Last updated 3 November 2026
Vialo sets no cookies and uses no advertising trackers by default. Browsing the catalogue, the nebula and the deals page needs no account and sends us no personal data. If you press Accept in the cookie banner, one analytics tool (Microsoft Clarity) runs on the site, described below; if you press Decline, it never loads.
Vialo is run by Tomislav Fajerbach, Croatia (see About and contact). Questions or requests about your data: hello@vialo.eu.
Vialo itself sets no cookies; the only cookies are Microsoft Clarity's, and only after you accept (see below). It uses your browser's local storage, only for things you ask for: a star you put on a perfume in the catalogue (key vialo-wishlist), and, if you create an account, your sign-in token and email (keys vialo_token, vialo_email). This data stays on your device and is removed when you sign out or clear site data. Because it is strictly needed for the feature you use, no consent banner is required.
The cookie banner asks once. If you press Accept, Microsoft Clarity (Microsoft Corporation) records how you use our pages: clicks, scrolling, mouse movement and the pages you view, as heatmaps and anonymised session recordings. Text typed into form fields is masked and never recorded. Clarity sets cookies (_clck, _clsk) to recognise your browser across pages. We use it only to find confusing or broken parts of the site.
If you press Decline, nothing from Clarity loads and no cookie is set. Our own visit counting does not use cookies and is not affected. Your choice is kept on your device (key vialo_consent). Legal basis: your consent (GDPR Art. 6(1)(a), and the ePrivacy rules for cookies), which you can withdraw at any time: change your cookie choice. Microsoft acts as our processor and may process data outside the EU under its own safeguards; see Microsoft's privacy statement.
If you create an account we store your email address, a password hash (never the password itself), and the collection, wishlist and wear log you choose to add. We use them only to run the service for you. If you sign in with Google, Google confirms your email address and gives us an account number for your Google account; we store that number to recognise you next time and receive nothing else (no contacts, no Gmail, no posting). Google's sign-in button loads from Google (accounts.google.com) only on the sign-in screens, and Google's own privacy policy applies to what happens there. You can delete your account yourself at any time: open Your universe and choose Delete my account. Your account, collection, wishlist and wear log are removed at once. Signing out ends every session of your account. Price-drop emails are off until you switch them on in Your universe; they are sent at most once a day and every email has an unsubscribe link. To limit abuse we count sign-up and sign-in attempts per IP address and email for a short time; these counters are deleted after at most a day.
On a perfume page you can type your email address and a target price. We store the address, the perfume, the target price and, if you picked one, your country, only for this alert. Nothing else is sent until you tap the confirmation link in the email we send first (double opt-in). When the price drops below your target we send you one email, and every email has an unsubscribe link. When you unsubscribe the whole record, including your address, is deleted. Legal basis: your consent (GDPR Art. 6(1)(a)), which you can withdraw at any time. The address is processed by Resend (Ireland) for sending and by Supabase (Frankfurt) for storage.
Our hosting (Cloudflare for the site, Render and Supabase in Frankfurt for the service and database, Resend in Ireland for the emails you ask for, namely password reset links and, only if you switch them on, price-drop alerts) process your IP address to deliver pages and protect against abuse, as any web host does. Vialo itself keeps only anonymous daily counts of how many requests each part of the service received and how many errors occurred, and of clicks to each shop by country (the country is worked out from your browser's time zone, not stored with anything about you), so we can tell a shop how many visitors we send it. No profile of you is built.
Fonts are loaded from Google Fonts, so your browser contacts Google to fetch them. Bottle photos are served through vialo.eu from the shops' own image servers. When you click a buy link you leave Vialo and the shop's own privacy policy applies; the link carries an affiliate tag so the shop can tell the visit came from Vialo, but it carries no personal data from us.
Under the GDPR you may ask to see, correct, export or delete the data we hold about you, and you may complain to the Croatian data protection authority (AZOP). Email hello@vialo.eu.