1. Who is responsible for LabelLens
LabelLens is published and operated by Paolo Tozzo, legal business number 181336668, Varna, Bulgaria. For data-protection purposes, Paolo Tozzo is the controller of personal data processed through this site.
Privacy questions and requests can be sent to info@paolotozzo.dev.
2. Scope of this notice
This notice covers the public LabelLens comparison website. LabelLens does not currently offer public user accounts, accept payments, sell supplements, or maintain personal health profiles.
Retailers, manufacturers, affiliate networks, and other websites linked from LabelLens operate under their own privacy notices and are responsible for their own processing.
3. Information processed
Site requests and technical information
When you access the site, hosting and security systems process the information needed to deliver and protect it. This can include IP address, request time, requested route, browser and device information, referrer, and diagnostic or security events. LabelLens is hosted by Vercel.
Market preference and recent history
A functional cookie remembers the market you select. Your browser can also store a short list of recently viewed products and comparisons. Recent-history values stay in your browser and are not sent to the LabelLens database. See the Cookie & Storage Notice.
Natural-language searches
Search text is sent to the LabelLens server to translate it into comparison filters. The application does not intentionally write raw search text to its own logs, and its temporary in-memory cache uses a one-way hash instead of the text itself.
If optional AI-assisted parsing is enabled, the text is sent to the OpenAI API solely to classify the requested comparison filters. Requests are configured with store: false. OpenAI states that API inputs are not used to train its models unless the customer opts in, but default abuse-monitoring logs may retain customer content for up to 30 days. If AI parsing is unavailable or disabled, LabelLens uses its deterministic parser.
Web analytics
LabelLens uses Vercel Web Analytics for aggregate page-view statistics. It does not set analytics cookies. Vercel derives a visitor hash from a request and discards it after 24 hours. LabelLens removes every query parameter and URL fragment before an analytics page view is sent, excludes the private administration area, and does not send custom LabelLens events to Vercel.
Email communications
If you email LabelLens, the message, your email address, and any information you include are processed to respond, investigate a correction, handle a privacy request, or maintain an appropriate record of the correspondence.
4. Why information is processed
Depending on the context and applicable law, information is processed to:
- provide the page, search, market, and comparison functions you request;
- maintain site security, diagnose errors, prevent abuse, and protect the service;
- understand aggregate traffic and improve public content and navigation;
- respond to messages, correction reports, and privacy requests; and
- comply with legal obligations and establish or defend legal claims.
Where the GDPR applies, the usual legal bases are legitimate interests in operating, securing, and improving a small public information service; taking steps you request when you contact or use the service; and compliance with legal obligations. LabelLens does not use search text for advertising or to build health profiles.
5. Service providers and other recipients
| Recipient | Purpose | Information involved |
|---|---|---|
| Vercel | Hosting, delivery, security, runtime logs, and cookieless Web Analytics | Requests, technical metadata, and redacted page-view data |
| Supabase | Hosted PostgreSQL database for the product catalog and administration | Catalog data and necessary service metadata; no public visitor profile |
| OpenAI, when enabled | Optional classification of natural-language searches | The search text and technical API metadata |
| Email and infrastructure providers | Receive and deliver messages and operate the business service | Email address, message, and related metadata |
| Authorities or professional advisers | Legal compliance, safety, or the establishment and defense of claims | Only information reasonably necessary for that purpose |
Opening a retailer or source link sends a request directly to that third party. The third party may receive your IP address, browser information, referring origin, and any data you provide there.
6. International processing
LabelLens is operated from Bulgaria and uses providers that may process data in the European Economic Area, the United States, and other locations. Where required, transfers are handled using the provider's contractual and legal transfer mechanisms, such as standard contractual clauses or another lawful safeguard.
7. Retention
- The market preference cookie expires after 180 days unless you delete it sooner.
- Recent products and comparisons remain in your browser until you clear site data.
- Vercel's visitor-identification hash expires after 24 hours; the current Hobby analytics reporting window is one month.
- When OpenAI parsing is enabled, requests use
store: false; OpenAI documents default abuse-monitoring retention of up to 30 days. - Email and correction records are kept only as long as reasonably needed to respond, document the resolution, meet legal obligations, or protect legal rights.
- Security and infrastructure logs follow the relevant provider settings and are retained only for operational, security, or legal needs.
8. Your privacy rights
Depending on where you live, you may have rights to be informed, access personal data, correct it, request deletion or restriction, object to certain processing, receive portable data, or withdraw consent where consent is the basis used. These rights can be subject to legal exceptions.
Send requests to info@paolotozzo.dev. Enough information may be requested to verify the request without collecting unnecessary data. If you are in the EEA, you may also complain to your local supervisory authority or Bulgaria's Commission for Personal Data Protection.
9. Security and changes
LabelLens uses access controls, restricted database roles, encrypted connections, and provider security features appropriate to a small public service. No internet service can guarantee absolute security.
This notice will be updated when the service, vendors, or legal requirements materially change. The effective date at the top identifies the published version.