Privacy Policy

Vuru operates this website, a directory where makers publish products and readers browse, upvote, review and discuss them. This Privacy Policy explains what personal information we handle when you use the site, why we handle it, how long we keep it, who else sees it, and what you can require us to do about it.

This policy covers the website only. It does not cover the third-party sites we link to, including the products listed in the directory and the partner links in our sidebar. Once you follow a link away from here, the privacy policy of the site you land on applies instead of this one.

For the purposes of the UK and EU General Data Protection Regulation, Vuru is the "controller" of the personal information described below — meaning we decide why and how it is processed. If you would rather not read the whole document, the short version is: we collect what the site needs to work, we do not sell it, and you can ask us to delete it.

Last updated 31 August 2026. If you have questions about anything here, contact us at hello@vuru.online.

Most of the personal information we hold is information you typed in yourself. Specifically:

• Account details — the name, username and email address you enter when you register, plus a hashed version of your password.
• Profile details — an optional headline, avatar and any links you choose to add to your public profile.
• Submitted products — everything on the submission form, including the product name, tagline, description, website, pricing, features, FAQs, media and any deal you offer.
• Contributions — your upvotes, reviews, ratings, comments, community threads and replies.
• Correspondence — the contents of any email you send us, including copyright notices and support requests.

We never store your password itself. It is put through a one-way hashing function with a salt unique to your account, so nobody — including us — can read it back. If you forget it, we can only help you set a new one; we cannot tell you what the old one was.

Some information is collected by the act of your browser requesting a page, as is true of any website:

• Request logs — IP address, browser user agent, the page requested, the referring page and a timestamp. These are used to serve the site, diagnose faults and detect abuse.
• Session cookie — a signed reference to your account, set only after you sign in, so you stay signed in between pages.
• Aggregate usage counts — for example the visitor count shown on the home page, which is a total rather than a record of individuals.

We do not use device fingerprinting, and we do not attempt to identify you across other websites.

It is worth being explicit about the things we deliberately do not do, because many sites in this category do them:

• We do not sell or rent personal information to anyone, for money or otherwise.
• We do not build advertising profiles about you.
• We do not share your email address with other users, or with the makers of products you upvote, review or comment on.
• We do not ask for payment card details, because we do not take payments on this site.
• We do not knowingly collect special category data — health, biometrics, political opinions, religious beliefs and similar. Please do not put such information into a public review or profile.

Under the UK and EU GDPR, every use of personal information needs a lawful basis. Ours are as follows:

• Contract — running your account, publishing what you submit, and recording your votes and reviews. Without this we cannot provide the service you asked for.
• Legitimate interests — keeping the site secure, preventing spam and abuse, understanding aggregate usage, and defending legal claims. We have considered your rights and believe these uses are ones you would reasonably expect.
• Consent — any non-essential cookie or optional email, where consent applies. You can withdraw it at any time, and withdrawal does not affect processing that already happened.
• Legal obligation — retaining or disclosing information where the law requires it.

This is a directory, so a large part of it is public by design and by intention. The following are visible to anyone, including people who are not signed in and search engines that index the site:

• Your username, display name, headline and avatar.
• Every product you submit, in full.
• Every review, rating, comment, community thread and reply you post, with your name attached.
• The fact that you upvoted something, and the totals it contributes to.

The following are never shown publicly: your email address, your password hash, your IP address, and any private correspondence with us.

Please treat anything you publish here as permanently public. Search engines and archiving services copy pages, and we cannot compel a third-party archive to forget something you posted. Deleting content removes it from this site; it does not unpublish it from the rest of the internet.

We use a small number of cookies. Strictly necessary cookies — the session cookie that keeps you signed in, and the token that protects forms against cross-site request forgery — do not require consent because the site cannot function without them.

If and when we introduce non-essential cookies, such as analytics or advertising, we will ask for consent first through a banner that lets you decline as easily as accept, and we will update our Cookie Policy before doing so. Declining non-essential cookies will never restrict your access to the site's content.

Our full breakdown of each cookie, its purpose and its lifetime is on the Cookie Policy page. You can also clear or block cookies through your browser settings, though blocking the session cookie will stop you being able to sign in.

We may display advertising on this site to fund it, including advertising served by Google through the AdSense programme. This section is the disclosure Google requires publishers to make, and it applies whenever ads are running here.

• Third-party vendors, including Google, use cookies to serve ads based on your prior visits to this website or other websites.
• Google's use of advertising cookies enables it and its partners to serve ads to you based on your visit to this site and/or other sites on the internet.
• You may opt out of personalised advertising by visiting Google's Ads Settings at adssettings.google.com.
• You may opt out of a third-party vendor's use of cookies for personalised advertising by visiting aboutads.info/choices, or youronlinechoices.eu if you are in Europe.
• Third-party vendors we have not directly engaged may also serve ads through Google's network; Google lists its ad technology providers, and their own privacy policies govern what they do.

Google may use the advertising identifier and cookie information described above to build a profile used for ad selection and measurement. Google acts as an independent controller of that information, not as our processor, and we do not receive it in a form that identifies you.

If you are in the European Economic Area, the United Kingdom or Switzerland, we will obtain consent before any advertising or analytics cookie is set, in line with Google's EU User Consent Policy. The consent banner will let you refuse as easily as accept, will not treat silence or continued scrolling as agreement, and will let you change your mind later. Refusing does not restrict your access to any content here; you will simply see non-personalised advertising or none at all.

