Privacy policy
Last updated: 5 October 2026
## 1. Who we are
Howmigo is operated by NonDucor AB, a Swedish limited company with organisation number 559020-3856 and VAT number SE559020385601, based in Härryda, Sweden. NonDucor AB is the data controller for the personal data described in this policy.
Contact: hello@howmigo.com
## 2. Personal data we process
Depending on how you use Howmigo, we may process:
- **Account data:** email address, display name if provided, authentication identifiers and account settings. - **User content:** ratings, comments, favourites and other information you choose to submit. - **Communications:** information you send to us by email or through other contact channels. - **Technical and security data:** IP address, browser and device information, timestamps, requested pages, error information and similar logs needed to operate, secure and troubleshoot the service. - **Consent and preference data:** your cookie and privacy choices, language, theme and similar settings stored in your browser or associated with the service. - **Analytics data:** information about use of the site, such as pages viewed, navigation, approximate location, device type, referring source and interaction events, where permitted by your consent settings. - **Advertising data:** where you consent, information used by Google AdSense to deliver, limit, personalise where permitted, and measure advertising displayed on Howmigo. - **Affiliate and referral data:** if you follow a commercial or affiliate link, the destination, link or campaign identifier and related referral information may be processed so the referral can be attributed. We may receive reports from affiliate networks or merchants, for example that a qualifying transaction occurred and the resulting commission. We do not receive your card or payment details from the merchant.
We ask that you do not include sensitive personal data in public comments.
## 3. Why we process personal data and our legal bases
We process personal data to:
- provide accounts, favourites, ratings, comments and other requested features — **performance of a contract**; - secure the service, prevent abuse, diagnose errors and maintain reliable operation — **legitimate interests**; - answer enquiries and handle requests — **legitimate interests** or **steps requested by you before entering into an agreement**, depending on the context; - understand and improve Howmigo — **consent** where analytics cookies or similar technologies are used; - deliver and measure advertising displayed on Howmigo through Google AdSense — **consent** where required; - operate and account for affiliate referrals — **legitimate interests** for our commercial administration, while any non-essential storage or tracking on your device is based on **consent** where required by law; - comply with legal, accounting or regulatory obligations — **legal obligation**.
Where we rely on legitimate interests, we balance those interests against your rights and reasonable expectations.
## 4. Google services
We use the following Google services:
- **Google Analytics 4 (GA4)** to understand how the site is used. - **Google Search Console** to receive aggregated information about how Howmigo appears and performs in Google Search. Search Console does not require us to place a Search Console cookie on your device. - **Google AdSense** to display and measure advertising on Howmigo.
For visitors in regions where consent is required, we use Google Consent Mode v2. Google-related consent signals include `analytics_storage`, `ad_storage`, `ad_user_data` and `ad_personalization`. Non-essential storage is denied by default until you make a choice.
Howmigo uses an advanced consent-mode implementation for Google measurement. This means Google tags may load before you make a choice and may send limited, cookieless measurement signals while consent for analytics or advertising storage is denied. These signals are designed not to use advertising or analytics cookies for the denied purpose. If you grant consent, the relevant Google tags may use cookies or other identifiers according to your choice. You can change or withdraw your choice at any time through **Cookie settings** in the footer.
Where Google AdSense advertising features are enabled, Google may process identifiers, device information and interaction data for ad delivery, fraud prevention, frequency control and measurement, and for personalised advertising only where your consent permits it and the applicable product settings allow it.
You can also manage Google advertising personalisation through Google's My Ad Center.
## 5. Cookies and similar technologies
We use cookies, local storage and similar technologies for essential operation, preferences, analytics and advertising. Essential storage is used without optional consent where it is strictly necessary. Analytics and advertising storage is controlled through our consent interface. See our **Cookies** page for more detail.
## 6. Affiliate links and external merchants
Some links on Howmigo are affiliate links. If you follow one, the destination website, merchant or affiliate network may process information about the referral and may use its own cookies or similar technologies under its own privacy and cookie notices. Howmigo may earn a commission if you make a qualifying purchase, without increasing the price you pay.
We do not control the privacy practices of external merchants and recommend reviewing their privacy information before providing personal data to them.
## 7. Recipients and service providers
Personal data may be processed by service providers that help us operate Howmigo, including hosting, database, authentication, security, analytics, advertising, email and affiliate-service providers, as well as professional advisers where necessary. We disclose only the information reasonably needed for the relevant purpose.
We do not sell your personal data.
Some recipients, including Google and other international service providers, may process data outside the EU/EEA. Where required, we rely on an adequacy decision, the European Commission's Standard Contractual Clauses or another lawful transfer mechanism, together with appropriate safeguards where necessary.
## 8. How long we keep data
We keep personal data only for as long as needed for the purposes described above or to meet legal obligations.
- Account data is generally kept while your account remains active and for a limited period afterwards where needed for security, dispute handling or legal obligations. - Public comments and ratings remain until deleted, removed or no longer needed for the service. - Security and technical logs are retained for a limited period appropriate to troubleshooting and security. - Consent choices remain stored until they expire, are replaced or you reset them. - Analytics and advertising data is retained according to the settings and retention controls configured in the relevant Google service. - Affiliate and accounting records may be retained for the period required for reconciliation, fraud prevention, accounting and tax obligations.
## 9. Your rights
Under the GDPR, where applicable, you may have the right to request access, correction, erasure, restriction of processing and data portability, and to object to processing based on legitimate interests. Where processing is based on consent, you may withdraw that consent at any time without affecting the lawfulness of processing before withdrawal.
To exercise your rights, email hello@howmigo.com. We may need to verify your identity before completing a request. We normally respond within one month as required by the GDPR.
You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (Integritetsskyddsmyndigheten, IMY) or, where applicable, another competent supervisory authority in the EU/EEA.
## 10. Automated decision-making
We do not use your personal data to make solely automated decisions that produce legal effects or similarly significant effects for you.
## 11. Children
Howmigo is a general-audience service and is not directed at children under 13. We do not knowingly collect personal data from children under 13 through account features without an appropriate legal basis.
## 12. Security
We use technical and organisational measures designed to protect personal data, including encrypted connections, access controls and restricted database permissions. No online service can guarantee absolute security.
## 13. Changes to this policy
We may update this policy when the service, our providers or legal requirements change. The date at the top shows the current version. Material changes will be communicated appropriately.