Loading...
0%
0%
Loading...
Last updated: September 05, 2026
Controller: moresalt, VAT ID 03837200835, Messina, Italy.
Website: https://moresalt.it
Privacy contact: info@moresalt.it
Contact data: name, email and message submitted through the contact form.
Account data: email address, display name and profile picture.
Order data: purchase or rental details, totals, shipping and administrative data.
Security data: IP address, anti-bot tokens, rate limiting counters and essential technical logs.
Analytics: aggregated browsing data, only with consent where required.
If you choose to sign in with Google, we receive from your Google account only: your email address, display name and profile picture. These correspond to the openid, email and profile scopes.
We use this data for one purpose only: to create and recognise your moresalt.it account, show you your order history and send you messages related to your purchases.
We do not access Gmail, Drive, Contacts, Calendar or any other Google service, and we request no permissions beyond the three listed above.
We do not sell this data, do not share it with third parties for commercial purposes, and do not use it for advertising or profiling. It is processed only by the service providers listed in section 5, acting as data processors.
You can revoke moresalt's access to your Google account at any time at https://myaccount.google.com/permissions. Revoking prevents future access; to also delete data already stored, see section 7.
Pre-contractual and contractual execution (GDPR art. 6.1.b).
Legal and tax obligations (GDPR art. 6.1.c).
Service security and abuse or fraud prevention (GDPR art. 6.1.f).
Consent, where required, for non-essential cookies and analytics (GDPR art. 6.1.a).
Google (Google Sign-In authentication, analytics), Supabase (database, authentication, file storage), Stripe (payments), Resend (transactional email), Upstash (rate limiting), Vercel (hosting), Cloudflare (anti-bot protection).
Each provider processes data as an external processor, under its own terms and only as needed to run the service.
Some providers may process data outside the European Economic Area; where that happens, the transfer relies on the Standard Contractual Clauses approved by the European Commission.
Account data: while the account is active, and for 12 months after the last sign-in.
Contact form messages: 24 months.
Order data: 10 years, as required by Italian tax obligations.
Technical logs and security counters: from 60 seconds to 30 days, depending on purpose.
You may exercise your GDPR rights (access, rectification, erasure, restriction, objection, portability) by emailing info@moresalt.it.
To request deletion of your account and associated data, including data obtained through Google Sign-In, email info@moresalt.it: we act within 30 days. Only data we are legally required to retain, such as tax records relating to orders, is excluded.
You may also file a complaint with the competent data protection supervisory authority.
For any question about this policy, write to info@moresalt.it.