Under several United States state privacy laws, permitting advertising cookies can amount to "sharing" personal information for cross-context behavioural advertising even though no money changes hands. See the section on United States privacy rights below for how to opt out, including our handling of the Global Privacy Control signal.

We do not knowingly serve personalised advertising to anyone we believe to be a child, and we do not place ads on pages directed at children.

Our commercial arrangements — which placements are paid, how they are labelled, and what a sponsor can and cannot buy — are set out in full on the Advertising Disclosure page.

We share personal information only in the following circumstances:

• Service providers — the companies that host the site, deliver our email and provide security or infrastructure services. They act on our instructions and may only use the information to provide their service to us.
• Other users and the public — the public content described above, which is the point of the site.
• Legal requirements — where we are required by law, court order or a valid request from a public authority, or where disclosure is necessary to establish, exercise or defend legal claims.
• Safety — where we reasonably believe disclosure is necessary to prevent serious harm to a person, or to investigate fraud or abuse of the site.
• Business transfer — if the site is sold or merged, information may transfer to the acquirer, who would remain bound by this policy or give notice of any change.

We do not disclose personal information to anyone else, and we do not use it for purposes unrelated to those set out here without telling you first.

Our service providers may process information in countries other than the one you live in, including outside the United Kingdom and European Economic Area. Data protection law in those countries is not always equivalent.

Where we transfer personal information out of the UK or EEA, we rely on an adequacy decision where one exists, and otherwise on standard contractual clauses together with any additional safeguards the transfer requires. You may request a copy of the relevant safeguards by contacting us.

We keep personal information only for as long as there is a reason to:

• Account details — for as long as your account exists, and deleted within 30 days of you closing it.
• Published content — for as long as it remains published. Content you delete is removed from the site immediately and purged from backups within 90 days.
• Request logs — a rolling short retention period for security and diagnostics, after which they are deleted or aggregated beyond identification.
• Correspondence — for as long as needed to deal with the matter, and then for a reasonable period in case it recurs.
• Records we must keep by law — for whatever period the law specifies.

We take reasonable technical and organisational measures to protect personal information. These include serving the site over encrypted connections, hashing passwords with a per-account salt, signing session cookies so they cannot be forged, restricting administrative access, and validating and escaping user-submitted content so it cannot execute in another visitor's browser.

No website can promise perfect security, and we do not. If we become aware of a personal data breach that is likely to result in a risk to your rights and freedoms, we will notify the relevant supervisory authority within the time the law allows, and we will tell you directly where the risk is high.

You have a part in this too: use a password you do not use elsewhere, and tell us promptly at hello@vuru.online if you believe your account has been accessed by someone else.

If the UK or EU GDPR applies to you, you have the right to:

• Access — obtain a copy of the personal information we hold about you.
• Rectification — have inaccurate information corrected, and incomplete information completed.
• Erasure — have your information deleted where there is no overriding reason for us to keep it.
• Restriction — require us to pause processing while a dispute about accuracy or legitimacy is resolved.
• Portability — receive information you gave us in a structured, commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests, including profiling, on grounds relating to your situation.
• Withdraw consent — at any time, where processing is based on consent.

To exercise any of these, email hello@vuru.online. We will respond within one month, and will tell you if we need longer because the request is complex. We may ask you to confirm your identity first, so that we are not disclosing your information to somebody else. Exercising your rights is free unless a request is manifestly unfounded or excessive.

If you are unhappy with how we have handled your information, you may complain to your data protection authority. In the United Kingdom that is the Information Commissioner's Office; in the EEA it is the supervisory authority in the country where you live or work. We would appreciate the chance to resolve it first.

Several states, including California, Colorado, Connecticut, Virginia and Utah, give residents rights over personal information. Depending on where you live, these may include the right to know what is collected and why, to obtain a copy, to correct inaccuracies, to delete, to opt out of targeted advertising or the sale or sharing of personal information, and not to be discriminated against for exercising any of them.

We do not sell personal information for money. If we use advertising or analytics cookies, that may nonetheless count as "sharing" for cross-context behavioural advertising under California law, and you can opt out by declining non-essential cookies where we offer that choice.

We honour the Global Privacy Control signal. If your browser sends one, we treat it as an opt-out of sharing for that browser.

To make any other request, email hello@vuru.online. We may need to verify your identity, and you may use an authorised agent where the law permits. If we refuse a request we will explain why and how to appeal.

This site is intended for a general adult audience and is not directed at children. We do not knowingly collect personal information from anyone under 13, or under the minimum age of digital consent in their country where that is higher — 16 in parts of the EEA.

If you are under that age, please do not create an account or submit anything to the site.

If you believe a child has provided us with personal information, contact hello@vuru.online and we will delete the account and its content promptly.

We do not make decisions producing legal or similarly significant effects about you by automated means.

Ranking on this site is automated — positions are calculated from upvotes, review activity and recency, as described on the How ranking works page — but ranking affects the visibility of a product listing, not your rights, and a human can review any ranking or moderation decision on request.

We may update this policy as the site changes or the law does. The date at the top of this page always shows when it was last revised.

Where a change materially affects your rights or how we use your information, we will give notice on the site before it takes effect, and where the law requires consent we will ask for it rather than assume it.

For any privacy question, request or complaint, email hello@vuru.online and put "Privacy" in the subject line so it reaches the right place.

This policy is written in plain language for how this site actually behaves. It is not legal advice, and it has not been reviewed by a qualified lawyer. If you are reusing it for your own site, have counsel check it against your circumstances and your jurisdiction first.