Privacy Policy
This page explains which personal information Glossumi processes, for what purpose, on what legal basis and for how long. We've only written down what the website actually does. If anything is unclear, just ask us.
The short version
- Glossumi uses no advertising, analytics or tracking cookies and builds no profiles of you. That's why there's no cookie banner here.
- You don't need an account to read the website, and there are no reader accounts. When you visit, only technical connection data is processed by our hosting provider.
- We count clicks on store links without any data that identifies you: we save which product and which store were clicked, but no IP address, no cookie and no identifier that could recognize you later.
- My List stays in your own browser. Nothing you save there reaches our server.
- There is no newsletter and there are no price alert emails yet. Before we start a newsletter, reader accounts or price alerts, we will update this policy.
- We do not sell or share your personal information, and we do not use it for targeted advertising.
- As soon as you follow a link to a store, the privacy rules of that store and of the affiliate network involved apply there.
1. Who is responsible
Glossumi (glossumi.com) is run by:
Codently Maciej Ziółko
Maciej Ziółko
os. XX-lecia 4 lok. 16
32-340 Wolbrom
Poland
Email: kontakt@glossumi.de
More details are on our Company Information page.
Because we are based in Poland, the EU General Data Protection Regulation (GDPR) applies to everything we do with personal information, wherever you live. That's why this policy names the GDPR legal basis for each kind of processing. Section 13 adds what US state privacy laws ask for.
We haven't appointed a data protection officer, because the law doesn't require us to. You can send any privacy question directly to the address above.
2. Visiting the website and hosting
Provider. Glossumi is hosted by Vercel Inc., 440 N Barranca Avenue #4133, Covina, CA 91723, USA. Vercel delivers the pages through a worldwide server network, usually from a location near you. Our server functions run in Vercel's Frankfurt am Main region (fra1).
What data. When you open a page, your browser automatically sends data without which no website can be delivered:
- IP address,
- date and time of the request,
- the address (URL) requested, including parameters,
- the page you came from (referrer), if your browser sends it,
- browser and operating system (user agent),
- status code and amount of data transferred.
Why. Vercel processes this data to deliver the pages, to fend off attacks and overloads, and to find errors.
The right edition for you. When you open a page, Vercel derives your country from your IP address, and your browser tells us which languages you prefer. We use both only at that moment, to send you to the right edition, for example from glossumi.de to glossumi.com. We don't store either of them for this purpose. Once you've picked an edition yourself in the edition switcher, we no longer redirect you (section 9).
Legal basis. GDPR Art. 6(1)(f). Our legitimate interest is a secure, stable and fast website.
How long. Vercel keeps the request logs we can see, including IP addresses, for at most one day. We only look at them when we need to, for example when an error occurs or an attack is under way, and we don't combine them with other data.
Service provider agreement. We have a data processing agreement with Vercel under GDPR Art. 28. For transfers to the US, see section 10.
3. Database
Our database is run by Neon, LLC, a company of the Databricks group based in the US. The data is stored on Amazon Web Services servers in Frankfurt am Main, Germany (region eu-central-1).
The database holds product and price data that says nothing about you, and the click count from section 5, which contains no data that identifies you. It holds no personal data of readers. My List isn't stored there either; it stays in your browser (section 7).
Neon works on our behalf under its data processing agreement (GDPR Art. 28). Maintenance and support access from the US is possible; see section 10.
4. Fonts and product images
Fonts. All fonts are hosted on our own server. Your browser doesn't connect to font providers such as Google Fonts.
Product images. Where we show product images, our server fetches them from stores and affiliate networks, resizes them and delivers them from our own domain. So your browser loads the images from our server, not from the stores' servers. The stores learn nothing about you when an image is shown.
5. Clicks on store links
What happens. Links to stores other than Amazon go through our redirect (glossumi.com/go/...). It sends you on to the affiliate network's tracking link or straight to the store, and counts the click. For this we save:
- which product, offer or set was clicked,
- which store the link leads to,
- where the button was (for example product page, deals list or set),
- the Glossumi edition (here: United States, English),
- the path of the page where you clicked (for example /deals), without any query string,
- date and time.
What we don't save. For these clicks we save no IP address, no name, no email address, no advertising ID and no user or visit identifier. The redirect sets no cookie. Like every page request, though, it shows up in Vercel's connection logs (section 2).
