 30–90 days.

6. Third-Party Links

Our website contains links to external websites, including affiliate partner sites, official EU publications, and AI model documentation. We are not responsible for the privacy practices of these third-party websites. We encourage you to read their privacy policies before providing any personal data.


7. Children's Privacy

This website is not directed at children under the age of 16 and we do not knowingly collect personal data from children. If you believe a child has submitted personal data to us, please contact us and we will delete it promptly.


8. Changes to This Policy

We may update this Privacy Policy from time to time. We will update the "Last updated" date at the top of this page when we do. Significant changes will be highlighted on the site. Continued use of the site after changes are posted constitutes acceptance of the updated policy.


9. Contact

For any privacy-related queries, please use our feedback form (select "Contact" from the dropdown) or email [YOUR EMAIL ADDRESS].