Privacy policy

The controller is EAL ENTERPRISES S.R.L., Drumul Negru nr. 10, Voluntari, Ilfov, Romania. For anything about your data, write to [email protected].

You can use Kledra without an account. To deliver each page and keep the site secure, our host Hetzner and Cloudflare, which carries the traffic, process your IP address, the page requested, the time and your browser’s user agent. The legal basis is our legitimate interest in running a working, secure site (Art. 6(1)(f) GDPR).

We run no third-party analytics, no advertising and no tracking pixels.

Kledra sets no cookies. Your browser’s local storage keeps:

• your favorites, so they are still there next time
• a note that you have seen the prompt to save them to an account
• your session, if you sign in

All of it stays on your device, serves only features you use, and is gone when you clear your browser’s site data.

Product photos load directly from the shop’s image servers, for AliExpress from Alibaba’s content network. When a photo appears, your browser sends those servers your IP address, as it would on the shop’s own site. Their processing is covered by the shop’s privacy policy.

An account is optional. If you create one we store your email address, your password (only as a hash), an optional name, your saved favorites and, if you use the Kledra app, the sizes and categories you pick there. We use them to run your account (Art. 6(1)(b) GDPR) and send only the emails it needs.

To delete your account and everything in it, open the app, go to Favorites, tap Account, then Delete my account. You can also write to [email protected].

When you tap through to a shop from a product page, we record which piece it was, the time, and whether it came from the site or the app. If you are signed in, the record also carries your account, and that link is removed when you delete the account. The legal basis is our legitimate interest in seeing which pieces and shops people go to (Art. 6(1)(f) GDPR).

A link to a shop may pass through an affiliate network, which records the click so the shop can credit us a commission. From that point the shop’s and the network’s own privacy policies apply. Networks report commissions to us without your name or contact details.

• Hetzner Online GmbH hosts the site, accounts and favorites, on servers in Germany.
• Cloudflare, Inc. (USA) carries traffic between you and those servers.

Both work under data processing agreements. Where data reaches the USA, the transfer rests on the EU Standard Contractual Clauses.

Account data stays until you delete the account. Server logs are kept only as long as needed for delivery and security, then deleted.

You can ask for access to your data, its correction or deletion, a limit on its use, or a copy to take elsewhere, and you can object to processing based on legitimate interest (Art. 15 to 21 GDPR). Write to [email protected].

You can also complain to the Romanian data protection authority, ANSPDCP (dataprotection.ro), or to the authority where you live.