Amazon. Links to Amazon lead directly to Amazon, and our page doesn't report these clicks to our server. We only see how often links were clicked as totals in the Amazon Associates reports, split by our tracking IDs, never by person.
Why. We want to check our billing with the affiliate programs and stores, and we want to see which places on our pages really help you.
Legal basis. GDPR Art. 6(1)(f). Our legitimate interest is checking our income and improving what we offer. In our assessment, this data doesn't allow anyone to identify you. We still treat it under the rules of this policy.
How long. 24 months. After that we delete the entries or combine them into totals.
6. After the click: affiliate networks and stores
As soon as you leave Glossumi, the privacy rules of the site you land on apply. We have no influence on what networks and stores process there.
Awin. Links to stores in the affiliate network Awin go through Awin. Awin sets cookies on its own domain, or uses similar methods, to recognize that you came from Glossumi and to credit us with a commission if you buy something in the store. This happens outside Glossumi and is the responsibility of Awin and the store. You can read more in Awin's privacy policy.
Amazon. Links to Amazon.com contain our Associates tracking ID. Amazon sets its own cookies on Amazon.com, among other things to credit purchases to that ID. Amazon is responsible for this, as described in the Amazon.com Privacy Notice.
"Add all to cart" for sets. For sets with products from Amazon, we use Amazon's official cart form. When you click, your browser sends the product numbers (ASINs), the quantities and our tracking ID to Amazon. Amazon then shows you your cart, and you decide there whether to order. We don't learn who you are.
What we get back. The affiliate networks report orders to us with date, store, product or order value and commission. We don't receive buyers' names, addresses or contact details.
7. My List
What the feature does. You can save products and sets to My List by tapping the heart.
Where it's stored. My List is stored only in your own browser (local storage, section 9). It's written only when you tap a heart. Nothing you save there is sent to our server, so we can't see your list. There is no account and no sign-in.
Deleting. You can remove entries in My List at any time, or clear the site data for Glossumi in your browser.
There are no price alert emails and no Glossumi Club newsletter yet. Before we start a newsletter, reader accounts or price alerts, we will update this policy.
8. Contacting us by email
When you write to us, we process your email address, your name if you give it, and the content of your message so we can reply.
The legal basis is GDPR Art. 6(1)(b) if your message is about one of our features, otherwise Art. 6(1)(f). Our legitimate interest is answering your questions.
We keep your message until the matter is settled, at the latest for two years, unless the law requires us to keep it longer. Our mailbox is run by an email provider that processes messages on our behalf (GDPR Art. 28).
9. Cookies and storage on your device
Under EU rules, information may only be stored on or read from your device without your consent when that's strictly necessary to provide a feature you've explicitly asked for. Everything Glossumi stores on your device falls into that category:
| What | Why | When | How long |
|---|---|---|---|
Edition cookie glossumi_edition |
Remembers which edition (glossumi.de, .pl, .fr, .com) you picked in the edition switcher, so we don't redirect you to another edition automatically. It can't be read by scripts on the page | Only when you pick an edition yourself in the edition switcher | 1 year |
Team sign-in cookie glossumi_admin_session |
Sign-in to the editorial area | Only for members of our team, never for readers | 14 days or until sign-out |
Local storage glossumi:merkliste |
My List in this browser: which products and sets you saved, plus their name, the link to the Glossumi page and the price when you saved them. These entries don't leave your device | Only when you tap the heart on a product or set | Until you remove the entries or clear the site data in your browser |
The click count from section 5 stores nothing on your device.
Why there's no cookie banner
A cookie banner asks for your consent to cookies and similar technologies that aren't strictly necessary, for example for advertising or profiling. We don't use anything like that when you visit Glossumi, so a banner would have nothing to ask you about. If we ever add something that needs consent, we'll ask you right there, before anything is loaded.
10. Service providers and international transfers
We don't sell data, and we don't pass it on to ad networks or data brokers. These service providers process data on our behalf:
| Service provider | Task | Based in | Safeguard for transfers outside the EU |
|---|---|---|---|
| Vercel Inc. | Hosting, connection logs | USA | EU Commission adequacy decision for the EU-U.S. Data Privacy Framework (GDPR Art. 45), under which Vercel is certified; in addition, the EU Commission's standard contractual clauses (GDPR Art. 46(2)(c)) in the data processing agreement |
| Neon, LLC (Databricks group) | Database, stored in Frankfurt am Main | USA | Adequacy decision for the EU-U.S. Data Privacy Framework; according to Databricks, its certification covers Neon, LLC |
Our mailbox provider also works on our behalf (section 8).
