Privacy Policy

Last updated: July 3, 2026

This Privacy Policy explains how Pinko obrt (“we”, “us”, “our”), operator of the website Varel.io (“Varel”, the “Service”), collects, uses, stores, shares and protects personal information. We are the data controller for the personal data described here.

Contact: Zamlačka 28A, 10410 Velika Mlaka, Croatia · VAT ID HR12438213362 · Email matija@pinko.hr. For any privacy or data-protection question, contact us at matija@pinko.hr.

1. Information we collect

• Information you provide: your email address when you subscribe to our newsletter; any details you send us by email or through contact forms.
• Usage and analytics data: pages viewed, searches performed, tools and comparisons opened, prompts copied, language selected, approximate country, device type and browser. We collect this through Google Analytics, Google Tag Manager and our own internal analytics events.
• Affiliate click data: when you click an outbound affiliate link, we record the click (including a non-reversible hashed identifier, approximate country, device and referring page). We do not store your raw IP address.
• Technical data: data automatically processed by our hosting and security systems, such as request metadata, for the purposes of delivering and protecting the Service.
• Administrator uploads: if you are an authorised administrator, images and files you upload are processed and stored via our media storage provider.

2. How and why we use your information (legal bases)

Under the EU General Data Protection Regulation (GDPR) and, where applicable, the UK GDPR, we rely on the following legal bases:

• Consent — for non-essential cookies, analytics and marketing/advertising technologies, and for sending you our newsletter.
• Legitimate interests — for operating, securing and improving the Service, understanding aggregate usage, and measuring affiliate performance, balanced against your rights.
• Legal obligation — where we must retain or disclose data to comply with law.

3. Cookies and consent

We use cookies and similar technologies as described in our Cookie Policy. Where required (for example for visitors in the EU, EEA and UK), analytics and marketing technologies, including Google Analytics and Google Tag Manager, load only after you have given consent through our cookie banner. You can change or withdraw your consent at any time via “Cookie Settings” in the footer. We aim to respect browser-level signals such as Global Privacy Control (GPC) where feasible.

4. Newsletter

If you subscribe, we use your email address to send you the Varel newsletter. You can unsubscribe at any time using the link in each email or by contacting us. We store your subscription status and the source and date of signup.

5. Analytics and affiliate tracking

We use Google Analytics and Google Tag Manager to understand how the Service is used, and internal analytics events stored in our database. We also track outbound affiliate link clicks so we can measure the performance of recommendations. Affiliate clicks and analytics events are stored with privacy-preserving identifiers and do not include your raw IP address. Some affiliate partners may set their own cookies once you leave our site; those are governed by the partners’ own privacy policies.

6. Sharing and processors

We do not sell your personal information. We share data only with service providers who process it on our behalf, including:

• Vercel — website hosting and, via Vercel Blob, media storage.
• Our database provider — managed PostgreSQL hosting for the Service’s content and events.
• Google — Google Analytics and Google Tag Manager (subject to your consent).

These providers act as processors under written agreements and may process data in accordance with appropriate safeguards.

7. International transfers

Some of our providers may process data outside your country, including in the United States. Where personal data is transferred outside the EEA or UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses or equivalent mechanisms.

8. Data retention

We keep personal data only as long as necessary for the purposes described here: newsletter data until you unsubscribe; analytics and affiliate-click data for a limited period consistent with measuring performance; and administrative/audit records as needed for security and legal compliance. We then delete or anonymise the data.

9. Your rights

Subject to applicable law, you have the right to access, rectify, erase, restrict or object to processing of your personal data, to data portability, and to withdraw consent at any time. To exercise any right, email matija@pinko.hr. You also have the right to lodge a complaint with a supervisory authority — in Croatia, the Personal Data Protection Agency (AZOP).

10. US privacy rights (CCPA/CPRA and similar state laws)

If you are a resident of California or another US state with comparable privacy laws (such as Virginia, Colorado, Connecticut or Utah), you may have rights to know, access, delete and correct personal information, and to opt out of the “sale” or “sharing” of personal information and of targeted advertising. We do not sell personal information for money. To exercise these rights, use “Privacy Choices” in the footer or email matija@pinko.hr. We will not discriminate against you for exercising your rights.

11. Children’s privacy

The Service is intended for adults and is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.

12. Third-party links

Varel links to third-party tools, comparisons, deals and affiliate destinations. We are not responsible for the privacy practices or content of those third-party sites. Please review their policies before providing them with personal data.

13. Security

We use appropriate technical and organisational measures to protect personal data, including access controls, hashed credentials, audit logging and encrypted secrets. No method of transmission or storage is completely secure, but we work to protect your information.

14. Changes to this policy

We may update this Privacy Policy from time to time. We will change the “Last updated” date above and, where appropriate, notify you. Continued use of the Service after changes means you accept the updated policy.

15. Contact

Pinko obrt, Zamlačka 28A, 10410 Velika Mlaka, Croatia. Privacy and data-protection contact: matija@pinko.hr.