Privacy policy

Who we are

QuoteGeek ("we") is operated by the QuoteGeek team, UK. Contact us via thecorrections form on every page.

What we process and why

• Reference content about public figures (names, public identifiers, attributed quotes, verification findings) -- lawful basis: legitimate interests (a legitimate interests assessment is on record; a summary is available on request). We publish only what public sources support, and we correct fast.
• Corrections and complaints you send us (your name, contact details, message) -- lawful basis: legitimate interests (operating a corrections process). Kept 24 months, then deleted.
• API keys (your email address) -- lawful basis: contract (providing the API service).
• Server logs (IP, user agent) -- security and abuse prevention; rotated within 30 days.
• Aggregate usage measurement (pages viewed, referrer, device type, approximate country from IP, and actions such as copying a quote or opening a search result) -- lawful basis: legitimate interests (knowing which pages are worth improving). Collected via Google Analytics with device storage switched off: no cookie or identifier is written to or read from your device, and your visits cannot be linked to one another or to you. Retained 14 months.

What we don't do

No advertising cookies, no sale of personal data, and no cookie banner -- because we set no cookies at all. Our analytics are configured to store nothing on your device, which is why we are not asking your permission to do it. Some outbound book/film links are affiliate links -- they are labelled where they appear and involve no data sharing beyond the click.

Your rights

Access, rectification, erasure, restriction, objection, portability. Use thecorrections form; we respond within one calendar month. Erasure requests concerning pages about public statements get a documented public-interest assessment -- we tell you the outcome and reasoning either way. You may complain to the ICO (ico.org.uk).

Recipients and transfers

Hosting and CDN suppliers, and Google (for the cookieless analytics described above), all under standard processing terms; no other recipients. Analytics data may be processed outside the UK, including in the United States, under the provider's standard transfer safeguards. Retention is as stated per category above.