Privacy Policy

    Last updated: November 2026

    Who we are

    LaptopMedia Ltd. runs laptopmedia.com and all its country and language editions. We decide how personal data is used on the site, which makes us the data controller.

    CompanyLaptopMedia Ltd. (registered in Bulgaria as ЛаптопМедия ЕООД)
    Registered addressZname 4, 4002 Plovdiv, Bulgaria
    Company number (EIK)203909632
    VAT numberBG203909632
    ContactContact Us form, or post to the address above

    The form uses Google reCAPTCHA. If you prefer to avoid that, write to us by post.

    This policy covers the website. Our YouTube desktop tool has its own privacy policy.

    What we collect and why

    You can read LaptopMedia without an account and without giving us your name or email address. We process personal data in the situations below.

    WhenWhat we processWhyLegal basis
    You visit any pageIP address, browser and device details, page requested, referring page, timeTo deliver the site, keep it secure and fix faultsLegitimate interests
    You use the search boxThe words you type, IP address, browser detailsTo show results as you typeLegitimate interests
    You commentName, email address, comment, any image you upload, IP address, browser details, timeTo publish, moderate and translate comments, stop spam and contact you about your commentLegitimate interests
    You vote on a commentA hash of your IP addressTo stop repeat votesLegitimate interests
    You ask for comment notificationsEmail address, the article or comment you followTo send the emails you asked forConsent
    You use the contact formEmail address, your message, and the IP address and browser signals checked by Google reCAPTCHATo answer you and block spamLegitimate interests, or contract if it concerns an order
    You buy a display profileName, email address, product, price, time, IP address, payment ID, and download time, IP address and browser details. Billing address only if your payment wallet shares itTo deliver your order, handle refunds and prevent fraud, and keep accounting recordsContract; legal obligation; legitimate interests for fraud prevention
    Analytics are onPages viewed, device type, approximate location, online identifiersTo count readers and improve the siteConsent in the EEA, the UK and Switzerland; legitimate interests elsewhere
    You see adsSee Advertising, analytics and affiliate linksTo fund the siteLegitimate interests for limited ads. For personalized ads, consent in the EEA, the UK and Switzerland and legitimate interests elsewhere
    Someone tries to sign in to the admin areaUsername entered, IP address, timeTo protect the siteLegitimate interests

    Our legitimate interests are running a secure and useful site, hosting reader discussion and funding our testing. You can object to this processing at any time (see Your rights).

    A name and email address are required to comment, and the order details above are required to complete a purchase. Stripe collects your card or wallet details directly, so we never see your full card number.

    Comments

    Your name, comment, date and any image you upload are public. Your email address is not shown.

    • Profile pictures: a hash of your email address is sent to Gravatar, a service run by Automattic, and appears in the picture’s link. Gravatar shows your picture if you have one. Everyone who loads the comments connects to Gravatar, so it also receives their IP address.
    • Images: remove location data before you upload a photo, because other people can read it from a public image.
    • Spam checks: Antispam Bee checks comments on our own server. It sends nothing to a third party.
    • Notification emails: every email has an unsubscribe link.

    Automatic translation. We translate comments into the languages of the site so that readers of other editions can follow the discussion. We send the text of the comment to OpenAI through its API, and translated comments are labeled. We do not send your name, email address or IP address.

    Everything you type into a comment is sent, so do not include personal details in it. OpenAI keeps request logs for up to 30 days for abuse monitoring, unless the law requires longer. If you do not want your comment translated, write to us and we will remove the translations.

    Ads and affiliate commissions pay for our testing. In the EEA, the UK and Switzerland, Google’s privacy tool records your choices. You can reopen it at any time with the round shield icon at the bottom of the page. Outside those countries we show no prompt, so personalized ads and analytics can run unless you opt out with the links below.

    Advertising. We show ads through Google AdSense.

    • Until you accept (EEA, UK and Switzerland): we show limited ads. They use limited data, such as your device type and the page you are reading, and no cookies for ad personalization or measurement. We rely on legitimate interests, and you can object in the privacy tool.
    • If you accept, or outside those countries: Google and other third-party vendors may use cookies to show ads based on your past visits to this and other websites. Google’s advertising cookies let it and its partners do this.
    • Your controls: turn off personalized ads in Google Ads Settings, or at aboutads.info for other vendors. The privacy tool lists every ad partner, with links to their websites.

    Google explains its use of data on this page.

    Analytics. We use Google Analytics to count readers and see which pages they use. In the EEA, the UK and Switzerland it runs only if you allow it in the privacy tool. You can also block it with Google’s opt-out add-on.

    Affiliate links. Some links to shops, including Amazon, are affiliate links. As an Amazon Associate we earn from qualifying purchases. If you follow such a link, the shop learns that you came from us and can set its own cookies. We receive sales reports from the shop, not your name or contact details.

