Privacy

This Privacy Policy explains what information the website nextfind.eu (the “website”) collects when you visit it, why we collect it, who processes it on our behalf, how long it is kept and which rights you have. We have tried to write it in plain words. If something is unclear, write to us using the contact details at the end.

This policy covers the website only. The NextFind Telegram bot (@vinted_trackerbot) has its own terms and privacy notice, which you can read in the bot via /terms. Data you give the bot, such as your search links, is described there.

1. Who is responsible

The website is run by NextFind, based in Bratislava, Slovakia. NextFind decides why and how the information described below is processed and is the controller of that information under the EU General Data Protection Regulation (GDPR). You can reach us using the contact details at the end of this policy.

2. What we collect

The website has no accounts, no sign-up forms and no payments. We only collect information about how the website itself is used. What exactly depends on the choice you make in the cookie banner.

Always, without cookies — before you make a choice and if you click “No thanks”:

• the pages you view and the order in which you view them;
• clicks on buttons and links, for example “Start free”, and how far you scroll;
• the website or link that brought you here, including campaign tags in the address;
• your browser, operating system, device type and screen size;
• your approximate location at country and city level, derived from your IP address;
• how quickly the pages load and respond on your device.

To tell visits apart within a day without storing anything on your device, our analytics provider combines your IP address, browser details and the website address into an identifier that changes every day. The IP address itself is not stored. Because the identifier changes daily, we cannot recognise you across days or link this information to you as a person.

Only if you click “Allow”, in addition:

• analytics cookies that give your browser a random identifier, so we can recognise return visits and see how people come back to the website before they start using the bot;
• short recordings of how the page is used — page layout, clicks, scrolling and mouse movement. The website has no forms, so no typed text is recorded.

We do not collect your name, email address, phone number or Telegram account through the website, and we do not ask for any of them.

3. Why we use it

• to understand which pages and explanations are useful and which are not, so we can improve the website;
• to see which buttons and links people use to open the bot;
• to find and fix problems, such as broken links, layout issues or slow pages;
• to keep the website secure and available.

We do not use this information for advertising, and we do not build marketing profiles from it.

4. Legal basis

• Counting visits without cookies relies on our legitimate interest in understanding how the website is used and keeping it working (Article 6(1)(f) GDPR). We keep this data minimal and do not use it to identify you. You can object to it by writing to us.
• Analytics cookies and recordings rely on your consent (Article 6(1)(a) GDPR). They start only after you click “Allow”. You can withdraw your consent at any time via “Cookie settings”; this does not affect what was collected before you withdrew it.
• Technical request data processed by our hosting provider relies on our legitimate interest in delivering and protecting the website.

5. Cookies and browser storage

Until you make a choice, the website stores nothing in your browser. After you choose, the following may be stored:

• Your choice (both “Allow” and “No thanks”): a browser storage entry named__ph_opt_in_out_… that remembers your decision, so the banner doesn’t ask you again. It is necessary to respect your choice.
• Analytics (only after “Allow”): PostHog cookies and browser storage entries namedph_…_posthog, holding a random identifier and the current visit. They expire after one year unless you delete them earlier.

We don’t use advertising cookies or third-party tracking pixels. You can change your choice at any time via “Cookie settings” at the bottom of every page, or delete stored data in your browser settings.

6. Who processes it

We use two service providers. Both process data on our behalf and only for the purposes above.

• PostHog provides the analytics and recordings. Data is stored in PostHog’s EU cloud.
• Cloudflare hosts the website and delivers it to you. To do so, it processes technical request data, such as your IP address, browser and the page requested, and uses it to protect the website against abuse.

Links on the website lead to Telegram and the NextFind bot. Once you open them, Telegram’s own privacy policy applies.

We don’t sell your data or share it with anyone else, unless we are required to do so by law, for example in response to a valid request from a public authority.

7. International transfers

Our analytics data is stored in the EU. Cloudflare runs a global network, so technical request data may be processed outside the European Economic Area. Where that happens, the provider relies on the safeguards the GDPR requires, such as the European Commission’s Standard Contractual Clauses.

8. How long we keep it

• Analytics events: 1 year, after which they are deleted automatically.
• Recordings: 30 days.
• Your cookie choice and analytics cookies: until they expire or you delete them in your browser.

9. Your rights

Under the GDPR you have the right to:

• ask what data we hold about you and get a copy of it;
• have inaccurate data corrected;
• have your data deleted;
• restrict how we use your data;
• object to processing based on our legitimate interest;
• receive your data in a portable format, where this applies;
• withdraw your consent at any time, via “Cookie settings” or by writing to us.

To use any of these rights, write to us using the contact details below. We will reply within one month. Please note that data collected without cookies is not tied to you, so we usually cannot find it by request. If you allowed cookies, it helps to tell us roughly when you visited.

If you think we handle your data unlawfully, you can complain to the Office for Personal Data Protection of the Slovak Republic (dataprotection.gov.sk) or to the data protection authority in your own country.

10. Security

The website is served only over an encrypted connection (HTTPS), and access to the analytics is limited to the people who run NextFind. No method of transmission or storage is completely secure, but we take reasonable measures to protect the data we hold.

11. Children

The website is not aimed at children, and we do not knowingly collect information about them. If you believe a child has given us personal information, write to us and we will delete it.

12. Changes to this policy

We may update this policy when the website or the law changes. The date at the top shows when it was last updated. If a change affects what you agreed to, we will ask for your consent again.

Contact

NextFind
Bratislava, Slovakia
Email: contact@nextfind.eu
Telegram: @vinted_trackerbot