Privacy statement
CrowdFinder, located at Halfstraat 5 unit 16, 2630 Aartselaar, Belgium, is responsible for the processing of personal data as shown in this privacy statement.
Contact details:
Halfstraat 5 unit 16, 2630 Aartselaar, Belgium
Personal data that we process
CrowdFinder processes your personal data because you use our services and/or because you provide these to us yourself. Below you will find an overview of the personal data that we process:
- First and last name
- E-mail address
- Password (which is stored encrypted)
- Location information
- Language
- Registration date
- Orders
- Payments
- Selected options
In addition, the following optional data is also saved if you choose:
- Address
- Account numbers (bank or PayPal) if you set up a group purchase yourself
Special and/or sensitive personal data that we process
Our website and/or service does not intend to collect data about website visitors under the age of 16. Unless they have permission from parents or legal guardian. However, we cannot check whether a visitor is older than 16. We therefore advise parents to be involved in the online activities of their children, to prevent data about children being collected without parental consent. If you are convinced that we have collected personal information about a minor without that permission, please contact us via [email protected] and we will remove this information.
For what purpose and on what basis we process personal data
CrowdFinder processes your personal data for the following purposes:
- Offer you the option to create an account
- To deliver goods and services to you
Automated decision making
CrowdFinder does take decisions on the basis of automated processing about matters that can have (significant) consequences for people. These are decisions that are made by computer programs or systems, without a human being (for example, a moderator of CrowdFinder or initiator of the group purchase) among them. An example is automatically sending an update by e-mail if this is enabled in your profile.
How long we keep personal data
CrowdFinder basically stores your personal data for an indefinite period of time, because this data is constantly needed to guarantee the operation of CrowdFinder.
Sharing of personal data with third parties
CrowdFinder only provides to third parties and only if this is necessary for the implementation of our agreement with you or to comply with a legal obligation. CrowdFinder is not responsible for the visible data indicated by the users themselves being used elsewhere by persons who have access to this website.
Storage on this website
We use necessary storage for signing in, your cart and your preferences. Google Analytics, YouTube videos and the Trusted Shops widget load only with your consent.
Necessary storage supports features you request, such as signing in, ordering and selecting a language. Cart and session data are partly stored in localStorage, which is also covered here. We do not ask for consent for strictly necessary storage.
When a video loads, YouTube (Google) receives information including your IP address and may use cookies or similar storage. Without consent we do not load the video player.
The Trusted Shops widget loads from an external provider, which receives information including your IP address and may use cookies or similar storage.
We store your choice for 180 days. You can change or withdraw consent at any time using Cookie settings in the footer. When you withdraw consent, we reload the page to stop external scripts.
You can reject external content without losing access to the shop, account or payment. On withdrawal we stop new embeds and reload the page. We cannot delete cookies already stored on an external provider’s own domain; remove these in your browser settings. See also the privacy policies of Google and Trusted Shops.
Maps use Leaflet from unpkg.com and OpenStreetMap tiles. These providers receive your IP address when loaded. Google sign-in loads on the login page to provide that feature; payment providers are used when you choose their payment method.
Google Analytics measures visits, viewed games, shopping carts, checkout steps and paid purchases with amounts and an order reference. Google receives visit data, including your IP address, and uses analytics cookies. We do not send names, email addresses or addresses. Advertising personalisation is disabled.
With your Analytics consent, we also measure campaign sources through UTM labels, project registrations, separate shipping payments and recorded refunds. The same Google tag can link visits through links between our .be, .fr, .nl and .de websites, only with consent on both sites. We do not share names, email addresses or postal addresses.
| Cookies and browser storage | Purpose | Retention |
|---|---|---|
| cf_remember | HttpOnly cookie for the “Remember me” feature you request. | 30 days |
| cf_google_nonce, cf_google_signup | Temporary security cookies for Google sign-in. | 10 minutes |
| accessToken, refreshToken | Browser storage for your signed-in session. Tokens are valid for 5 minutes and 1 hour respectively and can be renewed. | Until replaced, signed out or cleared; validity is limited |
| cf-cart, cf-checkout-draft:*, cf-guest-order:* | Shopping cart, recovery of a checkout request and access to your guest order. | Until completed, removed or browser data cleared |
| cf_site_language, cf-site-preference, language | Your selected language and site preference. | Language cookie: 1 year; browser storage: until cleared |
| cf-cookie-preferences | Your consent or refusal, preference version and the time you chose. | Valid for 180 days; we then ask again |
| cf-analytics-consent | Random consent token used to stop server purchase measurements on withdrawal. The server retains event data for up to 30 days and withdrawal status for up to 180 days. | Until consent is withdrawn or expires |
| _ga, _ga_* | Google Analytics measures visits, viewed games, shopping carts, checkout steps and paid purchases with amounts and an order reference. Google receives visit data, including your IP address, and uses analytics cookies. We do not send names, email addresses or addresses. Advertising personalisation is disabled. | 180 days |
View, modify or delete data
You have the right to view, correct or delete your personal data. In addition, you have the right to withdraw your possible consent to the data processing or to object to the processing of your personal data by CrowdFinder and you have the right to data transferability. This means that you can submit a request to us to send the personal data that we hold about you in a computer file to you or another organization mentioned by you. You can send a request for access, correction, deletion, data transfer of your personal data or request for withdrawal of your consent or objection to the processing of your personal data to [email protected]. To ensure that the request for inspection has been made by you, we request that you send a copy of your proof of identity with the request. This is to protect your privacy. We will respond to your request within 72 hours. CrowdFinder would also like to point out that you have the option to file a complaint with the National Data Protection Authority. You can do this via the following link: https://www.gegevensbeschermingsautoriteit.be/verzoek-klacht-indienen.
How we protect personal data
CrowdFinder takes the protection of your data seriously and takes appropriate measures to prevent abuse, loss, unauthorized access, unwanted disclosure and unauthorized changes. If you have the impression that your data is not properly protected or there are indications of abuse, please contact us at [email protected].
Latest update at 11/11/2026
