Our Privacy Commitment to You
At Optimum Router, we believe your privacy is not a feature-it is a fundamental right. As an independent editorial publication dedicated to helping homes and businesses choose, configure, and optimize routers, mesh Wi-Fi systems, and home networking equipment, we hold ourselves to the highest standards of data stewardship.
This Privacy Policy explains, in plain and transparent language, exactly what information we collect, why we collect it, how we use it, and-most importantly-what rights you have over your own data. We wrote this policy the way we write our router guides: with precision, honesty, and an unwavering focus on what matters to you.
End-to-End Encryption
All data transmitted via TLS 1.3
GDPR & CCPA Compliant
Full regulatory compliance worldwide
Updated January 2026
Reflecting latest CPRA regulations
Effective Date: January 15, 2026 | Last Reviewed: January 15, 2026 | Next Scheduled Review: July 15, 2026
Data Controller: Optimum Router ("we," "us," or "our") | Website: https://optimumrouter.com
Information We Collect
Transparency is the cornerstone of trust. Below, we detail every category of information we may collect when you visit our website, interact with our content, or engage with our services. We categorize this data into three tiers based on how it reaches us.
1.1 Information You Provide Directly
When you voluntarily interact with us, you may provide:
- Contact Information: Name, email address, and any message content when you reach out via our contact form or email.
- Newsletter Subscriptions: Email address when you opt in to receive our networking tips and router recommendations.
- Comments & Feedback: Any personal information included in comments on our articles or feedback submissions.
- Survey Responses: Opinions and preferences shared in reader surveys or polls (always optional and anonymized by default).
1.2 Information Collected Automatically
When you browse our website, certain technical data is collected automatically through standard web technologies:
| Data Category | Specific Data Points | Purpose |
|---|---|---|
| Device Information | Browser type, version, OS, device type, screen resolution | Site optimization, responsive design |
| Network Information | IP address, ISP, approximate geographic location (city/region level) | Security, content localization, analytics |
| Usage Data | Pages visited, time on page, click patterns, referring URLs, exit pages | Content improvement, user experience |
| Log Data | Access timestamps, HTTP status codes, error logs, request metadata | Security monitoring, debugging |
| Cookie Data | Cookie identifiers, session tokens, preference settings | Session management, personalization |
1.3 Information from Third Parties
We may receive limited information from trusted partners:
- Analytics Providers: Aggregated usage data from Google Analytics 4 and similar services.
- Affiliate Networks: Click-through and conversion data necessary for commission tracking (no personal identifiers shared with us).
- Social Media Platforms: Referral data when you arrive at our site via social media links.
How We Use Your Information
Every piece of data we collect serves a specific, legitimate purpose. We do not hoard information for its own sake. Below is our complete inventory of data use cases, mapped to their legal bases under GDPR Article 6.
✅ Legitimate Interest
- • Website security and fraud prevention
- • Performance optimization and bug fixes
- • Content personalization and recommendations
- • Analytics and readership insights
✅ Consent-Based
- • Newsletter delivery
- • Marketing communications
- • Non-essential cookies
- • Behavioral advertising
✅ Contractual Necessity
- • Processing user-submitted inquiries
- • Providing requested services
- • Account management (if applicable)
✅ Legal Obligation
- • Tax and financial record-keeping
- • Responding to lawful government requests
- • Compliance with applicable regulations
We will never sell your personal information to third parties for their own marketing purposes. We will never use your data in ways that would surprise a reasonable person reading this policy. If we ever expand our data practices, we will update this policy and, where required, seek your fresh consent.
Cookies & Tracking Technologies
Cookies are small text files placed on your device when you visit a website. They are the unsung heroes of the modern web-enabling everything from keeping you logged in to ensuring our content loads quickly. We use them responsibly and transparently.
3.1 Cookie Categories We Use
| Category | Examples | Duration | Consent Required? |
|---|---|---|---|
| Strictly Necessary | Session cookies, security tokens, load balancer cookies | Session | No (exempt) |
| Functional | Language preference, theme settings, font size | Up to 1 year | No (legitimate interest) |
| Analytics | Google Analytics 4 (_ga, _ga_*) | Up to 2 years | Yes |
| Marketing | Affiliate tracking, ad personalization | Up to 90 days | Yes |
3.2 Managing Your Cookie Preferences
You have complete control over cookies. Here is how:
- Browser Settings: Most browsers allow you to block, delete, or manage cookies through their settings menu. Look for "Privacy" or "Security" in your browser preferences.
- Global Privacy Control (GPC): We honor GPC signals as required under the CCPA/CPRA. If your browser sends a GPC signal, we automatically treat it as an opt-out request for non-essential data collection.
