Privacy policy

Last updated 29 September 2026

Short version

Vialo does not use cookies, advertising trackers or analytics services. Browsing the catalogue, the nebula and the deals page needs no account and sends us no personal data.

Who is responsible

Vialo is run by Tomislav Fajerbach, Croatia (see About and contact). Questions or requests about your data: [email protected].

What is stored in your browser

Vialo sets no cookies. It uses your browser's local storage, only for things you ask for: a star you put on a perfume in the catalogue (key vialo-wishlist), and, if you create an account, your sign-in token and email (keys vialo_token, vialo_email). This data stays on your device and is removed when you sign out or clear site data. Because it is strictly needed for the feature you use, no consent banner is required.

Accounts

If you create an account we store your email address, a password hash (never the password itself), and the collection, wishlist and wear log you choose to add. We use them only to run the service for you. You can delete your account yourself at any time: open Your universe and choose Delete my account. Your account, collection, wishlist and wear log are removed at once. Signing out ends every session of your account. Price-drop emails are off until you switch them on in Your universe; they are sent at most once a day and every email has an unsubscribe link. To limit abuse we count sign-up and sign-in attempts per IP address and email for a short time; these counters are deleted after at most a day.

Server logs and counts

Our hosting (Cloudflare for the site, Render and Supabase in Frankfurt for the service and database, Resend in Ireland for the emails you ask for, namely password reset links and, only if you switch them on, price-drop alerts) process your IP address to deliver pages and protect against abuse, as any web host does. Vialo itself keeps only anonymous daily counts of how many requests each part of the service received and how many errors occurred, and of clicks to each shop by country (the country is worked out from your browser's time zone, not stored with anything about you), so we can tell a shop how many visitors we send it. No profile of you is built.

Third parties

Fonts are loaded from Google Fonts, so your browser contacts Google to fetch them. Bottle photos are served through vialo.eu from the shops' own image servers. When you click a buy link you leave Vialo and the shop's own privacy policy applies; the link carries an affiliate tag so the shop can tell the visit came from Vialo, but it carries no personal data from us.

Your rights

Under the GDPR you may ask to see, correct, export or delete the data we hold about you, and you may complain to the Croatian data protection authority (AZOP). Email [email protected].