Legal
Privacy Policy
What we collect, why we collect it, and how to have it removed. Short, because there is not much of it.
Last updated 5 August 2026
Who is responsible
EANmatch, CVR DK-39223090, Hesteskoen 9, 9480 Løkken, Denmark, is the data controller for this website and for the services described on it.
Questions about your data: info@eanmatch.com.
What this website collects on its own
Nothing. There is no analytics, no advertising, no tracking cookies and no third party scripts. Your colour theme preference is stored in your own browser and never leaves it.
Our host, Cloudflare, processes standard server request data such as your IP address in order to serve the page and to protect the site from attacks. We do not build profiles from it.
When you use the contact form
We receive what you type: your name, email address and message. We use it to reply to you, and for nothing else.
The form is protected by Cloudflare Turnstile, which checks that the submission is not automated. The message is delivered to us by email through Resend.
We keep correspondence for as long as it is useful for support and for our accounting obligations, then delete it.
When you buy something
Payments are handled entirely by Revolut. We never see or store your card details.
We receive confirmation that a payment succeeded, along with the name and email needed to deliver your purchase and to issue an invoice. Danish bookkeeping law requires us to retain accounting records for five years.
When you send us barcodes for research
We use the EAN list you send to query the official eMAG Marketplace API, and we return the results to you. The list is your commercial information: we do not sell it, share it or use it to build a database for anyone else.
If you choose to connect your own eMAG seller credentials so that we can answer category access and offer status for your account, those credentials are encrypted and used solely to make requests on your behalf. You can ask us to delete them at any time.
Who else sees your data
Only the services needed to run this: Cloudflare for hosting and spam protection, Resend for email delivery, Revolut for payments, and eMAG when we run the research you asked for.
We do not sell personal data, and we do not share it for advertising.
Your rights
Under GDPR you can ask for a copy of your data, ask us to correct or delete it, object to how we use it, or ask us to restrict it. Write to us and we will act without undue delay.
You may also complain to Datatilsynet, the Danish Data Protection Agency.