Privacy policy
This directory runs on very little personal data. Here is exactly what it holds, why, and how to get rid of it.
Last updated: 24 September 2026
Data controller
- Controller
- ZERO1 MEDIA SL
- VAT / NIF
- ESB70826946
- Registered office
- C/ Valencia 74, 4-4, 08015 Barcelona, Spain
- Privacy contact
- info@ultimatetools.eu
No Data Protection Officer has been appointed: the processing described below does not meet the thresholds in article 37 of the GDPR.
What we collect
- Technical data. Our hosting provider records the usual server information for every request — IP address, browser and device type, the page requested, the approximate region it came from. This is what keeps the site up and lets us see an attack when it happens.
- Account data. Only if you create an account: your email address and a password, which is stored hashed and is never readable by us. Accounts are optional and the directory is fully usable without one.
- What you write to us. If you send an email, we keep it and our reply.
There is no analytics and no advertising tracking on this site today. If that changes, we will ask for your consent first and this page will say so before any such cookie is set.
We do not collect special categories of data, and this site is not directed at children under 14.
Why we process it, and on what legal basis
- To run and protect the site — legitimate interest, article 6(1)(f). Serving pages, keeping them fast, blocking abuse.
- To provide an account — performance of a contract, article 6(1)(b), for the account you asked for.
- To answer you — legitimate interest, article 6(1)(f), in replying to someone who wrote to us.
- Analytics, if we ever add it — consent, article 6(1)(a), asked for beforehand and withdrawable at any time.
Affiliate links, and what happens when you click one
Some outbound links are affiliate links. Following one sends you to the vendor, sometimes through an affiliate network, and that destination may set its own cookies under its own privacy policy — we do not control them and cannot read them. What comes back to us is an aggregate report: how many sales a link produced, never who you are or what you bought. The full arrangement is in the affiliate disclosure.
The newsletter and the deals site
Our newsletter and our deals site run on separate platforms with their own privacy policies. Subscribing happens there, not here: this site never receives your email address for that purpose.
Who we share data with
These providers process data on our behalf, under contract, and only on our instructions:
- Cloudflare — hosting, content delivery and protection against attacks.
- Supabase — the database behind the catalogue, and the authentication service for accounts.
- Lovable — the platform that builds and deploys the site.
We do not sell personal data, and we do not share it for anyone else's marketing.
Transfers outside the European Economic Area
Some of those providers are based in the United States or use infrastructure there. Transfers rely on the EU–US Data Privacy Framework where the provider is certified, or otherwise on the European Commission's Standard Contractual Clauses together with the supplementary measures those clauses require.
How long we keep it
- Server logs: normally no more than 30 days.
- Account data: until you delete the account, and then removed.
- Correspondence: as long as the matter is open, and afterwards for as long as we may need it to defend a claim.
Your rights
You can ask for access (art. 15), correction (art. 16), erasure (art. 17), restriction (art. 18) or portability (art. 20) of your data, and you can object to processing based on legitimate interest (art. 21). Where processing rests on consent, you can withdraw it at any time (art. 7(3)) without affecting what was done before.
Write to info@ultimatetools.eu. We answer within one month. If you think we have handled your data badly you can also complain to the Spanish Data Protection Agency (Agencia Española de Protección de Datos, aepd.es) or to the supervisory authority where you live.
Cookies
Only strictly necessary cookies are set today, and no consent is required for those. The detail is on the cookie policy.
Changes to this policy
When what we do with data changes, this page changes with it, and the revision date at the top moves. Material changes to processing that relies on your consent will be asked for again rather than announced quietly here.
