Skip to policy

Petlogica Privacy and Cookies Policy

Effective date:

Welcome to the Petlogica Privacy Statement. This is where we describe how we handle your “Personal Data”, which is information that is directly linked or can be linked to you. It applies to the Personal Data that Petlogica Sp. z o.o. processes as the “Data Controller” when you interact with websites, applications, and services that display this Statement (collectively, “Services”). This Statement does not apply to services or products that do not display this Statement.

1. Who we are

The controller of personal data processed in connection with petlogica.com is Petlogica Sp. z o.o., with its registered office at ul. Ostrobramska 101 / Biuro1, 04-041 Warsaw, Poland; KRS: 0001234692, NIP: 1133199691, REGON: 544482489 ("Petlogica", "we", "us").

For privacy questions and requests concerning your personal data, email privacy@petlogica.com or write to our registered office.

This policy covers petlogica.com and its subdomains, including registration and sign-in through Clerk. Other services operated by our organisation may have separate privacy notices.

2. What information we use

We process the following information, depending on how you use the site:

  • Account and authentication data: your email address, Clerk user identifier, email-verification information and session information. Depending on the sign-in method and fields you use, this may also include your name and profile image. If you choose a social sign-in provider, we receive the information that provider makes available for the sign-in method. Clerk handles authentication, including passwords where password sign-in is enabled.
  • Your selections: identifiers of products you add to favourites or comparisons. The site's current favourites and comparison lists are stored in your browser's local storage.
  • Technical and security information: IP address, request time, requested route, response status, request identifiers and diagnostic information needed to operate and protect the site. Our hosting and authentication providers also process technical information necessary to deliver their services.
  • Analytics information: We use analytics tools (PostHog) to understand how visitors use our site and to improve its content and functionality. We collect information about page visits and interactions with site features, such as clicks, scrolls, input interactions, network requests, product searches, comparisons and clicks on retailer offers. This may include product identifiers, browser and device information, referring-page information, timestamps and analytics identifiers. Without your consent, we use cookieless measurement that does not store analytics data on your device. If you consent, we also use analytics cookies to recognise returning visitors.
  • Correspondence: your email address, message and any information you choose to send when you contact us or subscribe to updates.

The information required for registration and sign-in is necessary to provide an account. Without it, we cannot create or authenticate your account. Consent to analytics cookies is optional: refusing it does not prevent registration or sign-in.

3. Why we use your information

PurposeLegal basis under the GDPR
Create and operate your account, authenticate you and provide requested account functionsPerformance of our contract with you, Article 6(1)(b)
Operate, secure and diagnose the site, prevent abuse and protect accountsOur legitimate interests in providing a reliable and secure service, Article 6(1)(f)
Respond to enquiries and handle correspondenceOur legitimate interests in answering requests and managing communications, Article 6(1)(f); Article 6(1)(b) where the request concerns providing our service to you
Measure use of the site without analytics cookies or browser storage (PostHog)Our legitimate interests in understanding and improving the site, Article 6(1)(f)
Measure use of the site with analytics cookies (PostHog)Your consent, Article 6(1)(a)
Meet applicable legal obligationsCompliance with a legal obligation, Article 6(1)(c), where such an obligation applies
Establish, exercise or defend legal claimsOur legitimate interests in protecting our legal rights, Article 6(1)(f)

Storage of, or access to, information on your device is also subject to Article 399 of the Polish Electronic Communications Law. We seek consent for optional analytics storage and access. The necessary-service exception applies only where the operation is necessary to transmit a communication or provide a service you request.

4. Data recipients

We use technical service providers to operate the site. Depending on the processing concerned, these include:

  • Clerk, Inc. for account registration, authentication and session management.
  • Cloudflare, Inc. for website hosting, delivery, traffic protection and operational logs.
  • PostHog, Inc. for cookieless analytics and, with your consent, cookie-based analytics.
  • Amazon Web Services and MongoDB Atlas for backend infrastructure and application storage, to the extent that the relevant service processes your personal data.
  • Grafana Labs for operational monitoring and logs.
  • Google Workspace for our business email provider when you contact us, and professional advisers or public authorities where disclosure is necessary and legally justified.

When you follow an offer to a retailer, you leave our site. The retailer processes information under its own privacy notice. Your browser may disclose technical information, including your IP address, when it connects to that retailer.

5. Sharing your personal information

We share personal information with service providers where necessary to operate our website and provide its features. These include providers of hosting and infrastructure, account registration and authentication, email services, security and operational monitoring, and analytics as described above.

