Privacy Policy
Last updated: 8 July 2026 · Version 1.2
English translation for convenience. This is a courtesy translation of the Italian document, which is the legally binding version. In case of any discrepancy, the Italian version prevails.
In short: Gurglee is designed to work offline: your aquarium data stays on your device. We process personal data only in limited cases — when you visit this website (advertising cookies, with your consent) and if you choose to enable cloud sync in the app (optional).
1. Data controller
The controller of personal data is Simone Dall'Asta, based at Via Schedoni 3, 43010 Fontevivo (PR), Italy.
For any privacy-related matter you can write to: [email protected].
2. Data processed by this website
This site is a static showcase hosted on Cloudflare Pages. When you visit it, the following may be processed:
- Technical browsing data (IP address, browser/device type, pages viewed): processed by the hosting/CDN infrastructure (Cloudflare) to deliver the site and keep it secure.
- Cookies and advertising identifiers via Google AdSense — only with your consent (see §5 and the Cookie Policy).
- Cookie preference: stored locally in your browser (localStorage) to remember your choice. It is not a cookie and never leaves your device.
3. Data processed by the Gurglee app
Gurglee is offline-first. By default:
- The data you enter (tanks, readings, activities, notes, etc.) is stored locally only on your device. It is not transmitted to us.
- Voice dictation (optional): if you use the microphone to dictate a reading, the audio is processed by your device's speech-recognition service (e.g. the Android system one, which may involve processing by its provider under its own policy); the app receives only the recognised text and neither records nor stores the audio, nor sends it to our servers. The microphone permission is requested only on first use and you can revoke it whenever you like.
- No account is required to use the core features.
- In-app advertising (Free plan only): the app shows a discreet banner via Google AdMob. Before any ad you are asked for consent through Google's UMP form (Consent Mode); without consent, personalised ads are not shown. AdMob may process device advertising identifiers under its own policy. The Premium plan contains no advertising.
- Amazon affiliate links: the product catalog, the inventory and their search forms contain links to Amazon with our affiliate code (Amazon Associates programme). The app does not transmit personal data to Amazon: the link opens the Amazon site/app — or, on mobile, an in-app Amazon search screen (WebView) — and from that point Amazon processes the data (including any cookies) under its own policy. On eligible purchases we earn a commission, at no extra cost to you.
If you choose to enable the cloud features (optional; the account and manual sync are free, automatic background sync is part of the Premium plan):
- Account: you create an account with email and password (or Google sign-in). Managed through Supabase.
- Sync: your aquarium data is copied to the server so it can be shared across your devices. It stays tied to your account and is not sold or transferred to third parties.
- AI fallback — feature not yet available: it will be introduced in a future version of the app (optional, off by default): if you enable it, phrases the local parser cannot interpret may be sent to a language-processing service to be converted into structured data. Today no phrase leaves the device.
- Statistics on linked Amazon items (only if you are logged in): when you link an Amazon item to a product/stock via "Paste link", we record the event on our database (Supabase) — which link, to which product/stock — associated with your account, for internal statistics (e.g. understanding which items are searched most often). We do not use it for advertising profiling, do not share it with third parties, and it is removed if you delete your account.
4. Purposes and legal bases
| Purpose | Legal basis (Art. 6 GDPR) |
|---|---|
| Providing the site and app and the features you request | Performance of a contract / pre-contractual measures |
| Security, abuse prevention, technical logs | Legitimate interest |
| Cookies and advertising on the site (AdSense) | Consent |
| In-app advertising on the Free plan (AdMob) | Consent |
| Cloud sync and account (if enabled) | Performance of the contract (Premium service) |
| AI fallback (future feature, if enabled) | Consent |
5. Advertising — Google AdSense
To support the project, this site may show ads via Google AdSense. AdSense and its partners may use cookies and identifiers to show ads and, with your consent, personalise them based on your browsing.
No advertising cookie is installed without your consent. The AdSense script is loaded only after you accept the "Advertising" category in the cookie banner (we implement Google Consent Mode v2, with consent denied by default).
You can manage your Google ad preferences from the Google My Ad Center page and withdraw consent at any time from Cookie preferences.
6. Providers and recipients of the data
We rely on providers acting as data processors:
- Cloudflare, Inc. — site hosting and CDN/security.
- Google Ireland/LLC — advertising on the site (AdSense) and in the app (AdMob, Free plan only) and fonts (Google Fonts).
- Supabase — authentication and database for sync (only if you enable the cloud).
We do not sell your personal data.
7. Transfers outside the EU
Some providers (e.g. Google, Cloudflare) may also process data outside the European Economic Area. In that case the transfer takes place on the basis of appropriate safeguards under the GDPR (e.g. Standard Contractual Clauses and/or adherence to the EU-US Data Privacy Framework).
8. Retention
- Local app data: kept until you delete it (by uninstalling the app or removing it).
- Account/cloud data: kept while the account is active; deleted upon a deletion request (from the app, "Delete account"). All that remains of the deletion is a pseudonymous technical trace (an encrypted identifier not traceable to you and the count of removed records), for security and verification purposes: it contains no personal data.
- Cookies: according to the durations indicated in the Cookie Policy.
9. Your rights
You have the right of access, rectification, erasure, restriction, objection and portability, as well as the right to withdraw consent at any time. The details and how to exercise them are on the dedicated GDPR page. You may also lodge a complaint with the Italian Data Protection Authority (garanteprivacy.it).
10. Minors
The service is not intended for children under 16. We do not knowingly collect data from minors without the consent of those exercising parental responsibility.
11. Changes to this policy
We may update this policy; the date at the top indicates the latest revision. Material changes will be flagged on the site.
See also: Cookie Policy · GDPR rights · Manage cookie preferences