Privacy Policy

Who we are

Our operator and data controller details are: Vitrini is a trading name of ZeroPointOne Ventures Ltd, registered in England & Wales under company number 17398629. Registered office: Collingwood Buildings, 38 Collingwood Street, Newcastle Upon Tyne, NE1 1JF, United Kingdom. For privacy questions or requests, email hello@vitrini.co.uk.

1. Information we process

The public comparison portal does not require an account or signup, and no third-party analytics service is currently configured on it.

When you follow an offer, we count clicks by day and by offer, product and retailer identifiers. A short-lived record of a hashed event identifier helps prevent duplicate counting. These click records do not collect your browser referrer URL and do not contain dedicated IP-address or user-agent fields.

Our hosting infrastructure and servers necessarily process connection metadata such as IP addresses, browser or device information, requested pages and request times. Server diagnostic logs may record some of this information so the service can operate and problems or security events can be investigated.

If you email us, we receive your email address, sender details and the contents of your message, together with any information you choose to include.

2. Why we process information

We use this information to operate the comparison service and route visitors to offers; to understand offer performance; to maintain, troubleshoot and secure the service; and to respond to emails and privacy requests. Contact us if you need details of the lawful basis that applies to a particular use of your information.

3. External services, images and links

We use service providers, including hosting and infrastructure providers, to deliver the site. They may process connection and diagnostic information on our behalf.

The portal serves its font files from our application; your browser does not request Google Fonts stylesheets or font files from Google. Some product images load directly from URLs supplied in retailer or affiliate-network feeds. When your browser requests these images, the relevant image host may receive your IP address, browser information and referrer information, subject to its own privacy practices.

Offer links can pass through an affiliate network before reaching a retailer. After you leave Vitrini, the network or retailer may set attribution cookies or use similar technologies. Their privacy and cookie policies apply to that activity and to anything you do on their sites.

4. Cookies and browser storage

The public comparison experience does not currently set its own analytics or advertising cookies. Because it does not currently offer cookie-based analytics or advertising choices, it has no cookie-consent banner or preference tool. This does not mean that third parties cannot set cookies after you follow an external link.

The separate administration area uses direct Google sign-in and a server-side application session, not Firebase Authentication. We process the administrator's verified email address and Google account identifier to control access. An essential Secure, HttpOnly, SameSite=Lax session cookie keeps authorised administrators signed in for up to five days; the server stores a hash of the session token. We do not persist Google access or refresh tokens. This administration functionality is not a public visitor signup or analytics service.

5. How long information is kept

Duplicate-prevention click receipts have an expiry target of ten minutes, and daily click-count records have an expiry target of 90 days. Firestore's time-to-live deletion runs asynchronously, so physical deletion may occur after those expiry times. Product and retailer popularity totals may be derived from those counts without identifying individual visitors.

Fixed retention periods for server logs, email and backups are not stated here because they can depend on the relevant provider, operational need and backup cycle. You may contact us for current retention details relating to your information.

6. Security

We use technical and organisational safeguards intended to protect information against unauthorised access, alteration, loss or disclosure. No internet service or storage method can be guaranteed to be completely secure.

7. Your data protection rights

Depending on the circumstances and applicable law, you may ask for access to or a copy of your personal information, correction of inaccurate information, deletion, restriction of processing, or portability of information you provided. You may also object to certain processing. Some rights are subject to legal conditions and exceptions.

To make a request, email hello@vitrini.co.uk and describe the information or processing concerned. We may need enough information to verify your identity and locate relevant records. You can also complain to the UK Information Commissioner's Office at ico.org.uk/make-a-complaint/.

8. Contact

For questions about this policy, how information is used, applicable lawful bases, or current retention details, contact hello@vitrini.co.uk.