Draft for the operator's review — not yet in force.

Effective date: [OWNER-CONFIRM: date]

1. Who operates Comparesame

Comparesame is operated by [OWNER-CONFIRM: legal name], a Romanian sole trader (PFA), CUI [OWNER-CONFIRM: CUI], registered at [OWNER-CONFIRM: address]. For privacy questions, write to [OWNER-CONFIRM: contact e-mail].

2. What Comparesame does

You paste a product link or the text of a product label. Our server fetches the shop page you asked for; your own browser reads the product's name, type, declared composition, quantity and price from it. You confirm or correct these values before anything is compared or saved. We then show you offers of the same product, with the same declared composition, that cost at least 10% less per unit, each linking to its shop. We display facts we read from public shop pages and link to them; we do not copy or republish shop content, images or descriptions.

3. Information we process

3.1 The link or text you paste

Processed only to answer your request — to fetch the page and read the facts from it. Please do not paste personal data, yours or anyone else's, into this field.

3.2 The product facts you confirm

The product URL, the shop's host name, the product name, type, declared composition, quantity, price and currency, and the time they were read, are saved in our index once you confirm them, and shown to later visitors as an offer.

3.3 Abuse-prevention data

To keep the service usable for everyone, we count requests per visitor against published limits. We key this count to a one-way hash (SHA-256) of your IP address and the day — never the raw address — and delete these rows after two days.

3.4 Your country

When available from your request, your country is used only to estimate import duty and VAT on the price you enter. It is not stored.

3.5 Local storage

Your browser's local storage keeps only your language choice (English or Romanian). It never leaves your browser.

3.6 Cookies

We set no cookies of any kind — no session cookies, no analytics cookies, no advertising cookies. The only thing your browser remembers is the local-storage language choice in 3.5, which is not a cookie and is never sent to us.

3.7 Internal error and event log

When something goes wrong we record an error code and a short technical detail — which may include the product URL you pasted — so we can find and fix the problem. Kept for [OWNER-CONFIRM: retention period, e.g. 90 days].

3.8 Domain registration lookups

To show when a shop's domain was registered, we look it up in the public RDAP registry. This is public registry data about the domain, not data about you.

3.9 Exchange rates

We use the European Central Bank's published reference rates to convert prices. This does not involve your personal data.

4. Why we are allowed to process this (legal basis)

Reading and comparing the product you asked about is performance of the service you requested. Abuse-prevention, the error log and the index of confirmed offers rest on our legitimate interest in running a reliable, safe service — an interest we weigh against your rights, which is why the abuse-prevention key is pseudonymised and short-lived. We do not rely on consent as a legal basis, and we do not ask you to withdraw one.

5. Who we share data with

Our hosting provider is Cloudflare, Inc., which processes the requests that reach our servers under its own terms. We use no other sub-processors. We run no advertising and do not sell or share data with advertisers.

6. Where data is processed

Cloudflare's network, with infrastructure in the EU and the US.

7. How long we keep data

• Confirmed product offers in the index: indefinitely — they are public product facts, shown to later visitors.
• Abuse-prevention rows: 2 days.
• Error/event log: [OWNER-CONFIRM: retention period].

8. Your rights

Under the GDPR you can ask to access, correct, delete or restrict the data we hold about you, object to our processing, or ask for a copy in a portable format. Write to [OWNER-CONFIRM: contact e-mail]. If you are not satisfied with our answer, you can complain to Romania's data protection authority, ANSPDCP (Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal), www.dataprotection.ro.

9. Automated processing

Product facts are read automatically and compared automatically, but this does not produce a legal or similarly significant effect on you: you confirm every value yourself before anything is saved or compared, and the result is a list of shop links for you to check.

10. Security

The abuse-prevention key never stores your raw IP address. We hold no account passwords or payment details — the site has no accounts and takes no payment.

11. Changes to this policy

We may update this policy as the service changes. The effective date above shows the latest version.