Privacy Policy

Last updated: August 2026

Who processes your data

Data controller: Foto Gino, reachable at [email protected].

What data we collect

Crossave requires no sign-up: you have no account, and we store no name, email or password. When you use the search form:

• Your search query (e.g. "Vasco Rossi vinyl") is sent to the services that look up prices (SerpAPI, eBay, serper.dev and, where enabled, Anthropic's AI analysis) in order to return your results. It is not linked to your identity, nor used to recognise you on later visits.
• Aggregate, anonymous statistics — to understand what works and improve the service, we keep statistical data about searches: the text searched, the category, the destination country, whether any results came back, which source/market turns out cheapest and which result was clicked. This data contains no IP address, no identifier and no cookie, and does not allow anyone to trace you or to link different searches by the same visitor: we do not profile individuals. Legal basis: legitimate interest in improving and protecting the service (Art. 6(1)(f) GDPR).
• Reports of wrong results — if you use the "report: not relevant" button on a result, we store the search, the reported result and a one-way hash of your IP address (an irreversible token, not the IP in clear text). It serves one purpose only: preventing the same person from counting more than once, and allowing a result reported by several different users to be hidden automatically. It is not an identifier that recognises you across visits, nor is it used to profile you. Legal basis: legitimate interest in keeping results correct and preventing abuse of the mechanism (Art. 6(1)(f) GDPR).
• Counting popular searches — to decide which searches deserve a public comparison page (e.g. the latest deals or the "/cerca/" pages), we count how many distinct visitors searched for the same thing, using the same one-way IP hash described above (an irreversible token, not the IP in clear text). It only prevents counting the same person twice; it does not recognise you across visits, nor is it used to profile you. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
• Your photo, if you use photo search — the image you upload is sent to Anthropic (Claude), the AI provider that reads it, for the sole purpose of deriving the search text we then propose to you. We do not store it: it is processed in memory and discarded right after being read, it does not end up in any archive or in our logs — our technical records keep only the outcome ("recognised / not recognised" and the category), never the image and never the text read from it. If you then confirm the search, that text follows the same rules as any other query described above. We do recommend photographing the product, not people. Legal basis: performance of the service you request by uploading the photo (Art. 6(1)(b) GDPR).
• Server technical logs (IP address, browser type, date/time of the request) — collected automatically by any website for security and troubleshooting, kept for a limited period and held separately from the anonymous statistics above.
• Cookies and advertising — see the Cookie Policy for detail. The site carries Google AdSense advertising, which sets third-party cookies: the "Advertising" section below explains what that involves and how to turn off personalised ads.

Why we process this data

To run the price comparison service you asked for (legitimate interest / performance of the service). Non-essential cookies — advertising and analytics — are set only on the basis of your explicit consent, collected through the cookie banner (Art. 6(1)(a) GDPR): you may refuse it, and price comparison works just the same.

Advertising: Google AdSense and third-party cookies

Crossave is funded by affiliate commissions from the shops and by Google AdSense advertising, which is live on the site. Specifically:

• Google, as a third-party vendor, uses cookies to serve ads. Google's use of its advertising cookie enables Google and its partners to serve you ads based on your visits to this site and to other sites.
• What Google receives, in full: the advertising code receives the address of the page you are viewing and the data your browser sends to any site it loads (IP address, browser type). On comparison pages that address contains the product searched for: if you are viewing a comparison page, Google can infer its subject. We provide nothing else: you have no account with us, we do not have your email, and we do not pass on your search history.
• You can say no. You can turn off personalised advertising in Google's ad settings, or opt out of several vendors at once at youronlinechoices.eu. On this site you can refuse non-essential cookies from the banner: ads may still appear, but they will not be personalised.
• How Google uses data when you use a site that relies on its services: policies.google.com/technologies/partner-sites.

Legal basis: your consent, collected through the cookie banner (Art. 6(1)(a) GDPR).

Who we share data with

Your search query is sent to the technical providers that make price comparison possible: SerpAPI, eBay, serper.dev, pokemontcg.io, TCGdex, CardTrader, Scryfall, Discogs, Google Books and, where configured, Anthropic (Claude) for the "is this really the product searched for?" check and for reading photos in photo search. To these is added Google (AdSense), on the terms described in the "Advertising" section above. We neither sell nor share your data with third parties for marketing purposes.

Your rights

Under the General Data Protection Regulation (GDPR) you have the right to request access to, rectification, erasure or portability of your data, and to object to processing — write to us at [email protected]. You also have the right to lodge a complaint with the Italian data protection authority (garanteprivacy.it) or with the supervisory authority of your country of residence.

Changes to this policy

We may update this page over time, for example when we enable new services (advertising, analytics). The "last updated" date at the top always reflects the most recent version.

August 2026 — we added photo search and, together with it, the entry above that covers it: what happens to the image you upload, who it is sent to in order to be read, and why we do not keep it.

13 August 2026 — we added the "Advertising" section: it declares Google AdSense and third-party cookies, states in full what Google's code receives — including the fact that a comparison page's address contains the product searched for — and how to refuse personalised ads. It is written before advertising goes live, not after.