- Do Not Track (DNT): We respect DNT browser signals where technically feasible.
- Opt-Out Tools: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on.
Third-Party Services & Data Processors
We partner with select third-party services to deliver the best possible experience. Each partner is contractually bound to process data only on our instructions and in compliance with applicable privacy laws. We never grant third parties unrestricted access to your data.
| Service | Purpose | Data Shared | Location |
|---|---|---|---|
| Cloudflare | CDN, DDoS protection, security | IP address, request headers | Global |
| Google Analytics 4 | Website analytics | Anonymized usage data | US (with SCCs) |
| WordPress/Automattic | Content management | Site content, visitor stats | US/EU |
| Amazon Associates | Affiliate product links | Click-through data only | US |
| Email Service Provider | Newsletter delivery | Email address, engagement data | US/EU |
Each of these providers maintains their own privacy policies. We encourage you to review them. We conduct due diligence before onboarding any new processor and review their practices annually.
Affiliate Disclosure & Advertising
Optimum Router is an independent editorial publication. We sustain our research and writing through affiliate partnerships and, in some cases, display advertising. Here is exactly how this intersects with your privacy:
Full Transparency Pledge
When you click a product link on our site and make a purchase, we may earn a commission at no additional cost to you. This commission never influences our editorial recommendations. Our router reviews and comparisons are based on rigorous, independent testing-not on which affiliate program pays the most.
5.1 How Affiliate Tracking Works
Affiliate links may contain tracking parameters that allow the merchant to identify that a visitor came from our site. This typically involves:
- Unique referral URLs with tracking IDs
- Cookies set by the merchant (not by us) upon click-through
- No personal data from our site is transferred to merchants through affiliate links
In compliance with the FTC's 2026 affiliate disclosure requirements, all affiliate relationships are clearly disclosed at the point of content consumption. We comply with 16 CFR Part 255 and the updated enforcement framework effective July 1, 2026.
Data Security Measures
Security is not an afterthought at Optimum Router-it is woven into every layer of our infrastructure. We approach data protection the same way we approach router security recommendations: with layered defenses, continuous monitoring, and zero complacency.
Encryption
All data in transit is encrypted via TLS 1.3. Sensitive data at rest is encrypted using AES-256. We enforce HTTPS sitewide with HSTS headers.
Access Controls
Principle of least privilege enforced across all systems. Multi-factor authentication required for all administrative access. Regular access reviews conducted quarterly.
Monitoring & Detection
24/7 automated monitoring for suspicious activity. Intrusion detection systems in place. Regular vulnerability scanning and penetration testing.
Incident Response
Documented incident response plan with defined escalation procedures. In the event of a data breach, we will notify affected users within 72 hours as required by GDPR.
Data Retention Periods
We retain your personal data only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required by law. Below are our standard retention schedules:
| Data Category | Retention Period | Disposal Method |
|---|---|---|
| Contact form submissions | 12 months after last interaction | Secure deletion |
| Newsletter subscriber data | Until unsubscribed + 30 days | Automated purge |
| Analytics data | 26 months (GA4 default) | Automatic expiration |
| Server access logs | 90 days | Automated rotation |
| Cookie data | Per cookie (see Section 3) | Browser-managed |
| Financial/affiliate records | 7 years (legal requirement) | Secure archival destruction |
Your Privacy Rights
You are not powerless when it comes to your data. Regardless of where you live, we extend a robust set of privacy rights to all our visitors. Here is what you can do:
🔍 Right of Access
Request a copy of all personal data we hold about you. We will provide this in a machine-readable format within 30 days, free of charge.
✏️ Right to Rectification
Request correction of inaccurate or incomplete personal data. We will update or annotate the data within 30 days.
🗑️ Right to Erasure ("Right to Be Forgotten")
Request deletion of your personal data in certain circumstances (e.g., data no longer necessary, consent withdrawn, or objection to processing). We will comply unless we have a legal basis to retain it.
⏸️ Right to Restrict Processing
Request that we limit how we use your data. When granted, we will store but not further process your data (except with your consent or for legal claims).
📦 Right to Data Portability
Receive your data in a structured, commonly used, machine-readable format (e.g., JSON or CSV) and transmit it to another controller.
🚫 Right to Object
Object to processing based on legitimate interests or for direct marketing purposes. We will cease processing unless we demonstrate compelling legitimate grounds.
🤖 Right Related to Automated Decision-Making
We do not use automated decision-making or profiling that produces legal effects. Should this change, you will have the right not to be subject to such decisions and to request human intervention.
