Rovista
ITEUREN

Italiano English Français Deutsch Español Nederlands Polski Português

Sign in

Privacy policy

Draft to be validated by a lawyer before publication.

Last updated: 25 September 2026

This policy explains what personal data we process when you use Rovista (https://rovista.it), why we process it, how long we keep it and what your rights are. It is provided under Articles 13 and 14 of Regulation (EU) 2016/679 (GDPR). Details about cookies are in our cookie policy.

Who the data controller is

The data controller, meaning the party that decides how and why your data is processed, is Oatus Srl.

Registered address: Via Tartaglia 5, 20154 Milano (MI). VAT number: 12645590964.

For any privacy question you can write to info@rovista.it or use our contact form.

No data protection officer (DPO) has been appointed. [TO BE CONFIRMED: DPO appointment]

What the service does

Rovista is a search engine for second-hand items: it searches several marketplaces at once, shows public listing data and sends you to the original listing. We are not a party to any sale, we do not handle payments and we do not verify sellers or items.

What data we process and why

Searching without an account

You can search without signing up and without limits. To protect the marketplaces from automated use, we count the searches made without an account from each IP address (up to a daily maximum meant to stop automated programs, not people) using only a cryptographic fingerprint (HMAC hash) of the address: your actual IP address is not stored. We also store a cookie with a random code that links the results to the search you just made. If we turn on a daily limit per person, we apply it with the same cookie. This data is deleted after 2 days.

Legal basis: our legitimate interest in preventing abuse and automated use of the service.

Your account

An account is optional and free. If you create one, we process:

  • your email address and password, which we store only as a hash (Argon2id) and never in plain text;
  • your preferred language, country and currency;
  • your favourites and your searches: while you are signed in, your searches are saved to your account automatically;
  • the listings and sellers you choose to hide, and the price of your favourites, which we check periodically to tell you if it drops or if the listing is no longer available (you can turn these alerts off in your account);
  • your sign-in sessions: a random code of which we keep only the SHA-256 hash, together with a hash of your IP address and your browser type (user agent), to protect your account;
  • the codes used to verify your email and to reset your password, stored as hashes, which expire after 24 hours and 1 hour respectively.

When you choose a password, we check whether it appears in known data breaches through the Have I Been Pwned service, using k-anonymity: we send only the first 5 characters of the SHA-1 hash of your password, never the password itself or your email.

Legal basis: performance of a contract, to provide your account and its features; our legitimate interest, for security measures.

Signing in with Google

If you choose to sign in with Google, Google shares with us (through the OpenID Connect protocol) your email address, your Google account ID and whether your email is verified. We receive nothing else.

Legal basis: performance of a contract.

Base paid plan

The Base plan is purchased through Stripe Checkout. You enter your card details directly on Stripe: we never see or store them. We keep your Stripe customer ID, your subscription ID and its status.

Legal basis: performance of a contract; legal obligation to keep accounting records.

Alerts

With the Base plan you can turn on alerts: the service re-runs your saved searches periodically and tells you about new listings through the channels you choose.

  • Email, to your account address.
  • Browser push notifications: we store your browser's push service address (endpoint) and encryption keys. Notifications go through your browser maker's push service (for example Google FCM, Mozilla, Apple or Microsoft), but their content is end-to-end encrypted.
  • Telegram: after you start our bot with a one-time code, we store your Telegram chat ID. You can unlink at any time by sending the /stop command to the bot.

For each alert we also record which listings we have already told you about and a queue of notifications to be sent.

Legal basis: performance of a contract.

Weekly email

If you have a free account and agreed to receive news emails, on Monday morning we send you an email with the new used listings from the three saved searches you opened most recently, only when there is something new. To prepare it we run those searches again and record when we wrote to you. You can unsubscribe at any time with one click from the link at the bottom of every email, from your email program or from your account.

Legal basis: consent, which you can withdraw at any time. [TO BE CONFIRMED: consent and unsubscribe for the weekly email]

Invite a friend

Every account has a personal invitation link. If you open an invitation link we store a technical cookie with the invitation code for 30 days; if you sign up, we store who invited you. The person who invited you does not see your email address: they only see how many friends signed up and subscribed. On your first payment, the person who invited you receives a reward (one month of Base or a credit on their Stripe subscription).

Legal basis: performance of the contract (invitation rules in the Terms). [TO BE CONFIRMED: invitation cookie and notice]

Contact form

If you write to us through the contact form, we process your name, email, topic, message, language and a hash of your IP address, which helps us prevent spam. The message is sent to us by email and kept for up to 12 months.

