Privacy & Cookies

Who we are

ShirtScout (shirt-scout.com) is operated by C. Overduin, the Netherlands, who is the controller of the personal data described below. Questions or requests: [email protected].

What we collect and why

• Technical logs. When you visit the site, our web server and our network provider Cloudflare process your IP address, browser type, the page requested and the time. We use this only to deliver the site, keep it secure and fix problems (legitimate interest, Article 6(1)(f) GDPR). Logs are kept only as long as needed for those purposes.
• Visitor statistics. We count visits with Umami, which runs on our own server. It records the page, referring site, browser, device type and country, and which links, filters and search terms are used, without cookies and without storing your IP address, so visits cannot be traced back to you. We use these totals to see which parts of the site are used and to improve them (legitimate interest, Article 6(1)(f) GDPR).
• Emails you send us. If you email us, we use your address and message only to reply, and delete them when they are no longer needed.

We do not use advertising trackers, third-party analytics or social-media plugins, we do not build profiles, and we never sell personal data.

Links to eBay

Listings link to eBay through the eBay Partner Network (see our affiliate disclosure). When you follow such a link you leave ShirtScout; eBay may then set cookies and process your data under eBay's privacy notice. We only receive aggregated reports (such as numbers of clicks and commissions), never your identity.

Shirt photos are loaded directly from eBay's image servers, so eBay receives your IP address and browser details when you view them, as with any image hosted by eBay.

Cookies

ShirtScout itself sets no cookies, including for statistics, so we do not show a cookie banner. Cloudflare may place a strictly necessary security cookie to protect the site against abusive traffic; it contains no information that identifies you and does not require consent.

Service providers

• Cloudflare, Inc. — network, security and DNS.
• Cloud86 B.V. (the Netherlands) — email.
• Hetzner Online GmbH (Germany) — server hosting, including the statistics.

These providers process data only on our behalf. Where data is transferred outside the EU, this happens under the EU–US Data Privacy Framework or the European Commission's standard contractual clauses.

Your rights

You may ask for access to, correction or deletion of your personal data, restriction of or objection to its processing, and data portability. Email [email protected]; we reply within one month. You also have the right to complain to the Dutch data-protection authority, Autoriteit Persoonsgegevens.

Changes

We may update this page; the date at the top shows the latest version.