Loading products and offers…
Loading products and offers…
PRIVACY
This policy describes the data used by the current BALGRAD.AI early-access service and the choices available to you.
Last updated: 12 September 2026
The controller for application-level processing is:
BALGRAD j.d.o.o.Privacy requests can be sent to bozidar@balgrad.hr.
When you visit, internet infrastructure necessarily handles technical data such as IP address, request time, requested page, device/browser information and security signals. Cloudflare hosts, delivers and protects the current public application. Vercel retains an inactive rollback deployment that will process technical data only if that deployment is accessed or restored. Application logs are deliberately limited and do not include raw search text, full URLs, email addresses or raw IP addresses.
Your search query and selected filters are processed to return results. They are not intentionally saved by BALGRAD.AI unless you have accepted optional analytics. Query strings may still pass through hosting infrastructure as part of a technical request. Do not enter names, contact details, health data or other private information into search.
If you request a product price alert, we process your email address, selected product, market, currency, target price, consent timestamp, confirmation status and technical alert identifiers. The alert is activated only after email confirmation. We use this information only to operate the requested alert, prevent duplicate or excessive alerts, deliver price-drop notifications and provide one-click unsubscribe. Price-alert consent is separate from optional analytics and is not bundled with marketing consent.
Only after consent, we process a random session identifier and events such as visits, searches, zero-result searches, result clicks, category/product/Deal Score/price-history views, filter/sort/market changes, price-alert signup and outbound retailer clicks. Events can include the selected product, offer, store, market, result count, coarse device class, referral domain and bounded UTM campaign fields. Search events may include search text; recognizable email addresses and phone-like strings are redacted before storage. We do not intentionally store raw IP addresses in the analytics database. A daily HMAC derived from an infrastructure-provided address is used only for rate limiting and cannot be reversed by the application.
If you email us, we process your email address, message, verification information and our response. The site has no account registration or payment collection.
Some product images load directly from manufacturer, retailer or product-source hosts. Those hosts receive the technical request, including your IP address; BALGRAD.AI sends a no-referrer instruction for product images. When you choose a retailer or source link, the destination processes the visit under its own privacy notice.
Data is disclosed only as needed to operate the current service:
We do not currently use Google Analytics, Meta Pixel, PostHog, advertising networks, payment processors or affiliate tracking. We do not sell personal information or share it for cross-context behavioural advertising.
Supabase application data is currently hosted in the EU, while Cloudflare, Resend, Vercel and some of their infrastructure or subprocessors may process technical or email-delivery data in the United States or other countries. External image hosts and retailers may also operate outside the EEA or UK. Where GDPR or UK GDPR requires a transfer mechanism, we assess the applicable provider terms and safeguards, such as an adequacy decision, the EU Standard Contractual Clauses or the UK transfer addendum. You may request information about the safeguards relevant to your data.
Depending on your location and applicable law, you may request access, correction, deletion, restriction, objection or portability, and may withdraw consent at any time. EU/EEA users may complain to the Croatian Personal Data Protection Agency (AZOP) or their local supervisory authority. UK users may complain to the Information Commissioner’s Office where UK GDPR applies.
Use Privacy Choices for immediate browser controls, session deletion and request instructions. Price-alert emails include an unsubscribe link for that alert. We may need proportionate information to verify a request. We will not discriminate against you for exercising privacy rights.
BALGRAD j.d.o.o. does not state that the California Consumer Privacy Act applies to its present scale or activities. Nevertheless, California users may submit requests to know, correct or delete data using the same process. We do not sell personal information, share it for cross-context behavioural advertising or use sensitive personal information for profiling. Global Privacy Control is treated as a rejection of optional analytics.
The current English-language service is focused on European delivery markets and is not specifically offered to people in mainland China. It should not be treated as a China-localised service. Additional notices, consent, representative and cross-border-transfer steps would be assessed before intentionally offering a China-facing service.
The service is not directed to children and is not designed to collect sensitive personal data. Please do not submit such data in search or correspondence unless strictly necessary.
We use access controls, server-only credentials, encrypted transport, restrictive database permissions, bounded inputs, double opt-in for price alerts and privacy-by-default analytics. No system is completely secure. Material policy changes will be shown by the “Last updated” date, and renewed consent will be requested where required.