Privacy notice — what we record when you search (Art. 13 GDPR)
What we record. When you search for a company on clacta.com, clacta.com/sample or in your Clacta account, we record what you typed or picked, the time, which search box you used, and whether we found the company. If you are signed in, we also record your user account. If you are not signed in, we record a code derived from your IP address that changes every day. The key that makes the code is destroyed a few minutes after midnight UTC, and our server does not keep your IP address with your searches, so from then on the code can no longer be traced back to your address; we set no cookie for this. If you sign up or sign in during a visit, the searches you made on that visit, on the device you signed up or signed in with, are attached to your account. We use them to help with your request and to see which searches lead to sign-ups. Your searches from other visits stay unlinked. When you look up a model number in the EU safety-alert check, we record the model number you typed, the time, which box you used, whether an alert matched, and the same daily code; for these look-ups we do not record your user account, even when you are signed in.
If you opened Clacta from a printed code. If you opened this page from a printed code (for example on a fan at a trade fair), the address carries that code. It tells us which batch of printed material the visit came from; on the fans, each code is the batch one promoter handed out. It does not identify you. If you sign up on that visit, your account keeps the code, and so do the searches attached to it, so we can see which hand-outs lead to sign-ups. The code stays with your account until you delete the account. For that visit we record the code, the time, your country and network operator (looked up from your IP address on our own server; we do not store the address), your browser's language, and your device type and model as your browser reports them. We count visits per code, to learn which places and hand-outs brought visits. Nothing is calculated from your device. Legal basis: our legitimate interest in knowing which of our hand-outs work (Art. 6(1)(f) GDPR). We set no cookie. On 18 November 2026 we turn these visits into counts (code, country, language and day) and delete the individual visits. Searches you make on that visit are recorded as described above, together with the code.
Why. To decide which supplier reports to create or update first, which pages to improve, and which product checks to offer. Legal basis: our legitimate interest in running and improving Clacta (Art. 6(1)(f) GDPR).
Who else processes it. Supabase (database, EU). Company searches we could not answer are checked once by an AI model run by Amazon Web Services in Frankfurt (EU), which only sees the text you typed and the names of suppliers from our own library. Model numbers are not sent to it.
How long. 90 days. After that we keep only counts per company and per page, with nothing about who searched.
Your rights. If you are signed in, you can ask us to delete your search history at any time, at the contact address in our main privacy policy; deleting your account deletes it too. Model-number look-ups are not linked to your account, so we cannot pick them out as yours; they are deleted after 90 days like every search. Your other rights and the supervisory authority: see our main privacy policy.
Version search-log-notice-2026-10-20-j · Main privacy policy.