This notice explains data handling on curiofuse.com and the associated CurioFuse application, including the Hungarian edition, redirects and notification management retained on former addresses. Reading the site requires neither registration nor a ChatGPT account.
1. Who is the controller?
- Data controller
- Marketing Mesterfokon Kft.
- Registered office
- Szugló utca 82., Budapest 1141, Hungary
- Representative
- Nyers Marcell
- Privacy contact
- info@m-marketing.hu
2. Page requests, search and security
When you use the site or search, the hosting platform processes request information: IP address, time, requested URL and search parameters, browser information, country and response status. This supports delivery, troubleshooting and abuse prevention. Legal basis: our legitimate interest in operating a reliable, secure service (Article 6(1)(f) GDPR).
Search terms are sent to our server to filter public content. We do not send them to AI or the translation provider, and the application does not maintain a separate reader search-history database. The request URL may nevertheless appear in platform logs; avoid entering passwords or confidential personal information.
The hosting provider retains technical logs under its own retention rules for service operation, investigation of security incidents and legal obligations. The application does not maintain a separate persistent visitor IP database. You can ask our privacy contact about provider retention and access to your data.
3. Language, saved items and browser storage
These features support the interface you use; we do not use them to build advertising profiles. Their legal basis is our legitimate interest in providing a usable service (Article 6(1)(f) GDPR). You can delete or block cookies and site data in your browser; saved items and preferences may then be lost.
Without a saved language choice, the hosting platform’s IP-derived country selects Hungarian for Hungary and English elsewhere. The application does not store your IP address for this choice or call a separate geolocation service. You can change the language at any time.
- curiofuse.language
- First-party cookie: your manual language choice (EN/HU), 365 days. A copy in localStorage persists until cleared and can recreate the cookie.
- curiofuse.saved.v1
- localStorage: saved content IDs, until cleared. Opening the saved list sends the IDs to our server to retrieve those items. There is no account synchronization.
- curiofuse.discovery-context.v1
- sessionStorage: search/filter paths, list state and scroll position for returning to a list. Up to 12 snapshots; those older than two hours are ignored. Cleared when the browser session ends or site data is removed.
- __cf_bm
- Cloudflare bot-protection cookie, when set by the platform; the provider specifies expiry after 30 minutes of continuous inactivity. The platform may also use essential security or sign-in cookies.
4. Videos, images and external services
Original YouTube thumbnails load from i.ytimg.com. Displaying the image therefore connects to Google, which receives technical request information such as your IP address and browser details. Image requests omit the referring page. Our purpose is to show an original preview that helps you choose a video; our legal basis is legitimate interest (Article 6(1)(f) GDPR).
The video player separately connects to youtube-nocookie.com only after you press the load button. The notice before the button explains the external connection; loading the player is optional and based on consent (Article 6(1)(a) GDPR). You can unload it on the page; this does not undo earlier transfers. Google’s policy explains its further processing.
Article covers, fonts and existing tool logos are served by our site. A newly added tool may load its icon directly from the official vendor’s website without a referrer; that vendor then receives technical image-request data. External source links lead to sites with their own privacy practices.
5. Translation and AI-assisted publishing
For a missing Hungarian title or short excerpt, our server may request an automatic translation from MyMemory / Translated. We send only already-public text, never full articles, drafts, reader search terms or reader identifiers. The application does not forward your visitor IP address in that server request. Translations are cached in our database; the provider may process submitted public text under its own terms.
AI-assisted publishing uses public sources and editorial material; reader searches and saved lists are not provided to the content generator. Articles may include public professional names and source attribution, processed under legitimate interest in informing readers and identifying sources for as long as the content remains relevant. You can request correction or a removal review at our contact address. The site does not make automated decisions about you with legal or similarly significant effects.
