Privacy Policy
Last updated: September 2026
1. Controller
The controller within the meaning of the GDPR is:
2. Hosting and infrastructure
This website is operated on the Base44 platform (Wix.com Ltd., 40 Namal Tel Aviv St., Tel Aviv, Israel). Base44 provides hosting, database and user management for this service; the access data described in section 3 and the account data described in section 5 are processed on this infrastructure. The European Commission has adopted an adequacy decision for Israel (Art. 45 GDPR). A data processing agreement pursuant to Art. 28 GDPR is in place with Base44. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in the secure and efficient provision of the service).
3. Collection and processing of personal data
When you visit our website, technical access data is automatically recorded by the web server (server log files). This includes:
- – IP address (anonymised)
- – Date and time of access
- – URL accessed
- – Browser and operating system used
- – Referrer URL
This data is processed exclusively to ensure technical operation and to defend against attacks. It is not passed on to third parties.
3a. Anonymous visitor statistics by country
In order to know which countries our visitors come from, we keep an anonymous, aggregated count of visitors per country and per day. Your browser determines the two-letter country code of your internet connection and transmits only this code together with a random session identifier.
The random session identifier is stored only in the volatile memory of your browser tab (sessionStorage), exists solely to avoid counting the same visit twice on the same day, and is discarded when you close the tab. It does not allow you to be recognised across sessions.
We store no IP addresses, no user agents and no cookies for this purpose; only the aggregated counter "number of visitors from country X on day Y" is retained. As no personal data is stored and no information is accessed on your device beyond this volatile identifier, this statistic does not require consent. The legal basis is Art. 6 (1) (f) GDPR (legitimate interest in anonymous reach measurement).
The country is determined via the providers ipapi.co (ipapi, USA) and Cloudflare, Inc. (USA). The request is made directly from your browser; we do not receive your IP address in this process. If both services are unavailable, your browser language is used as an approximation.
4. Processing of user input by AI and research services
When you enter hardware configurations into the service, this data is transmitted as entered to AI services (large language models) for processing. The input fields are designed for hardware model names only (e.g. "RTX 4070", "32 GB DDR5-6000"). Please enter only such hardware designations.
Do not paste full system reports (e.g. dxdiag, HWiNFO or Speccy exports) or other text into these fields, as they may contain personal data such as serial numbers, computer or user names, which would then also be transmitted to the AI services.
Depending on the type of request, different AI providers are used:
- –For analyses without live internet research: DeepSeek (Hangzhou DeepSeek AI Basic Technology Co., Ltd., China). As DeepSeek is based outside the EU/EEA, this may involve a transfer of data to a third country without an adequacy decision. If the DeepSeek service is unavailable, the request is automatically routed to Google instead (see below).
- –For analyses that use up-to-date internet research (e.g. live benchmarks, market data): Google, via the infrastructure of our platform provider Base44.
- –For the web research itself (current benchmarks, reviews, market prices), the recognised hardware designations are sent as search queries to Tavily Inc. (USA). Data is transferred to the USA on the basis of standard contractual clauses (Art. 46 (2) (c) GDPR).
In both cases, only the hardware data you entered is transmitted – no contact details or other personal data.
The entered data is not stored permanently and is used solely to create the respective analysis.
5. User accounts and login
The analysis can be used without an account. If you voluntarily create an account, we process your email address, your name (if provided or transmitted by the login provider) and – for email/password registration – a password stored in hashed form by our platform provider. In addition, the systems, analysis results and comparisons you choose to save are stored in your account.
The purpose is to provide the account and the saving function. The legal basis is Art. 6 (1) (b) GDPR (performance of a contract). The data is stored until you delete your account or request erasure via the contact address in section 10.
Optionally, you can sign in via Google (Google Ireland Limited, Ireland), Microsoft (Microsoft Ireland Operations Limited, Ireland) or Apple (Apple Distribution International Ltd., Ireland). In this case, the respective provider transmits your name and email address to us; the provider's own data processing during login is governed by its privacy policy.