To exercise any of these rights, email our Privacy Officer at privacy@optimumrouter.com. We will respond within 30 days. We may request verification of your identity before processing your request.
CCPA & CPRA Rights (California Residents)
If you are a California resident, the California Consumer Privacy Act (as amended by the California Privacy Rights Act, effective January 1, 2026) grants you additional rights beyond those listed above:
- Right to Know: Request disclosure of the categories and specific pieces of personal information collected, the sources, business purposes, and third parties with whom it was shared-in the past 12 months.
- Right to Delete: Request deletion of personal information collected from you, subject to certain exceptions.
- Right to Correct: Request correction of inaccurate personal information (added under CPRA).
- Right to Opt-Out of Sale/Sharing: We do not "sell" personal information as defined by the CCPA. However, you may opt out of the "sharing" of personal information for cross-context behavioral advertising via our cookie consent tools or by emailing us.
- Right to Limit Use of Sensitive Personal Information: We do not collect or process sensitive personal information as defined by the CPRA. Should this change, a "Limit the Use of My Sensitive Personal Information" link will be provided.
- Non-Discrimination: You will not receive discriminatory treatment for exercising your CCPA rights.
- Authorized Agent: You may designate an authorized agent to make requests on your behalf. We may require written authorization or power of attorney.
Categories of Personal Information (CCPA Disclosure)
In the preceding 12 months, we have collected the following categories of personal information:
- Identifiers: IP address, email address (if provided)
- Internet Activity: Browsing history on our site, search queries, interaction data
- Geolocation: General location (city/region level, derived from IP)
- Commercial Information: Products viewed via affiliate links (no purchase data)
- Sensitive PI: None collected
GDPR Rights (EEA & UK Residents)
If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR provide you with the rights described in Section 8, plus:
- Right to Withdraw Consent: Where processing is based on consent, you may withdraw it at any time without affecting the lawfulness of prior processing.
- Right to Lodge a Complaint: You may file a complaint with your local Supervisory Authority if you believe our processing violates applicable law.
- Data Protection Impact Assessments: We conduct DPIAs for processing activities that may pose high risks to your rights and freedoms.
Legal Basis for Processing: Our primary legal bases are (a) legitimate interests (website operation, security, analytics), (b) consent (newsletters, non-essential cookies), and (c) legal obligation (financial records, regulatory compliance).
Children's Privacy
Optimum Router is not directed at children under the age of 16 (or under 13 in the United States, per COPPA). We do not knowingly collect personal information from children. If you believe a child under the applicable age has provided us with personal data, please contact us immediately at privacy@optimumrouter.com, and we will take prompt action to delete such information.
In compliance with the CCPA's under-16 provisions (as strengthened in 2026), we require affirmative opt-in consent for the sale or sharing of personal information of consumers aged 13-15, and parental/guardian opt-in consent for consumers under 13.
International Data Transfers
Some of our third-party service providers operate outside the European Economic Area (EEA) and the United Kingdom. When we transfer personal data to countries not deemed "adequate" by the European Commission, we ensure appropriate safeguards are in place:
- Standard Contractual Clauses (SCCs): Approved by the European Commission (2021 version) for transfers to non-adequate countries.
- Data Processing Agreements (DPAs): Contractual commitments from all processors to GDPR-equivalent standards.
- EU-US Data Privacy Framework: Where applicable, we rely on adequacy decisions for certified US-based providers.
We conduct Transfer Impact Assessments (TIAs) for all international data flows and maintain supplementary measures where necessary to ensure essentially equivalent protection.
Changes to This Privacy Policy
The digital landscape evolves rapidly, and so do privacy laws. We will review and update this Privacy Policy at least every 12 months, or sooner if:
- • New privacy regulations come into effect
- • We introduce new data processing activities
- • We onboard new third-party services that process personal data
- • We undergo a material change in business operations
When we make material changes, we will:
- • Update the "Effective Date" and "Last Reviewed" fields at the top of this page
- • Provide prominent notice on our website (e.g., a banner or pop-up)
- • For significant changes, notify registered users via email where we have their contact details
We maintain an archive of previous versions of this policy. Contact us if you wish to review a historical version.
Contact Us
Privacy is a conversation, not a monologue. If you have questions, concerns, or requests regarding this policy or our data practices, we want to hear from you. Our Privacy Officer reviews every inquiry personally.
For California Residents: You may also call our toll-free number (if established) or submit requests through our designated online form. We provide at least two methods for submitting CCPA requests as required by law.
For EEA/UK Residents: If you are unsatisfied with our response to your data protection request, you have the right to lodge a complaint with your local data protection supervisory authority. A list of EU supervisory authorities is available on the European Data Protection Board website.
