Privacy policy

Controller: Consent Management Inc (“Inth,” “we”), a Delaware corporation

Service: cookiebench.com (the “Site”)

Notice address: 2261 Market Street STE 86311, San Francisco, CA 94114

Contact: privacy@inth.com

Cookie Bench is a public benchmarking property for consent management platforms. It is operated by Consent Management Inc. It is not a hosted CMP for your customers’ production traffic.

Inth platform services are covered by the Inth Privacy Policy (https://inth.com/legals/privacy-policy).

Main markets: United States (including California), United Kingdom, and Europe (EEA).

Article 27 representatives (EU and UK)

Status: appointed.

We do not maintain an establishment in the EEA or the United Kingdom. Where GDPR Article 27 / UK GDPR Article 27 requires a representative, we have appointed:

EU Representative

Euverify Limited (Ireland)

Unit 3D North Point House

North Point Business Park

New Mallow Road

Cork

T23 AT2P

Ireland

Email: gdpr@euverify.com

UK Representative

Euverify Ltd (UK)

3rd Floor

86-90 Paul Street

London

EC2A 4NE

United Kingdom

Email: gdpr@euverify.com

If you are located in the EU/EEA or the UK and have questions or concerns regarding your personal data, you may contact our appointed representative above.

To submit a Data Subject Access Request (DSAR), data deletion request, or any other GDPR-related inquiry, use the secure portal:

https://gdpr.euverify.com/verify/0ef2b25b-75a8-4b05-ac18-f0364f18a4f9

The portal lets you verify our appointed representative and submit GDPR requests directly. Requests submitted through the portal are logged and tracked.

You may also contact privacy@inth.com, the ICO (UK), or your EEA supervisory authority.

• Usage data: IP, user agent, pages, referrers, diagnostics.
• Consent runtime: consent cookie/c15t flow; init may store IP, user agent, and language when configured.
• Analytics (after measurement consent): Databuddy, PostHog EU (e.g. benchmark selection events).
• Benchmark catalogue data: application names, versions, scores, metrics, and any JSON/content you submit or that we curate. Do not upload personal data or secrets in benchmark payloads.
• No user accounts in the current product schema (no login email database for Cookie Bench itself).

• Marketing (after marketing consent where required): LinkedIn Insight, X pixel, Meta Pixel, Reddit Pixel, and Google Ads conversion/remarketing tags (same Inth ads family as on inth.com / c15t.com where configured — see Cookie Notice). For our paid campaigns, not third-party ads on the Site.

• Operate and secure the Site;
• Publish and improve benchmark results;
• Measure Site usage;
• Measure marketing campaigns where tags fire;
• Prevent abuse.

Lawful bases (EEA/UK): legitimate interests / contract for operating a public benchmark; consent for non-essential cookies where required.

Infrastructure (e.g. Vercel, Turso), analytics providers (PostHog, Databuddy), advertising tags (LinkedIn, X, Meta, Reddit, Google Ads), and error monitoring if enabled. See Cookie Notice. Advertising partners are often independent controllers when tags fire.

We do not sell personal information for money. Allowing marketing tags may be “sharing” for targeted advertising under California law — opt out via Your Privacy Choices / preferences / GPC / privacy@inth.com.

Benchmark catalogue retained while published. Analytics/logs per provider settings. Consent records per consent configuration. No fixed multi-tenant consent-purge SLA beyond what the product supports (see Inth Privacy Policy §5 pattern).

Cookie preferences / Your Privacy Choices; browser controls; email privacy@inth.com. European/US state rights apply to our controller processing where those laws apply (see Inth Privacy Policy).

Appointed — same Euverify EU + UK details and DSAR portal as under Primary markets / Article 27 above and the Inth Privacy Policy.

Not directed to children under 16.

US Delaware corporation; California notice address; safeguards as needed (SCCs / UK Addendum/IDTA where required).

Consent Management Inc (Inth) DPF certification is pending official Commerce listing — no DPF certification claim until listed. See Inth Privacy Policy §9 (https://inth.com/legals/privacy-policy#international-transfers).

Switzerland: short transfer note only; no separate Swiss rep unless published.

Consent Management Inc (Delaware), 2261 Market Street STE 86311, San Francisco, CA 94114 · privacy@inth.com

DPO: William De Ath — privacy@inth.com or the notice address (full details in the Inth Privacy Policy (https://inth.com/legals/privacy-policy) §13).