Home

Privacy & Cookie Notice

Last updated: 14 July 2026

Who operates JolHil

JolHil is operated by JolHil Administration as the data controller. For any privacy question or request, contact admin@jolhil.com.

What we collect

  • An anonymous session identifier stored in your browser (see "Cookies & local storage" below).
  • Page views: the path you visited, the referring site (if any), and the approximate country/city derived from the location you optionally provide or from a coarse lookup — never a precise device location.
  • The text of the requests you type into the assistant, together with the resulting recommendations, so we can show your own history back to you and improve the product.
  • If — and only if — you choose to create an account: your email address and a password hash, so your history can follow you across devices.

We do not collect precise GPS location, device fingerprints, contacts, or any special-category personal data.

Why we collect it (legal basis)

  • Running the product (Art. 6(1)(b) GDPR — performance of the service you're using): storing your requests and recommendations so we can show them to you.
  • Aggregate, first-party audience measurement (Art. 6(1)(f) GDPR — legitimate interest): understanding how many people use JolHil and which pages work. Reports are aggregated and anonymous.
  • Account features, when you opt into an account (Art. 6(1)(b)): authenticating you and syncing your history.

We do not run advertising, we do not use third-party marketing or tracking pixels, we do not build cross-site profiles, and we do not sell or rent your data to anyone.

Cookies & local storage — why there is no consent banner

JolHil does not set advertising or third-party tracking cookies. The only identifiers we store in your browser are strictly necessary for the app to work, or are used solely for first-party audience measurement — which under the ePrivacy Directive and EDPB guidance is exempt from the consent-banner requirement, provided it is aggregate, not shared with third parties for their own purposes, and not used to profile individuals. That is the case here, so we do not show a click-through banner; we disclose everything on this page instead.

That reasoning applies only to jolhil.com's own first-party identifiers listed above. When you click an outbound affiliate link, you leave jolhil.com and the link is routed through Awin's or Adtraction's own redirect infrastructure before you land on the retailer's site. Awin or Adtraction then places its own attribution cookie on its own domain (for example, Adtraction's at_gd cookie) to track the referral. JolHil.com does not set any third-party advertising or tracking cookie directly; only Awin and Adtraction do, and only after you actively click through, on their own domains and under their own consent practices.

  • jolhil.sid (localStorage) — anonymous session identifier used to deduplicate page views. Regenerated at least every 13 months.
  • jolhil.sid.created (localStorage) — the timestamp used to enforce the 13-month cap on the identifier above.
  • jolhil.pv.recorded (sessionStorage) — a per-tab flag so we only record one page view per browser session.
  • johiai.location (localStorage) — the location you optionally type or accept, so we can ground local recommendations.
  • Supabase authentication cookies/local storage — strictly necessary for you to remain signed in when you create an account. If you never sign up, these hold only an anonymous session.

Who we share data with

  • Supabase — our database, authentication, and storage processor.
  • Lovable — our application hosting provider.
  • Awin and Adtraction — our affiliate-network partners. When you click a product link from a recommendation, the click is routed through Awin's or Adtraction's own link-redirect infrastructure (not through jolhil.com's own servers or scripts) before you land on the retailer's site. During that redirect, Awin or Adtraction places its own attribution cookie on its own domain so the retailer knows to pay JolHil a referral fee if you buy something. We do not send Awin, Adtraction, or the retailer your request text or your identity — only the click itself.
  • Retailers and service providers you ultimately land on after a redirect — they see the visit on their own terms and under their own privacy policy. We do not send them your request text or your identity.

Supabase and Lovable act as processors on our instructions. Awin, Adtraction, and the retailers you actively click through to are independent controllers on their own domains and sites.

How long we keep it

Anonymous session identifiers are regenerated at least every 13 months. Requests and recommendations tied to an anonymous session are retained while that session remains active in your browser. If you create an account, your history is retained until you delete it or ask us to. Aggregate analytics counts are kept indefinitely because they contain no personal data.

Your rights under GDPR

If you're in the EU/EEA or the UK you have the right to access, correct, delete, port, restrict, or object to the processing of your personal data, and to withdraw any consent you've given. To exercise any of these, email admin@jolhil.com. You also have the right to lodge a complaint with your national data-protection authority.

Recommendations & affiliate links

JolHil's recommendations are informational and produced by an AI assistant against real sources. They are not professional advice, and acting on them — buying a product, hiring a service, going somewhere — is at your own discretion. Some outbound links are affiliate links: if you buy through them, the retailer may pay JolHil a referral fee. This never changes which option the assistant recommends; recommendation honesty comes first and any affiliate link is disclosed as such.

Changes to this notice

If we materially change how we handle data, we'll update this page and bump the "Last updated" date at the top. Substantial changes will also be highlighted in the app.