besparro
Sign inCreate free account

Privacy

Legal

Privacy policy

Version 2026-08-04Last updated: August 2026

01Who are we?

Besparro is a free service for comparing Dutch supermarket prices and splitting your grocery list across stores. The data controller is Besparro (a privately run service) — maintained by a private individual, without a business registration. You can reach us at privacy@besparro.com.

02What data do we collect?

  • Name and email address (at registration, or from your Google account if you sign in with it)
  • Grocery lists and search queries
  • Price alerts, scheduled updates and your watchlist
  • Savings history (completed shopping trips)
  • Notification settings (email address and push preference)
  • Technical data needed to provide the service (session cookie, IP address in server logs)

We never sell your data and never use it for advertising.

03Barcode scanner and camera

The barcode scanner processes the camera image entirely on your device. Camera footage never leaves your phone — only the decoded barcode (the EAN number) is sent to our servers to look up the product.

04Why do we process your data?

  • To give you access to the service and store your lists/alerts (performance of the contract)
  • To send account emails such as email verification and password reset (performance of the contract)
  • To send optional notifications you configure yourself, such as price alerts and weekly digests (consent — can be disabled in your settings)
  • To secure, debug and improve the service (legitimate interest)

05Cookies and analytics

  • Functional cookies — one session cookie to keep you signed in and one preference cookie for your language choice. These require no consent.
  • Analytics — we use Umami, a privacy-friendly, cookie-free analytics tool that we host on our own server (no third party receives any data). It records anonymised usage statistics — pages viewed, searches performed, features used — without cookies, without personal data, and without cross-site tracking; no individual visitors are identified and no profiles are built. Our hosting platform (Cloudflare) additionally shows us aggregated, server-level traffic statistics.
  • We use no tracking or advertising cookies.

06How long do we keep your data?

Your account data is kept for as long as your account is active. If you delete your account, your personal data is removed immediately; backups containing your data are overwritten within 30 days. Server logs are kept for at most 30 days.

07Your rights

Under the GDPR you have the right to access, rectification, erasure, restriction, portability and objection.

You can download your data (JSON) or permanently delete your account yourself via Account → Your data.

For other requests: privacy@besparro.com. If you are unhappy with how we handle your data, you can file a complaint with the Dutch supervisory authority, the Autoriteit Persoonsgegevens.

08Third parties (processors)

  • Resend — transactional emails (verification, password reset, notifications)
  • Cloudflare — website hosting and security (CDN)
  • Google — only if you sign in with your Google account (name and email address)
  • Sentry — error tracking to diagnose technical problems

Our database and application servers are hosted and managed within the EU.

09Changes

We may update this privacy policy. For significant changes we will notify you via the website or by email. The date at the top indicates the latest version.

10Contact

Besparro (a privately run service). Questions about this privacy policy: privacy@besparro.com

Privacy policy | Besparro