Privacy policy

The controller is EAL ENTERPRISES S.R.L., Drumul Negru nr. 10, Voluntari, Ilfov, Romania. For anything about your data, write to hello@kledra.com.

You can use Kledra without an account. To deliver each page and keep the site secure, our host Vercel processes your IP address, the page requested, the time and your browser’s user agent. The legal basis is our legitimate interest in running a working, secure site (Art. 6(1)(f) GDPR).

We run no analytics, no advertising and no tracking pixels.

Kledra sets no cookies. Your browser’s local storage keeps:

• your favorites, so they are still there next time
• a note that you have seen the prompt to save them to an account
• your session, if you sign in

All of it stays on your device, serves only features you use, and is gone when you clear your browser’s site data.

Product photos load directly from the shop’s image servers, for AliExpress from Alibaba’s content network. When a photo appears, your browser sends those servers your IP address, as it would on the shop’s own site. Their processing is covered by the shop’s privacy policy.

An account is optional. If you create one we store your email address, your password (only as a hash), an optional name, your saved favorites and, if you use the Kledra app, the sizes and categories you pick there. We use them to run your account (Art. 6(1)(b) GDPR) and send only the emails it needs, such as the address confirmation.

To delete your account and everything in it, write to hello@kledra.com.

A link to a shop may pass through an affiliate network, which records the click so the shop can credit us a commission. From that point the shop’s and the network’s own privacy policies apply. Networks report commissions to us without your name or contact details.

• Vercel Inc. (USA) hosts the site and delivers every page.
• Supabase Inc. runs accounts and favorites, on servers in Frankfurt, Germany.

Both work under data processing agreements. Where data reaches the USA, the transfer rests on the EU Standard Contractual Clauses.

Account data stays until you delete the account. Server logs are kept by Vercel only as long as needed for delivery and security, then deleted.

You can ask for access to your data, its correction or deletion, a limit on its use, or a copy to take elsewhere, and you can object to processing based on legitimate interest (Art. 15 to 21 GDPR). Write to hello@kledra.com.

You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority where you live.