Legal document

Privacy Policy

This Policy describes how PriceList.MD (the “Operator”) processes personal data and technical information in connection with your use of our price comparison platform. It is drafted in line with transparency principles and applicable data protection requirements.

Last updated: 29.07.2026 Terms of use

1. Data Controller

The controller of personal data processed in connection with PriceList.MD is a natural person — the owner and administrator of the project, acting in accordance with the Republic of Moldova personal data protection legislation (Law No. 133/2011 and applicable regulations).

Contact for data protection and exercising your rights: [email protected].

  • without analytics consent — only strictly necessary data: session, authentication, security, language, consent cookie;
  • on voluntary registration — account data (name, email, irreversible password hash);
  • via the contact form — data you provide and minimal technical anti-abuse data;
  • after any explicit choice in the mandatory cookie dialog — search and core site features;
  • after “Accept all” — additionally analytics (Google Analytics 4, Yandex Metrika, Microsoft Clarity) and search query logging;
  • we do not sell personal data or use it for spam or unlawful purposes.

2. Scope

This Policy applies to website visitors, registered users, and individuals who contact us via the contact form. Third-party websites reached through links in the catalog are governed by their own privacy policies.

3. Categories of Data Processed

We process only data necessary to operate the service, ensure security, and improve the catalog and the PriceList ecosystem. Depending on how you interact with the site, the following categories may be processed:

3.1. User account

We do not store user passwords in readable form and have no technical ability to know or recover your password. On registration or password change, the password is processed using one-way cryptographic hashing (bcrypt); only an irreversible hash is stored in the database, used solely to verify sign-in.

  • username (display name);
  • email address;
  • account-related data: watchlist, recently viewed products, account preferences.

3.2. Contact form

  • subject and message body;
  • name and email — if voluntarily provided;
  • interface language at the time of submission;
  • IP address and browser user-agent — for security and abuse prevention.

3.3. Catalog search

Search query logging applies only with “Accept all”. Catalog search is available after any explicit choice (including “Essential only”). With extended consent we record:

  • search query text;
  • number of results returned;
  • interface language;
  • country code (derived from technical headers provided by content delivery infrastructure; the IP address is not stored in plain form in this log);
  • search form source (home, header, refine);
  • referring page (referer) — host and, for external referrals, a partial URL;
  • device type (desktop, mobile, tablet), browser, and operating system — derived from user-agent;
  • sort parameters, whether filters were applied, and selected category, if any;
  • whether the user was signed in;
  • pseudonymous technical identifiers (hashed IP address and hashed session ID) for deduplication and statistical analysis.

3.4. Technical and usage data

  • server logs and security events;
  • recording of outbound offer clicks (offer/product/shop identifiers, timestamp, connection metadata) — for internal statistics;
  • data automatically sent by the browser: user-agent, preferred language, device type.

3.5. Cookies and similar technologies

  • strictly necessary cookies: session, authentication, security;
  • preference cookie: interface language;
  • consent cookie: your chosen level (essential only or all);
  • analytics identifiers — only after explicit consent to analytics cookies.

3.6. Third-party web analytics (consent only)

If you choose “Accept all” in the cookie banner or have saved consent for analytics cookies, we enable the following services. Without such consent they are not loaded. We do not send contact form message content to these services; account passwords are not accessible to them.

4. Purposes of Processing

  • providing and improving the price comparison service;
  • authentication, account management, and personalised features (watchlist, history);
  • handling enquiries submitted via the contact form;
  • security, fraud prevention, and limiting automated (bot) traffic through verification mechanisms on form submission;
  • search query analysis — only with “Accept all” consent;
  • aggregated usage statistics — with consent where required;
  • compliance with legal obligations.

6. Retention

Data is kept only as long as necessary for the stated purposes: contact messages — per internal archiving policy; search logs — for a limited statistical period; account data — until account deletion; consent cookies — per browser lifetime or until consent is withdrawn.

7. Recipients and Processors

We do not sell your data. Data may be shared with hosting, CDN, abuse-protection, and email providers, and with web analytics operators — Google LLC (Google Analytics 4), Yandex LLC (Yandex Metrika), and Microsoft Corporation (Microsoft Clarity) — only with your consent to analytics cookies, to the extent necessary, under contractual confidentiality and security obligations.

8. International Transfers

Some technical providers may process data outside the Republic of Moldova or the EEA. In such cases we apply appropriate safeguards required by law (standard contractual clauses, provider protection policies).

9. Security

We apply reasonable technical and organisational measures: password hashing, restricted data access, pseudonymisation in search logs, security monitoring. No system is completely risk-free.

10. Your Rights

To exercise your rights, contact [email protected]. We will respond within statutory time limits.

You may also lodge a complaint with the National Centre for Personal Data Protection (CNPDCP): Chișinău, 48 Vlaicu Pîrcălab St., MD-2012; tel. +373 22 820 801; email: [email protected]; web: datepersonale.md.

  • right of access and information;
  • right to rectification;
  • right to erasure (“right to be forgotten”) within legal limits;
  • right to restriction of processing;
  • right to data portability where applicable;
  • right to object to processing based on legitimate interests;
  • right to withdraw consent to analytics (without affecting prior lawful processing);
  • right to lodge a complaint with a competent supervisory authority.

11. Children

The service is not directed at persons under 16. We do not knowingly collect data from minors.

12. Changes to this Policy

We may update this Policy. The current version is published on this page with the date of the last update.