Privacy Policy

If you create an account

Your name, email address and password. Passwords are stored only as a salted, one-way hash — we can never see them.

If you post a review

The review, its rating, the product it's about, and the date. Your name is shown with published reviews.

If you're a vendor

Contact name, business email, store details, and everything you submit through the vendor dashboard (products, prices, images, COAs).

If you join our mailing list

When you sign up for vendor deals, new reviews and research guides — through the vendor quiz, price & batch alerts, the newsletter box or the optional box at account sign-up — we keep your email address (and first name, if you give it), where you signed up, the wording you agreed to and when. We use it only to send those emails. Every email has an unsubscribe link, and you can also ask us to remove you at any time.

If you email us

Your email address and whatever you include in the message.

When you click through to a vendor

We count the click — which vendor, which product, which VialCheck page it came from, and when — so we can report referral traffic to vendors. This count contains no personal data: no name, email, account or IP address is stored with it.

VialCheck only sets strictly necessary cookies, used to keep you signed in:

• vc_user_session — visitor accounts;
• vc_vendor_session — the vendor dashboard;
• vc_admin_session — VialCheck staff.

They're secure, HTTP-only and expire automatically. We don't use advertising, analytics or cross-site tracking cookies. When you follow a link to a vendor, the vendor's own site may set its own cookies under its own policy.

• to run your account and show your reviews;
• to review vendor applications and submissions, and operate vendor accounts;
• to answer messages and correction requests;
• to keep the site secure and prevent abuse such as fake reviews or accounts;
• to report aggregate referral traffic (click counts) to vendors.

We don't sell or rent personal data. We use a small number of service providers to run VialCheck:

• Vercel — website hosting;
• Supabase — database and file storage;
• Resend — sending our emails and managing the mailing list;
• Google (Gemini) — reading lab-report documents published by vendors. These are product documents, not personal data.

We may also disclose information if required by law, or to protect the rights and safety of VialCheck and its users.

Account data is kept while your account is open and deleted when you ask us to close it; published reviews may be kept in anonymised form. Vendor records are kept while the vendor is listed and for a reasonable period afterwards. If you unsubscribe from our emails we stop emailing you straight away, but keep a record of your opt-in and opt-out so we can prove we respected your choice. Click counts contain no personal data and are kept for reporting.

You can ask to access, correct, export or delete your personal data, or object to how we use it, by emailing hello@vialcheck.io. Depending on where you live (for example the EU/UK under GDPR, or California under the CCPA) you may have additional rights, including complaining to your local data protection authority.

Connections to VialCheck are encrypted (HTTPS), passwords are hashed, and access to our database is restricted. No system is perfectly secure, but we take reasonable measures to protect the data we hold.

VialCheck is not intended for anyone under 18, and we don't knowingly collect their data.

We'll update this policy if our practices change, and show the new date at the top. See also our Terms of Use.