Legal basis: our legitimate interest in answering your requests and preventing abuse.

Technical logs

Our server keeps technical logs, including errors, to run and protect the service. Confidential data such as passwords, codes and keys is redacted. Logs are kept for 14 days.

Legal basis: our legitimate interest in the security and proper operation of the service.

Listing data

Search results show public listing data (title, price, photo, location, link), which belongs to the marketplaces and the sellers. Of the data that may relate to a seller, we keep only what is already in the public listing (title, city and link), never the seller's name. A listing archive for the "Explore" pages and price statistics is kept for a maximum of 30 days; aggregated daily price statistics contain no personal data and are kept indefinitely.

Legal basis: our legitimate interest in offering a search service over listings that have been made public. If you are a seller and one of your listings appears in our results, you can object by writing to us. [TO BE VERIFIED: legal basis and notice for listing data]

Android app and browser extension

[DRAFT — TO BE CHECKED BY A LAWYER: Android app and browser extension]

The Android app is the website itself opened full screen (Trusted Web Activity): it processes the same data described in this policy, nothing more.

The browser extension (Chrome and Firefox) only activates on listing pages of the supported marketplaces. It reads the page you are looking at and sends our server only the title, price, currency and country of the listing, to tell you whether the price is in line with the typical price. It does not send the page address, does not read other pages or your history, does not contact the marketplaces, does not use cookies and does not identify you. The server computes the answer without saving this data; of your IP address we only keep a cryptographic fingerprint (hash) for a few minutes, to limit the number of requests. Like any request, it may appear in the server's technical logs. [TO BE CHECKED: retention of the hosting access logs]

Legal basis: legitimate interest in providing the feature you chose to install and in preventing abuse.

Search with a photo

[DRAFT — TO BE CHECKED BY A LAWYER: search with a photo and transfer of photos to Anthropic in the United States]

If you use "Search with a photo" (a Pro plan feature), the photo you take or choose is resized and re-encoded on our server, removing its metadata (for example the GPS location and the phone model), and then sent to Anthropic (Anthropic, PBC, United States), which analyses it with an artificial intelligence model and returns the name of the object to search for. We keep neither the photo nor the recognised object: the photo stays in memory only for the duration of the request and does not end up in the logs. For the daily limit on photo searches we only keep a counter linked to your account, for 24 hours. Anthropic processes the photo under its commercial terms, which rule out using data sent through the API to train its models and provide for its deletion after a limited period. [TO BE CHECKED: Anthropic's role (processor), data processing agreement (DPA) and retention period at Anthropic]

Frame only the object: avoid photographing people, documents or other personal information.

Legal basis: performance of the contract (the feature you choose to use). [TO BE CHECKED]

Filters by feature and seller reliability

We read the storage, colour, size, shoe size, brand and battery health of listings from the title and the details the marketplace publishes. If you choose one of these filters, your choice stays in the page address and, if you have an account, in the saved search and its alerts, like the other filters. Next to listings we also show the seller's rating and number of reviews when the marketplace makes them public in its results (currently eBay and DoneDeal): this is listing data, processed and kept as described in "Listing data"; we don't build profiles of sellers.

Legal basis: performance of the service you request (filters and saved searches); for seller data, the same as for other listing data. [TO BE CHECKED]

My items and Sell smarter

In "My items" you can save the products you own (chosen among the price guides), with version, condition and, if you wish, purchase date and price: we only use them to show you what they are worth today and how their value changes. If you turn on reminders for an item, once a day we check whether an event that usually lowers prices is coming up (for example a new model coming out) or whether its value has dropped a lot, and we send you at most one email a week; we record which reminders we sent you. You can turn reminders off for each item, for the whole account or with one click from the link at the bottom of every email. "Sell smarter" does not need an account and does not save what you type: price, details and listing text stay in the page address.

Legal basis: performance of the service you request (saved items) and consent for email reminders, which you can withdraw at any time. [TO BE VERIFIED: legal basis of the "time to sell" reminders (consent or requested service)]

AI check of a listing

[DRAFT — TO BE CHECKED WITH A LAWYER: analysis of listings with Anthropic and transfer to the United States]