We may also disclose personal information where required by law or where necessary to establish, exercise or defend legal claims.

Some of our service providers may process your personal information outside the European Economic Area. Where a transfer is not covered by an applicable European Commission adequacy decision, we use appropriate safeguards, such as the European Commission’s Standard Contractual Clauses, together with any supplementary measures required by applicable data protection law.

6. Security and data retention

We have implemented appropriate technical, physical, and organizational security measures to protect your personal data against unauthorized or accidental destruction, alteration, disclosure, misuse, damage, theft, or unauthorized access.

We retain personal information only for as long as needed to provide our Services, fulfil the purposes described in this policy and comply with applicable law.

When we no longer need your personal information, we take reasonable steps to delete it from our systems and records or anonymise it so that it no longer identifies you.

Storage duration metrics shift depending on the service engaged.

7. Cookies and browser storage

A cookie is a small simple file that is sent along with pages of this website and stored by your browser on the hard drive of your computer or another device. The information stored therein may be returned to our servers or to the servers of the relevant third parties during a subsequent visit.

Local storage and session storage are other ways of storing information on your device. Local storage has no automatic browser expiry; session storage normally lasts for the tab's page session. Browsers may remove storage earlier, and session restoration may affect when session cookies are removed.

Strictly Necessary

Required for the site to work. These cannot be switched off.

We use local storage and session storage to support application features, such as remembering your product selections, favourites and comparisons. Local storage has no automatic expiry and remains until it is removed by you, the application or your browser. Session storage is normally cleared when you close the browser tab.

CookieProviderRetention periodPurpose
pl_cookie_consentPetlogica180 daysStores your cookie consent preference locally in the browser.
__sessionPetlogica / Clerk60 secondsCarries the session token used to authenticate requests.
__clientClerkSession / 7 daysMaintains the browser's authentication client and supports issuing or refreshing session tokens.
__clerk_db_jwtPetlogica/ ClerkSession / 7 daysStores the session JWT used by the Clerk authentication SDK.
__client_uatClerkSession / 7 daysIndicates an update to authentication-client state and supports checking or synchronising sign-in state.
__refresh_*Petlogica / ClerkPersistentRefresh token used to renew the authentication session without re-login.
__clerk_handshakeClerkSession (short-lived)Used by Clerk for cross-origin authentication handshakes.
cf_clearanceCloudflareSessionVerifies the visitor passed a Cloudflare challenge
__cf_bmCloudflare30 minutesCloudflare's bot protection.
_cfuvidCloudflareSessionBot protection and rate limiting.
NEXT_LOCALEPetlogica1 yearRemembers the selected language when needed for locale detection.

Analytics

We use PostHog to understand how visitors use our site. Without consent, it runs in cookieless mode without storing analytics data on your device. The analytics cookies listed below are set only if you consent.

CookieProviderRetention periodPurpose
ph_* (e.g. ph_<project_key>_posthog)Petlogica / PostHog1 yearStores a unique visitor ID and session information used to produce aggregate analytics on product and website usage.

Changing your choice

Use "Cookie preferences" on the bottom of the page to accept, reject or withdraw consent to analytics cookies at any time. If you reject or withdraw consent, PostHog uses cookieless mode. Withdrawal stops cookie-based analytics and removes consent-dependent analytics identifiers from your browser storage. It does not affect the lawfulness of processing carried out before withdrawal. You can also contact us to exercise your data-protection rights.

You can remove cookies and other site storage through your browser settings. Removing necessary authentication cookies may sign you out; clearing local or session storage might affect Services functionality. Removing the consent preference may cause the site to ask for your choice again.

8. Your rights

Subject to the conditions in the GDPR, you may request access to your personal data, correction, erasure, restriction of processing and portability. Where processing is based on our legitimate interests, you may object on grounds relating to your particular situation.

You can also complain to a data protection authority, including Poland’s Personal Data Protection Office (UODO).

Where we rely on consent, you may withdraw it at any time. Refusing or withdrawing consent to analytics cookies does not prevent you from using your account.

Send requests, including requests to close an account, to privacy@petlogica.com. We may ask for information reasonably needed to verify your identity. We normally respond within one month. If a permitted extension is needed because of the complexity or number of requests, we will inform you within that month and explain the reason.

The site's product scores concern pet foods. We do not use those scores to make automated decisions about you that produce legal or similarly significant effects.

9. Changes to this policy

We may update this Cookie Policy when we add new services or cookies. The “Last updated” date at the top of this page reflects the most recent revision. Material changes will be communicated through the cookie banner.