Privacy policy

Data controller

Controller

ZERO1 MEDIA SL

VAT / NIF

ESB70826946

Registered office

C/ Valencia 74, 4-4, 08015 Barcelona, Spain

Privacy contact

info@ultimatetools.eu

No Data Protection Officer has been appointed: the processing described below does not meet the thresholds in article 37 of the GDPR.

What we collect

• Technical data. Our hosting provider records the usual server information for every request — IP address, browser and device type, the page requested, the approximate region it came from. This is what keeps the site up and lets us see an attack when it happens.
• Account data. Only if you create an account: your email address and a password, which is stored hashed and is never readable by us. Accounts are optional and the directory is fully usable without one.
• What you write to us. If you send an email, we keep it and our reply.

Usage statistics, only if you accept. With your consent, Google Analytics records which pages you view, roughly where from (country and city, derived from your IP address, which Google does not store), the device and browser, and the site that sent you. There is no advertising tracking on this site.

Visit counts from our hosting platform. Lovable records each page view with the address, the referring page, your browser, its language and a country guessed from your time zone, tied to a session identifier that expires after 30 minutes. This runs without consent, as part of how the site is served.

We do not collect special categories of data, and this site is not directed at children under 14.

Why we process it, and on what legal basis

• To run and protect the site — legitimate interest, article 6(1)(f). Serving pages, keeping them fast, blocking abuse, counting visits in aggregate.
• To provide an account — performance of a contract, article 6(1)(b), for the account you asked for.
• To answer you — legitimate interest, article 6(1)(f), in replying to someone who wrote to us.
• To measure which pages are useful — consent, article 6(1)(a), asked for by the banner beforehand and withdrawable at any time.

Affiliate links, and what happens when you click one

Some outbound links are affiliate links. Following one sends you to the vendor, sometimes through an affiliate network, and that destination may set its own cookies under its own privacy policy — we do not control them and cannot read them. What comes back to us is an aggregate report: how many sales a link produced, never who you are or what you bought. The full arrangement is in the affiliate disclosure.

The newsletter and the deals site

Our newsletter and our deals site run on separate platforms with their own privacy policies. Subscribing happens there, not here: this site never receives your email address for that purpose.

Who we share data with

These providers process data on our behalf, under contract, and only on our instructions:

• Cloudflare — hosting, content delivery and protection against attacks.
• Supabase — the database behind the catalogue, and the authentication service for accounts.
• Lovable — the platform that builds, deploys and serves the site, including its visit counter.
• Google Ireland Limited — Google Analytics, only if you accepted it, with advertising features switched off.

We do not sell personal data, and we do not share it for anyone else's marketing.

Transfers outside the European Economic Area

Some of those providers are based in the United States or use infrastructure there. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or otherwise on the European Commission's Standard Contractual Clauses together with the supplementary measures those clauses require.

How long we keep it

• Server logs: normally no more than 30 days.
• Google Analytics data: 14 months, then deleted automatically.
• Account data: until you delete the account, and then removed.
• Correspondence: as long as the matter is open, and afterwards for as long as we may need it to defend a claim.

Your rights

You can ask for access (art. 15), correction (art. 16), erasure (art. 17), restriction (art. 18) or portability (art. 20) of your data, and you can object to processing based on legitimate interest (art. 21). Where processing rests on consent, you can withdraw it at any time (art. 7(3)) without affecting what was done before.

Write to info@ultimatetools.eu. We answer within one month. If you think we have handled your data badly you can also complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or to the supervisory authority where you live.

Cookies

Strictly necessary cookies and the hosting platform's 30-minute visit counter are set without asking; Google Analytics cookies only after you accept them in the banner. The detail is on the cookie policy.

Changes to this policy

When what we do with data changes, this page changes with it, and the revision date at the top moves. Material changes to processing that relies on your consent will be asked for again rather than announced quietly here.