This page is a translation provided for convenience. If it differs from the Italian version, the Italian version prevails.
Privacy
Privacy policy
Effective from September 15, 2026
This notice, provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR), explains what Shopping Angel does with your personal data when you use the web application at shopping-angel.it or the mobile app. Shopping Angel is a free price-comparison service for supermarkets in Italy, run by a private individual and not by a company.
Data controller
The data controller is Lorenzo Pasini, a private individual, reachable at lorebitryo@gmail.com. Write to that address for any question about this notice or to exercise your rights. There is no data protection officer, since the law does not require one for a service of this size.
What we process, why, and for how long
Shopping Angel collects only what its features need. Nothing here is sold, used for advertising or shared with data brokers.
Account
- Data
- Email address, password (stored only as an Argon2 hash, never in clear), interface language, account creation and last sign-in dates, and the date and version of the terms you accepted.
- Purpose
- To create your account, let you sign in, confirm you control the address, and remember your language.
- Legal basis
- Performance of the contract you accept when registering (art. 6(1)(b) GDPR).
- Retention
- Until you delete your account.
Sessions and security
- Data
- For each sign-in, the IP address and browser or app identifier, stored beside a hash of the session token. Failed sign-in attempts are counted in memory per address for a few minutes.
- Purpose
- To keep you signed in, to detect a stolen or replayed session, and to slow down password guessing.
- Legal basis
- Our legitimate interest in keeping accounts secure (art. 6(1)(f) GDPR).
- Retention
- A session lasts 7 days unless you sign out; the record of it is removed when you delete your account. Confirmation and password-reset links expire after 24 hours and 1 hour respectively.
Emails we send you
- Data
- Your email address and the content of transactional messages: the confirmation link, the "your account is ready" message and password-reset links.
- Purpose
- To confirm your address and let you recover access. We send no newsletters and no marketing, and mail is sent from our own server rather than through a third-party provider.
- Legal basis
- Performance of the contract (art. 6(1)(b) GDPR).
- Retention
- Copies are not kept beyond the mail server's technical logs (up to 30 days).
Your location
- Data
- The GPS position of your device, if you allow it, or the address you type, plus the search radius you choose.
- Purpose
- To rank the supermarkets near you. A typed address is turned into coordinates through OpenStreetMap's Nominatim service, requested by our server on your behalf.
- Legal basis
- Performance of the contract; the device permission you grant is what turns location on, and you can turn it off at any time (art. 6(1)(b) GDPR).
- Retention
- Your position is used for the request and is not stored on our server. The radius is remembered in a cookie on the web; a typed address is remembered on your own device in the mobile app.
Receipts you upload
- Data
- The photos you upload and everything an AI model reads from them: shop, address, date, till identifiers, the products bought and their prices, and a full transcription of the printed text. Each upload is linked to your account.
- Purpose
- To extract the prices that make the comparison possible, to credit your uploads to your account, and to let an administrator check the reading against the photo before any price is published.
- Legal basis
- Performance of the contract for the upload you choose to make; our legitimate interest in maintaining an accurate price database for the published prices (art. 6(1)(b) and (f) GDPR).
- Retention
- Photos and transcriptions are kept until an administrator removes the upload or until you delete your account. Published prices are kept indefinitely as anonymous data: when your account is deleted they are unlinked from it. The machine-read text of each receipt is also archived without any link to your account, so that a reading can be re-checked later; if a receipt showed personal data of yours, such as a tax code printed for a deduction, write to us and we will remove that record too.
A receipt can carry personal data: a loyalty-card number, a tax code printed for a deduction, part of a card slip. Please do not upload receipts that show anything you do not want processed. The model is explicitly instructed never to transcribe card slips, and the extraction is reviewed by a person before it is used.
Technical logs
- Data
- Server and mail-server logs, which can include your IP address, the pages requested and, for messages we send you, your email address.
- Purpose
- To operate the service, diagnose faults and defend it against abuse.
- Legal basis
- Our legitimate interest in running a secure service (art. 6(1)(f) GDPR).
- Retention
- Up to 30 days.
Automated processing
Receipts are read by a machine-learning vision model. Its output is a proposal that an administrator reviews line by line before any price is recorded; no decision producing legal or similarly significant effects on you is taken automatically. We do not profile you and we do not build a picture of your purchasing habits: uploads are used to price products at stores, not to describe people.
Who receives your data
Your data is not sold or rented. The following providers process it on our behalf, or receive it because a feature you use needs them:
- OVH SAS (France, EU) hosts the server and the database in the European Union.
- Ollama, Inc. (United States) runs the vision model that reads receipt photos. Only the photo and the reading instructions are sent; no account data travels with it.
- The OpenStreetMap Foundation (United Kingdom) receives the address you type, when you look one up, through our server rather than from your browser. Open Food Facts supplies our product catalogue but receives nothing about you.
- Email is sent from a mail server we run ourselves; no third-party mailing service is involved.
- Public authorities, only where the law requires it.
Transfers outside the European Union
Receipt photos are processed by Ollama, Inc. in the United States. That transfer relies on the safeguards Ollama publishes for its cloud service, including the standard contractual clauses adopted by the European Commission; you can ask us at the address above for details of the safeguards in place. Everything else stays in the European Union or the United Kingdom, which the Commission recognises as providing adequate protection.
Your rights
Under Articles 15 to 22 of the GDPR you can ask us at any time to:
- confirm whether we process your data and receive a copy of it;
- correct data that is inaccurate or incomplete;
- delete your data ("right to be forgotten");
- restrict processing while a request is examined;
- receive the data you gave us in a structured, machine-readable format;
- object to processing based on our legitimate interest.
Two of these you can do yourself: change your password and delete your account from your profile page. Deleting your account removes your lists, your uploaded receipts and their photos, and your account details; prices already published are kept without any link to you. For anything else, write to lorebitryo@gmail.com. We answer within one month.
If you believe your data is being processed unlawfully you can lodge a complaint with the Italian supervisory authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the authority of the EU country where you live.
Minors
Shopping Angel is intended for adults. Do not register if you are under 18; if we learn that an account belongs to a minor we will delete it.
How your data is protected
Passwords are stored as Argon2 hashes and never in clear. Session, confirmation and reset tokens are stored only as SHA-256 hashes. All traffic is encrypted with TLS; session cookies are HttpOnly and Secure. The database and mail server are reachable only from the application server itself.
Cookies
The web application uses only technical cookies and local storage, described in the cookie and storage notice. There are no analytics, advertising or profiling cookies, which is why no consent banner is shown.
Changes to this notice
If this notice changes in a way that affects you, the new version will be published here with a new effective date and, for material changes, announced when you next sign in. The version you accepted is recorded with your account.