Privacy

Cillino has no advertising, no analytics and no tracking cookies. An account is optional: the whole catalog works without one.

Without an account

Your Want to try, Tried and Favorites lists, and a few display preferences, are stored in your browser (local storage) on your device only. We never receive them. Clearing your browser data removes them. If you later sign in, we offer to copy them to your account; nothing is sent until you choose to.

If you create an account

We store:

• your email address, used only to sign you in and for essential messages about your account (no newsletters);
• a display name, if you choose one;
• your lists (Want to try, Tried, Favorites) and when you added each sauce;
• which version of the Terms and this notice applied when you signed up;
• your signed-in devices: browser type, sign-in and last-active times;
• for abuse prevention, a keyed hash of the IP address used to sign in or make changes. We can’t turn it back into the address without our secret key.

Your account and lists are private: only you can see them. We don’t sell or share them, and they are never part of the catalog data, the open data download or any public page.

Signing in and cookies

To sign in, you type your email address and we email you a one-time code and link. They expire after 15 minutes. The emails are sent by our email delivery provider, which processes your address only to deliver them, on our instructions.

When you sign in, we set one cookie, which keeps you signed in. It holds a random token, works only on cillino.com, can’t be read by page scripts, and ends after 30 days without a visit, or when you sign out.

Your controls

On your Account page you can change your display name, see your signed-in devices and sign them out, download all your account data as a file, and delete your account. Deletion is immediate and permanent: your email address, lists and devices are removed from the live database.

On our server

Like any website, our web server records technical access logs (IP address, time, page requested, browser type) to keep the service secure and working. The last part of each IP address is removed before it is written. Cookies are not logged. Logs are kept for 14 days and then deleted, and are not shared or used for profiling.

Barcode scanning

When you scan a barcode, the camera image is processed in your browser to read the barcode. No image leaves your device; the barcode is looked up in a file your browser already downloaded.

Why, and for how long

• Account, lists and sign-in: to provide the account you asked for (legal basis: contract, Art. 6(1)(b) GDPR). Kept until you delete your account.
• Sign-in codes and links: deleted within a day of expiring.
• Abuse-prevention records (keyed IP hashes, request counts): legitimate interest in a secure service (Art. 6(1)(f) GDPR), deleted after 2 days. Devices list: until the session ends.
• Access logs: legitimate interest (Art. 6(1)(f) GDPR), 14 days.
• Backups: the database is backed up nightly and kept encrypted for up to 12 months, only to restore the service after a failure. Data you delete disappears from backups as they expire.

Hosting

The site and its database run on a server rented from Hetzner Online GmbH in Nuremberg, Germany (EU). Encrypted backups are stored with Backblaze in the EU (Amsterdam, Netherlands). Both process data only on our instructions.

Fonts and third parties

Fonts and all other files are served from cillino.com. Product photos are served from cillino.com, not from Open Food Facts. Apart from the email delivery described above, no data is sent to third parties.

Your rights

You can ask for access to, correction or deletion of personal data about you, restrict or object to its use, receive your data in a portable format, and complain to a data-protection supervisory authority (for us: Informacijski pooblaščenec Republike Slovenije (Information Commissioner of the Republic of Slovenia)). Most of this you can do yourself on your Account page.

Contact

Controller: Emona Biopharma d.o.o. (details in the legal notice). Questions or requests about your data: hello@cillino.com.