techfitsmeBuild my PC

Privacy policy

Last updated: 13 October 2026

In short: techfitsme has no accounts, no tracking cookies and no targeted advertising. We measure our audience anonymously, we keep your search history on your device, and what you ask the configurator (AI assistant) is sent to an artificial intelligence provider so it can answer you.

Who is responsible?

The data controller is Bahri Labs (SAS, 47 rue Vivienne, 75002 Paris, France, R.C.S. Paris 109 283 416), the publisher of the site. Contact for any question about your data: [email protected]. See also the legal notice. Bahri Labs is based in France, so the EU General Data Protection Regulation (EU GDPR) and French law apply, and we also follow the UK GDPR for visitors in the United Kingdom.

What we process, why and for how long

1. Anonymous audience measurement

Our own measurement tool (no third-party script) records usage events: page views, steps completed in the configurator, clicks on buttons and on links to retailers, impressions and clicks of our in-house ad slots, errors and loading times. For each event we keep the page, the time, a random tab identifier and a random browser identifier, the country (inferred by our network provider) and a device type (mobile, tablet or computer).

  • We do not keep your IP address or your full user agent: they are used to limit abuse at the time of the request, then discarded.
  • No free text is recorded: what you type or answer is measured only by its length.
  • The data is neither sold nor combined with other sources.

Legal basis: legitimate interests (understanding and improving the site, keeping it secure). Retention: 90 days, then automatic deletion. The browser identifier is renewed after 13 months.

2. Protection against abuse and spending cap

The configurator uses paid services. To stop a single visitor or a bot from exhausting the service, your browser sends its random identifier in a header (x-tfm-visitor) and the server keeps a log of spending per visitor and per day (identifier, tool used, cost). Without an identifier, the server makes up an opaque one from your IP address, scrambled with a secret that only exists in memory and disappears at every restart. The IP address is never written to disk. A per-address request counter, also held in memory, limits bursts.

Legal basis: legitimate interests (security, fighting abuse). Retention: 90 days for the spending log; a few minutes, in memory, for the per-address counters.

3. Technical logs

The server keeps a log of requests (route, response code, duration, any error) and of browser-side errors, to diagnose outages. These logs contain neither an IP address nor the content of your requests. Retention: 90 days. Your access to the site also goes through Cloudflare (delivery and protection network) and our host, which keep their own network logs, including the IP address, for security and to keep the service running.

4. The configurator and artificial intelligence

When you describe your needs or answer the questions, the text you enter (and the choices you make: budget, games, starting parts) is sent to the AI provider OpenAI through its programming interface, to generate the answer. We ask OpenAI not to retain exchanges for its application storage; it may nonetheless keep them for as long as its own terms provide (for example to detect abuse). The web searches the configurator runs (product specifications, reviews) go through the same provider and contain only the product name and the question asked.

Do not write personal data (name, address, phone number) in the input field: the configurator does not need it. OpenAI is a processor that may process this data outside the United Kingdom and the European Union, notably in the United States; these transfers are covered by the safeguards provided for by the UK GDPR and the EU GDPR, in particular the European Commission's standard contractual clauses.

Legal basis: performance of the service you request. We do not keep your requests on our servers beyond their processing.

5. Price and data sources (server side)

To compare prices, our servers query retailers' websites, a price-collection service (Apify) and the public deals feed of the Pepper deal community (Dealabs in France, HotUKDeals in the UK). These calls cover only the name or reference of a product: neither your IP address, nor your identifier, nor the text of your request is passed on. When you click a link to a retailer, you leave techfitsme and the retailer's policy applies.

6. What stays on your device

We use your browser's storage (localStorage and sessionStorage), not cookies:

  • tfm.visitor (localStorage): the random browser identifier used for audience measurement, renewed after 13 months.
  • tfm.session (sessionStorage): the random tab identifier, deleted when the tab closes.
  • techfitsme:history (localStorage): your latest searches and their results, so you can find them again. They stay on your device and are never sent to our servers.
  • techfitsme:couleur (localStorage): the interface colour you chose.

You can clear all of it at any time in your browser settings (site data). Configuration sharing links (/v3/c/…) contain the configuration in the address itself: nothing is stored on our side for them, and they are not indexed.

Cookies and consent

The site sets no tracking cookie and no advertising cookie. A technical access cookie (tfm_access, 90 days, httpOnly) is set only when the site is locked behind a password, which is not the case today. Our audience measurement is designed to fall within the consent exemption that the French data protection authority (CNIL) provides for trackers strictly limited to audience measurement: it is in-house, anonymous, and not combined with other processing. No consent banner is therefore needed for the moment.

On your first visit to the home page, we pick the version from the country of your connection (given by our host, Cloudflare, from your IP address) and your browser language. The country is used for that choice only and is never stored. A language preference cookie (tfm_market, 1 year) is set when you choose the French or the British version of the site with the language switch. It remembers that choice so we can send you to the right version on your next visit, and it contains no personal data. It is strictly necessary for the function you request, so it is exempt from consent.

The ad slots currently display in-house visuals, and only their impressions and clicks are measured by our internal tool. If a third-party ad network is ever added, a consent banner will be put in place before it is activated and this page will be updated.

Offers are ranked by ascending price, excluding delivery costs. No retailer pays to appear or to be ranked higher. The comparison does not cover every retailer: other shops may sell the same product. Some links are affiliate links: you pay nothing extra, and we may earn a commission. This changes neither the ranking nor our choices.

Prices are collected automatically and may have changed since. The time of the check is shown for each offer; the price shown by the retailer is the one that applies. Prices are in pounds sterling (£) and include VAT. Delivery costs are not included unless stated otherwise. A price may depend on a promo code shown on the retailer's page.

Our affiliate links go through the Amazon Associates programme and the Awin network. When you click, the partner may set its own cookies on its site or on the retailer's, to credit us with the purchase: its own policy then applies.

As an Amazon Associate, Bahri Labs earns from qualifying purchases.

Your rights

Under the UK GDPR and the EU GDPR you have the rights of access, rectification, erasure, objection, restriction and portability over the data that concerns you. Because our data is tied to a random identifier and not to your name, we will ask you for the relevant identifier (the value of tfm.visitor in your browser's storage) to find it. Write to [email protected]; we reply within one month.

You can also object to audience measurement by blocking or deleting your browser's site data. If you believe your rights are not being respected, you can lodge a complaint with the French data protection authority, the CNIL (www.cnil.fr), or, if you are in the United Kingdom, with the Information Commissioner's Office (ico.org.uk).

Recipients and processors

  • OVH SAS (France): hosting of the server and of the measurement database.
  • Cloudflare: delivery and protection of traffic (network logs).
  • OpenAI: generation of the configurator's answers and the configurator's web searches.
  • Apify: price collection (no personal data).
  • Google Workspace: Bahri Labs' email, for the messages you write to us.

Updates

This policy may change, for example if an ad network is added. The date of the latest update is shown at the top of the page.