6. Cookies and local storage
This website uses technically necessary cookies as well as local browser storage (localStorage) to store your cookie consent and language preference. In addition, with your consent, we use Google Analytics for anonymised visitor statistics – see section 7.
You can deactivate or delete cookies in your browser settings at any time, and change your consent at any time via "Cookie Settings" in the footer.
7. Google Analytics
With your consent, we use Google Analytics 4, a web analytics service provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland ("Google"). Google Analytics uses cookies and similar technologies to create pseudonymised usage statistics (e.g. pages visited, time spent, country of origin).
IP anonymisation is enabled; your IP address is shortened by Google within the EU/EEA before being transmitted to servers in the USA. A transfer of data to the USA may still occur. Google is certified under the EU-U.S. Data Privacy Framework.
Google Analytics is only loaded once you have actively consented via the cookie banner. You can withdraw or change your consent at any time via "Cookie Settings" in the footer.
The legal basis is your consent, Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG. Further information can be found in Google's privacy policy at policies.google.com/privacy.
8. Legal basis for processing
The processing of technical access data and the use of the hosting infrastructure are based on Art. 6 (1) (f) GDPR (legitimate interest in secure operation). The processing of your user input by AI and research services as well as the operation of user accounts are based on Art. 6 (1) (b) GDPR (performance of a contract / pre-contractual measures). The use of Google Analytics is based on your consent, Art. 6 (1) (a) GDPR in conjunction with § 25 (1) TDDDG.
9. Storage period
Server log files are automatically deleted after 7 days at the latest. User input processed by AI services is not stored permanently and can no longer be retrieved after the session ends.
If you create an account, we store your account data (email address, saved systems and comparisons) until you delete your account or request erasure via the contact address below.
Google Analytics data is automatically deleted after 14 months.
10. Your rights
Under the GDPR you have the following rights:
- – Right of access (Art. 15 GDPR)
- – Right to rectification (Art. 16 GDPR)
- – Right to erasure (Art. 17 GDPR)
- – Right to restriction of processing (Art. 18 GDPR)
- – Right to data portability (Art. 20 GDPR)
- – Right to object (Art. 21 GDPR)
- – Right to withdraw consent at any time, e.g. for Google Analytics (Art. 7 (3) GDPR)
- – Right to lodge a complaint with a supervisory authority (Art. 77 GDPR)
To exercise your rights, please contact: info@rate-my-computer.com
11. Competent supervisory authority
The State Commissioner for Data Protection and Freedom of Information of Rhineland-Palatinate
Postfach 30 40, 55020 Mainz
www.datenschutz.rlp.de
12. Amazon Associates Programme (affiliate links)
This website is a participant in the Amazon EU Associates Programme, which is designed to provide a means for websites to earn advertising fees by placing advertisements and links to amazon.de.
Hardware names in our analyses and recommendations are partly implemented as so-called affiliate links to Amazon and are labelled accordingly (note "Ad"). When you click on such a link, you are redirected to Amazon. If a qualifying purchase is subsequently made, we receive a commission. There are no additional costs for you as a user.
When the affiliate link is accessed, technical data (including IP address, referrer, timestamp, browser information) is transmitted to Amazon. Responsible for the data processing after clicking the affiliate link is Amazon Europe Core S.à r.l., 38 avenue John F. Kennedy, L-1855 Luxembourg. The data processing is carried out to attribute the commission and for analysis purposes by Amazon. Further information on the processing of your data by Amazon can be found in Amazon's privacy policy at: amazon.de/privacy.
The legal basis for the integration of the affiliate links is Art. 6 (1) (f) GDPR (legitimate interest in the economic viability of the free offer).
13. Changes to this privacy policy
We reserve the right to adapt this privacy policy in the event of changes to the service or the legal situation. The current version is always available on this page.