More sales from the traffic you already have
Last updated: July 15, 2026
CRO Diary (crodiary.com) is an independent online publication about conversion optimization for ecommerce stores. This policy explains what data we collect when you read the site, why we collect it, and what rights you have under the EU General Data Protection Regulation (GDPR), the UK GDPR and the California Consumer Privacy Act (CCPA). For anything related to this policy, email us at [email protected].
Analytics data. With your consent, we use Google Analytics 4 and Microsoft Clarity to understand how readers use the site. These tools set cookies and collect usage data: pages you visit, how long you stay, what you click and how far you scroll, your browser and device type, and an approximate location derived from your IP address. None of this loads before you accept it in the cookie banner.
Email. If you write to us, we process your email address and the content of your message so we can read it and reply.
We do not run user accounts, comments or newsletters, and we collect nothing else.
If you decline, no analytics cookies are set at all. If you accept, these are used:
| Name | Provider | Category | Duration |
|---|---|---|---|
| _ga, _ga_* | Google Analytics 4 | Statistics | 2 years |
| _clck | Microsoft Clarity | Statistics | 1 year |
| _clsk | Microsoft Clarity | Statistics | 1 day |
| cookie-consent | This site (localStorage) | Preference | 1 year |
Your consent choice is stored as a localStorage entry named cookie-consent, not as a tracking cookie. To change your choice, clear this site's data in your browser settings and the banner will appear again.
Analytics data is processed on our behalf by Google (Google Analytics 4, see the Google Privacy Policy) and Microsoft (Clarity, see the Microsoft Privacy Statement). Both act as data processors under agreements that meet GDPR requirements. We do not sell your personal information to anyone, and we do not share it for cross-context behavioral advertising as defined by the CCPA.
Emails you send us are kept for up to 24 months after our last exchange, then deleted. Analytics data is kept for the retention periods set by Google and Microsoft for their respective tools; we do not keep separate copies of it.
If you are in the EU or the UK, you have the right to access your data, correct it, have it erased, restrict or object to its processing, receive it in a portable format, and withdraw any consent you gave. You also have the right to lodge a complaint with your local supervisory authority. If you are a California resident, you have the right to know what personal information we collect, to have it deleted, to correct it, and not to be discriminated against for exercising these rights. To exercise any of these rights, email [email protected] and we will respond within the legally required time.
Google and Microsoft may process analytics data on servers outside the EEA and the UK, including in the United States. Where that happens, the transfers are covered by Standard Contractual Clauses and equivalent safeguards maintained by those providers.
This site is not directed at children under 16 and we do not knowingly collect their data.
If we change this policy, we will update it on this page and revise the date at the top. Significant changes will be noted here explicitly.
Questions about this policy or your data: [email protected]