    Who receives your data

    We share personal data with the providers below, our accountants and legal advisers, and public authorities when the law requires it. The website and its database run on servers in a data center in Bulgaria.

    ProviderWhat it doesData it receives
    CloudflareDelivers and protects the siteEvery page request: IP address, browser details, page
    Google AdSense and privacy toolShows ads and records your choicesIP address, page, device details, your choices, and ad cookies if you accept
    Google AnalyticsReader statisticsPages viewed, device type, approximate location, online identifiers
    Google reCAPTCHABlocks spam on the contact formIP address, browser and device signals
    YouTubePlays videos embedded in articlesIP address, page, browser details, and its own cookies if you press play
    GmailHolds contact messages and order noticesEmail address, name, message, order details
    ElasticRuns the search box, on Google Cloud in the USSearch words, IP address, browser details
    StripeProcesses card and wallet paymentsName, email address, payment details, amount, IP address, device signals
    PayPalProcessed older orders, up to March 2026Its own records of those orders
    SparkPost by BirdSends our emails, from its EU regionEmail address, name, message content
    OpenAITranslates commentsComment text only
    AutomatticRuns Gravatar, and delivers some of our images through WordPress.comEmail address hash, readers’ IP addresses
    OVHcloudStores encrypted backups in GermanyEverything in our database
    Amazon and other shopsWhere shop links take youThe click, and what you do on their site

    Transfers outside the EEA

    Cloudflare, Google, Elastic, Stripe, PayPal, OpenAI, Automattic and Amazon may process data outside the European Economic Area, mainly in the United States. Search queries are processed in the United States.

    For our service providers we rely on one of two safeguards:

    • the European Commission’s adequacy decision for the EU-US Data Privacy Framework, where the provider is certified
    • the Commission’s Standard Contractual Clauses

    YouTube, Gravatar and shops are different: your browser connects to them directly, so their own terms and safeguards apply.

    You can ask us for details or a copy of these safeguards through the contact details above.

    How long we keep data

    We keep personal data only as long as we need it for the purposes above, or as long as the law requires.

    DataHow long
    Server access logs30 days
    Admin sign-in log30 days
    CommentsUntil the article is removed or you ask us to delete them
    IP address and browser details stored with a comment90 days
    Comment vote hashesAs long as the comment exists
    Comment notification subscriptionsUntil you unsubscribe
    Contact messagesUp to 2 years
    Order and accounting records10 years from the end of the year of purchase, as Bulgarian accounting and tax law requires
    IP addresses and browser details on orders and download logs2 years
    Google Analytics data2 months
    Database backupsDeleted data can remain in encrypted backups for about 1 year

    Cookie lifetimes are listed in our Cookie Policy.

    Your rights

    You can ask us to:

    • show you the personal data we hold about you and give you a copy
    • correct it
    • delete it
    • limit how we use it
    • send it to you or another company in a portable format

    You can object at any time to processing based on legitimate interests. You can withdraw consent at any time, in the privacy tool or through the unsubscribe link in our emails. This does not affect what we did before you withdrew it.

    To use these rights, use the Contact Us form or write to us by post. We reply within one month, and we may ask you to confirm the request from the email address you used with us. We keep what the law requires us to keep, such as accounting records, even after a deletion request.

    You can also complain to the Bulgarian Commission for Personal Data Protection, 2 Prof. Tsvetan Lazarov Blvd, 1592 Sofia, or to the data protection authority where you live. Readers in the UK have the same rights under UK GDPR and can complain to the ICO.

    Security, automated decisions and changes

    • Security: the site uses encrypted connections and we restrict access to its admin area. Card details stay with Stripe. No website can be fully secure, so we cannot promise absolute security.
    • Automated decisions: we make no decisions about you with legal or similarly significant effects by automated means alone. Spam filtering is automatic, so contact us if your comment disappears. Personalized ads involve profiling by Google and its partners. In the EEA, the UK and Switzerland they happen only if you accept.
    • Children: the site is not aimed at children. If you think a child has given us personal data, write to us and we will delete it.
    • Changes: when our practices change, we update this page and the date at the top.

    Terms of use

    These terms apply when you use laptopmedia.com or comment on it. Bulgarian law governs them, and nothing here limits the consumer rights you have where you live.

    • Our content: articles, reviews, test results and images are protected by copyright. You may quote short extracts with a link to the source. Ask us before reusing more.
    • Accuracy: we test carefully, but prices, specifications and availability change. Check them with the seller before you buy. We provide the site as it is and are not liable for decisions based on it, except where the law does not allow us to limit liability.
    • Your comments: you are responsible for what you post. Do not post anything unlawful, abusive or misleading, spam, other people’s personal data, or material you have no right to share.
    • Moderation: we may edit, refuse or remove comments.
    • Rights in your comments: you keep them, and you allow us to publish, translate and keep your comment across the site’s editions.

    If we change these terms, the version on this page applies from the date at the top.