Privacy Policy — Cookies / Third-Party APIs / Data Retention

1. Who We Are (Data Controller)

This website, tg4g.com (referred to as "we", "us" or "TG4G"), is an independently operated directory and review site for overseas digital resources. The data controller can be reached at [email protected].

2. Data We Collect (Data We Collect)

2.1 Information you provide directly

Content submitted through feedback or contact forms (name, email address, message)
Listing-request submissions and DMCA / copyright complaint emails

2.2 Information collected automatically

IP address (used for anti-scraping, abuse prevention and coarse geolocation; hashed after 7 days)
User-Agent / Referer (used for traffic analysis)
Pages viewed, time on page and click behaviour (aggregate statistics only, not individualized)
Cookies and local storage — see Section 3

We do not collect sensitive personal information (political opinions, religion, health, sexual orientation or biometric data).

3. Cookies & Local Storage (Cookies)

The complete inventory of cookies and localStorage keys used by TG4G:

Name	Type	Purpose	Retention	Source
`__cf_bm`	Necessary	Cloudflare bot management (anti-scraping)	30 minutes	Cloudflare
`cf_clearance`	Necessary	Cloudflare clearance token issued after a challenge is passed	30 days	Cloudflare
`tg4g_favs`	Functional	localStorage holding the provider IDs you have favorited	Persistent	tg4g.com (local)
`tg4g_cols_*`	Functional	localStorage holding your hidden / shown table-column preferences	Persistent	tg4g.com (local)
`tg4g_session`	Necessary	Login session (forum module only)	Session	tg4g.com

We do not use advertising cookies, cross-site tracking cookies, Facebook Pixel or Google Analytics.

You can clear all cookies and localStorage at any time through your browser settings. After clearing, local data such as your favorites and column preferences will be lost, but this will not affect your ability to browse the site.

4. Third-Party Services (Third-Party Processors)

To deliver this site, we transfer a limited set of data to the following processors:

Third party	Purpose	Data shared	Location	Policy
Cloudflare	CDN, DNS, DDoS protection, bot management	IP, User-Agent, the `__cf_bm` cookie	Global edge	Cloudflare Privacy
DeepSeek	Review content generation (offline, back-office calls)	Public provider information only (none of your personal data)	China	DeepSeek Privacy
Clearbit Logo API	Fetching provider logo images	Provider domain only (none of your personal data)	United States	Clearbit Privacy
Google Fonts	Web fonts (on some pages)	IP, Referer (standard font-CDN logs)	Global	Google Privacy
Bing IndexNow	Proactively pushing new content to the Bing index	Page URLs only (none of your personal data)	United States	Bing Privacy

All third parties have entered into a data processing agreement (DPA) with us and may use the data only within the agreed scope.

5. Purposes of Processing (Purposes)

Providing directory browsing, filtering and favoriting features (legal basis: performance of a contract / legitimate interest)
Compiling aggregate traffic statistics to improve the product (legal basis: legitimate interest)
Responding to feedback, corrections and DMCA complaints (legal basis: compliance with a legal obligation / legitimate interest)
Anti-scraping, abuse prevention and security (legal basis: legitimate interest)

6. Data Retention (Retention)

Data type	Retention period
Access logs (IP, UA, Referer)	Hashed after 7 days; plaintext deleted after 30 days
Feedback emails / form submissions	2 years (for traceability)
DMCA complaint records	5 years (legal requirement)
Aggregate statistics (no PII)	Indefinite
Local storage (favorites / columns)	Controlled by your own browser

7. Your Rights (Your Rights / DSAR)

Regardless of where you are located, we grant you rights equivalent to the GDPR / CCPA standard:

Right of Access — request a copy of all the data we hold about you
Right to Rectification — request correction of inaccurate data
Right to Erasure ("Right to be Forgotten") — request deletion of your data
Right to Restrict Processing — request that we pause processing of your data
Right to Data Portability — request an export in JSON / CSV format
Right to Object — object to processing based on legitimate interest
Right to Withdraw Consent — withdraw, at any time, any processing based on "consent"
Right to Non-Discrimination (CCPA) — exercising your rights will not affect the service you receive

To exercise these rights, email [email protected] with the subject line [DSAR], specifying the right you wish to exercise and the email address of the requester. We will respond in writing within 30 days. If we refuse a request without justification, you may lodge a complaint with your local data protection authority.

8. International Data Transfers (International Transfers)

TG4G's servers are located in Europe (Germany / Finland), while our third-party processors are located in the United States, China and at global edge nodes. Where cross-border transfers are involved, we rely on Standard Contractual Clauses (SCCs) under Article 46 of the GDPR as the legal basis.

9. Children's Privacy (Children's Privacy)

This site is not directed at children under 13 (U.S. COPPA) or under 16 (EU GDPR). If you are a parent and discover that your child has submitted data to us, please contact us by email and we will delete it immediately.

10. Breach Notification (Breach Notification)

In the event of a data breach likely to affect your rights and freedoms, we will notify the relevant data protection authority within 72 hours and, within a reasonable time, notify affected users through an on-site banner and/or email.

11. Changes to This Policy (Changes)

This policy may be updated. Material changes will be announced via a banner at the top of the site and through our email list (if you subscribe to RSS / email), and will take effect after 30 days' notice. Previous versions are available on request.