Privacy Policy

ProductSafer (productsafer.com) summarises published research and official recall notices about everyday products, offers free consumer safety tools, and sells optional paid plans and business services.

We are the controller of the personal data described here. Contact: admin@productsafer.com.

• Newsletter: your email address and topic choices, to send our weekly digest (or instant alerts if you choose them) and a short series of welcome emails. Basis: consent.
• Your account, if you create one: email address, sign-in sessions, plan, saved products, household or group members, alerts and push-notification settings. Basis: contract (to provide the account you asked for).
• Health information you save: some tools let you record allergens, diet preferences, glucose readings, medications, reactions or exposure logs. By default this stays on your device. If you have a Family or Pro account and you agree, it is also synced to your account so it is available on your other devices. This is special category (health) data, so we only store it with your explicit consent, which we ask for before anything is synced. You can withdraw it on your account page at any time, which deletes the synced copies. Basis: explicit consent (UK GDPR Article 9(2)(a)).
• Tools: label photos, ingredient lists and barcodes you submit are sent to our AI provider (Anthropic) and, for barcodes, Open Food Facts, only to produce your result. We do not keep the photos, and we do not use any of this to identify you. We log which barcodes were looked up (without who looked them up) to improve coverage.
• Payments: if you buy a plan or business service, Stripe processes your card; we never see your card number. We receive your name, email, billing country and payment status, and keep payment records for 6 years for tax purposes. Basis: contract and legal obligation.
• Business customers: contact name, email, company, and the brands, products and categories you ask us to monitor. Basis: contract.
• Things you send us: comments (with the name you give), story tips, corrections, product reports and data requests. Basis: legitimate interests in running and correcting the site.
• Security and usage: your IP address is used briefly to limit abuse (rate limiting). Vercel Analytics measures visits without cookies. If an error happens in your browser, our error monitoring (Sentry) receives a technical report and may keep a short recording of the page with all text, inputs and images hidden. Basis: legitimate interests in keeping the site secure and working.

Essential: ps_session keeps you signed in (30 days), and your cookie choice is stored on your device.

Optional, only if you click “Accept cookies”: Google Analytics (_ga, _ga_*, up to 2 years) to measure visits, and Google AdSense (for example __gads, up to 13 months) to show ads, which may be based on your visits to other sites. You can opt out of personalised ads at google.com/settings/ads. Change your choice any time with “Cookie settings” at the bottom of every page.

We use these service providers, who act only on our instructions: Vercel (hosting, USA), Neon (database, AWS in the USA), Stripe (payments), Resend (email), Anthropic (AI analysis, USA), Upstash (abuse prevention), Sentry (error monitoring, EU), Open Food Facts (barcode lookups; only the barcode is sent) and, if you accept cookies, Google (Analytics and AdSense). Where data is transferred outside the UK, we rely on the UK–US Data Bridge or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

We never sell or rent your personal data.

• Newsletter: while you are subscribed. When you unsubscribe we delete your subscription straight away, and keep your email address on an unsubscribe list so we don't email you again by mistake.
• Account and saved data: until you delete your account, which you can do instantly from your account page.
• Payment records: 6 years, as tax law requires.
• Email delivery logs and technical logs: kept for troubleshooting and then deleted.

Under UK data protection law you can:

• access the data we hold about you
• correct inaccurate data
• ask us to delete your data
• restrict or object to our use of it, including where we rely on legitimate interests
• receive your data in a portable format
• withdraw consent at any time (the unsubscribe link in every email, or “Cookie settings” for cookies)
• complain to the Information Commissioner's Office (ico.org.uk)

If you have an account, you can delete it instantly from your account page. Otherwise use our data request form; we confirm the request by email and complete it within one month. You can also email admin@productsafer.com. When you delete your account, records we must keep for tax are kept for 6 years.

If we make significant changes, we will tell you by email or with a notice on the site before they take effect. The date at the top shows the latest version.