Privacy policy
Controller: Andrea Cuiuli. Contact: andrea.cuiuli@protonmail.com. Updated: November 7, 2026.
Browsing and accounts
The catalog requires a free account. We process your name, email, account identifier, password hash and session tokens to create and protect your account. The legal basis is performing the service you request; service security relies on legitimate interests. We do not sell data or use advertising or advertising tracking.
Requests and contributions
Internet requests send IP addresses, technical information, search terms and proposed codes to the service. Technical logs support delivery and security. Collections, history, contributions and reports belong to your account. Selected photos are uploaded on request, validated and stripped of metadata before storage. Approved contributions may become available in the catalog. Product recognition is marked Coming soon and does not request camera access.
Providers and transfers
We use Koyeb for the application, Amazon Web Services for the database and documents, Namecheap for recovery emails and the system photo picker for mobile contributions. Documents open in your system browser or viewer, subject to their policies. Providers may process data outside the European Economic Area; safeguards required by transfer rules apply where necessary.
Retention and deletion
Account data is kept until deletion or as needed for the service and applicable obligations. In Profile you can permanently delete your account, sessions, recovery links personal memberships, collections, history, contributions and reports by confirming your current password; catalogs and shared data remain. Photo deletion is queued with retries; uploaded photos not attached to a submitted contribution expire after 24 hours. Approved barcodes may remain in the catalog without a contributor reference. Recovery tokens expire after one hour and refresh tokens after 30 days. Logs and backups follow provider retention cycles and applicable obligations.
Preferences and rights
The website uses necessary session, catalog and language cookies; the app stores preferences locally and credentials in protected system storage. You may request access, correction, erasure, portability, restriction or object to processing by contacting the controller. You may complain to the Italian Garante per la protezione dei dati personali or your competent supervisory authority.