We'll send you a copy of the standard contractual clauses on request.
Awin and Amazon aren't service providers working on our behalf. They process data under their own responsibility, and only once you visit their sites (section 6).
11. How long we keep data
| Data | How long |
|---|---|
| Connection logs at Vercel | At most 1 day |
| Click count | 24 months, then deleted or combined into totals |
| Emails to us | Until the matter is settled, at most two years, unless the law requires us to keep them |
| Edition cookie | 1 year |
| My List | In your browser until you remove the entries or clear the site data |
12. Your rights
You have the right to:
- ask what data we process about you (GDPR Art. 15),
- have wrong data corrected (Art. 16),
- have your data deleted (Art. 17),
- have processing restricted (Art. 18),
- get your data in a common, machine-readable format (Art. 20).
Just write to us at kontakt@glossumi.de. We reply within one month.
We don't make automated decisions about you and don't create profiles within the meaning of GDPR Art. 22.
Your right to object
Where we process data on the basis of GDPR Art. 6(1)(f), you can object at any time on grounds relating to your particular situation (Art. 21(1)). We will then stop processing the data, unless we can show compelling legitimate grounds that override your interests, or the processing serves to establish, exercise or defend legal claims. An email to kontakt@glossumi.de is enough.
13. Notice for US residents
This section is for readers who live in the United States, including California under the California Consumer Privacy Act as amended by the California Privacy Rights Act (CCPA) and other states with similar privacy laws. We honor the rights below for every US resident, whichever state you live in.
We do not sell or share your personal information. We don't sell personal information, and we don't share it for cross-context behavioral advertising, as the CCPA defines these terms. We haven't done so in the past 12 months. We don't use your data for targeted advertising, and we don't use it for profiling that has legal or similarly significant effects on you.
No analytics, no tracking. We use no analytics tools, no tracking pixels and no advertising cookies, and no ad network receives data from Glossumi.
What we collect. In the past 12 months we have collected these categories of personal information:
| Category | What it is at Glossumi | Where it comes from | Why (sections) | Disclosed to |
|---|---|---|---|---|
| Identifiers | IP address in Vercel's connection logs; your email address and name, if you write to us | Your browser; you | 2, 8 | Vercel; our mailbox provider |
| Internet or other electronic network activity | Connection logs: pages requested, referrer, browser and operating system; clicks on store links, counted without any identifier | Your browser | 2, 5 | Vercel; Neon (database) |
| Approximate location | Country derived from your IP address: used only in the moment to send you to the right edition, never saved | Your browser | 2 | Vercel |
We don't collect sensitive personal information.
Your rights. You have the right to:
- know what personal information we have about you and get a copy,
- have it deleted,
- have it corrected,
- opt out of the sale or sharing of personal information, of targeted advertising and of profiling (we do none of these, so there is nothing to opt out of),
- not be treated differently for using these rights.
How to make a request. Write to kontakt@glossumi.de. To protect your data, we may ask for information that lets us confirm the request comes from you. You can also let an authorized agent make the request for you with your written permission. We reply within one month.
Appeals. If we turn down your request, you can appeal by replying to our answer. We'll respond to your appeal within 45 days.
Global Privacy Control. If your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale and sharing. Since we do neither, Glossumi works the same with or without the signal.
California "Shine the Light". We don't disclose personal information to third parties for their own direct marketing purposes.
How long we keep each kind of data is listed in section 11.
14. Children
Glossumi is for adults. It isn't directed at children under 13, and we don't knowingly collect personal information from them. If you believe a child has given us personal information, write to us and we'll delete it.
15. Complaints
If you feel we're not handling your data properly, you can complain to a data protection authority (GDPR Art. 77). We'd be glad, though, if you gave us the chance to sort it out first.
Because we're only established in Poland, our lead supervisory authority is the Polish data protection authority:
Prezes Urzędu Ochrony Danych Osobowych (President of the Personal Data Protection Office)
ul. Stanisława Moniuszki 1A
00-014 Warszawa
Poland
uodo.gov.pl
If you live in the US, you can also contact the attorney general of your state or, in California, the California Privacy Protection Agency.
16. Changes
When the website or the law changes, we update this privacy policy. The version on this page is the one that applies. Before we start a newsletter, reader accounts or price alerts, we will update this policy.
Last updated: October 21, 2026
Last updated: October 21, 2026