6. Optional browser notifications
Moving to curiofuse.com does not automatically transfer browser permission or a subscription enabled on the former address. You can separately enable notifications on the new address. An existing subscription remains manageable, testable and removable on the former address, where new subscriptions are no longer accepted. To avoid duplicate alerts, stop the previous subscription before subscribing again. Local browser data, including the management token and saved items, does not automatically transfer to the new domain either.
You can opt in to immediate notifications for new news published after a separate AI review. This may mean several messages per day. Only the “Enable notifications” button starts the permission request, which you must also approve in your browser. Legal basis: your consent (Article 6(1)(a) GDPR); subscription is not required to use the site.
To deliver notifications, our database stores the browser-issued subscription endpoint and encryption keys, selected language, subscription/renewal times and a one-way hash of the secret management token. We do not ask for a name or email address. Delivery status and the related content ID support deduplication and error handling; notification links contain no click-tracking parameters.
Encrypted messages pass through your browser provider’s push service (for example Google, Mozilla, Apple or Microsoft, depending on the browser) to your device. Delivery also depends on the provider, browser and operating-system settings. Notifications may appear on your lock screen according to your system preferences.
Unsubscribe at any time through “Notifications” in the footer; we then delete the server subscription and its delivery records. You can also revoke permission in your browser’s site settings. Subscriptions reported invalid by the push provider are removed on delivery attempts. A subscription is valid for 180 days; without renewal, delivery stops and the next maintenance run removes it. Already delivered notifications can be removed separately on your device.
- curiofuse.push.manage.v1
- A random secret in browser localStorage for managing this browser’s subscription, retained until site data is cleared.
- curiofuse.push.dismissed.v1
- A localStorage preference that postpones a dismissed invitation for 30 days. It is not consent to notifications.
7. Contact and editorial access
If you email us, we process your address, supplied name and message to respond. Legal basis: legitimate interest (Article 6(1)(f) GDPR); for privacy-rights requests, legal obligation (Article 6(1)(c)). General correspondence is retained until the matter is resolved and, in a dispute, as needed to settle or defend a claim. Evidence of handling privacy requests is kept for the applicable legal-obligation and claims period.
The editorial interface is protected. The platform handles ChatGPT authentication, and the application checks the user ID for editor authorization. This is not required for reading. Legal basis: legitimate interest in preventing unauthorized changes; authorization lasts while editorial access is maintained.
8. Recipients and international processing
Operation involves OpenAI Sites and its Cloudflare infrastructure; the features above also involve Google / YouTube, MyMemory / Translated and, where an icon loads directly, the relevant vendor. For browser notifications, the browser provider’s push service also participates in delivery. Email providers process information needed to deliver correspondence. Within the operator, access is limited to people who need it for operation or handling your request.
Global providers may process data outside the EEA, including in the United States. Their notices below describe applicable safeguards and provider retention; where applicable, safeguards include European Commission-approved Standard Contractual Clauses. Contact us for further information on transfers and safeguards relevant to your data.
9. Your rights and complaints
Subject to the statutory conditions, you can request access, rectification, erasure and restriction, and object to processing based on legitimate interest. You can withdraw consent at any time without affecting the lawfulness of earlier processing. Data portability applies where its GDPR conditions are met. Data stored only in your browser can be removed by clearing site data.
Send requests to info@m-marketing.hu. We respond without undue delay, normally within one month. For complex or numerous requests, the GDPR allows an extension of up to two further months; we will explain any extension within the first month. Exercising your rights is generally free of charge.
You may complain to the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or the EU supervisory authority where you normally live or work. You may also seek a judicial remedy. NAIH: Falk Miksa utca 9–11., Budapest 1055, Hungary; postal address: 1363 Budapest, Pf. 9.; ugyfelszolgalat@naih.hu. Its website explains how to initiate proceedings.
10. Scope and updates
This release has no active AdSense, Google Analytics, Meta Pixel, marketing tracking or newsletter subscription. Before introducing features involving new data processing, we will update this notice and obtain separate consent where required. The current notice and its update date are available on this page.