If you use "Analyse this listing" (a Pro plan feature), our server reloads the listing from the marketplace and sends Anthropic (Anthropic, PBC, United States) its text (title, price, condition, location, description and details) and up to 3 photos, resized and without metadata, together with the typical price from our price guides. We don't send the seller's name or ID, nor any of your data (email, account, IP address); the description may however contain details the seller chose to publish. Anthropic sends us back the analysis, which we keep for 24 hours linked to the listing and the language, not to you: anyone who asks for the same analysis gets it without a new request. For the daily limit we keep a counter linked to your account for 24 hours; our technical logs record your account ID, the marketplace and the number of tokens used, to keep costs under control, never the text. The analysis is written by an AI model, can contain mistakes and is not a decision about you: it is a help that you should check. Anthropic processes the data under its commercial terms, which exclude using data sent through the API to train models. [TO BE CHECKED: Anthropic's role (processor), data processing agreement (DPA), retention period at Anthropic, legal basis for sellers' data contained in listings]

Legal basis: performance of the contract (the Pro plan feature you ask to use); for listing data, as described above under "Listing data". [TO BE CHECKED]

Shared lists

If you create a list we store the name you choose, the listings you add (a copy of the public data: title, price, photo, link and marketplace), the notes and the likes, with who added them. If you create a read-only link, anyone who has it can see the list name, the listings, the notes and the number of likes, but not who uses the list; the page is not indexed by search engines. If you create an invite link, whoever opens it with their own account and accepts becomes a collaborator: they can see the list and the other members (profile name or the start of the email address), add and remove listings, write notes and add likes. The links cannot be guessed, and you can regenerate or turn them off at any time. Only write in the notes what you want to share with the members and with anyone who has the link.

A list is deleted when you delete it or delete your account. If you leave a list or are removed from it, we delete your likes, while the listings and notes you added stay in the list; if you delete your account we also delete your notes and likes, and the listings you added stay in the list without your name. Lists are included in the data export.

Legal basis: performance of the contract (the feature you choose to use). [TO BE CHECKED]

WhatsApp alerts

[DRAFT — TO BE CHECKED BY A LAWYER: WhatsApp alerts, Meta's role and transfers outside the EEA]

With the Pro plan you can also get your alerts on WhatsApp. If you turn this on we process your mobile number (in international format), the date of the consent you give in the form, a one-time verification code (we only keep a cryptographic fingerprint of it; it expires after a few minutes and attempts are limited), the status of the link and the delivery status of the last message (sent, delivered, read, not delivered).

Messages go through Meta's WhatsApp Business Platform (Cloud API): Meta Platforms Ireland Ltd. (Ireland) and its group companies, including in the United States, process your number and the content of the messages (the search, listing titles and prices, links) on our behalf as a service provider. WhatsApp also processes the data of your WhatsApp account under its own terms and privacy policy. [TO BE CHECKED: Meta as processor for the Cloud API (WhatsApp Business data processing terms), sub-processors and WhatsApp's role as an independent controller]

You can stop at any time by replying STOP to one of our messages or by unlinking the number in "My searches". The number is deleted immediately when you unlink it or delete your account; a number that is entered but never verified is deleted after one day.

Legal basis: consent, which you can withdraw at any time, and performance of the contract (the Pro plan feature you choose to use). [TO BE CHECKED]

Search statistics and deals of the day

To understand which products need new price guides, we count how many times each text is searched for: we only store the search text in a normalised form (lower case, without accents or punctuation), the country and the day, with a counter. We do not store who searched: no account, IP address or cookie. Texts that seem to contain personal data, such as an email address or a phone number, are not counted. So that the same search repeated shortly afterwards is not counted twice, we keep a non-reversible cryptographic fingerprint (HMAC) for 30 minutes, which is then deleted. The statistics are kept for 180 days and only the site administrators see them, in aggregated form. [TO BE CHECKED: a search text may contain personal data that the automatic filter does not recognise, for example a name]

The "Deals of the day" pages, the deals Telegram channel and the "Deals of the week" section of the weekly email only use public listing data (see "Listing data"); deal snapshots are kept for 8 days. The Telegram channel is public: if you follow it, your data is processed by Telegram under its own privacy policy; the site neither receives nor stores the list of subscribers. [TO BE CHECKED: what channel administrators can see and Telegram's privacy policy]

Legal basis: legitimate interest in improving the price guides and pointing out good-value listings using anonymous statistics and public data. [TO BE CHECKED]

What we don't do

  • We do not sell your personal data.
  • We do not profile you and we do not make decisions based solely on automated processing.
  • We do not currently use analytics or advertising cookies. If we introduce them, it will only be with your consent.

Who we share data with

We rely on a few providers. Some process data on our behalf (processors), others act as independent controllers under their own privacy policies.

  • Hosting: [HOSTING PROVIDER TO BE ADDED], shared hosting with servers in the European Union.
  • Email delivery: our hosting provider's mail server or [EMAIL PROVIDER TO BE ADDED].
  • Stripe (Stripe Payments Europe Ltd., Ireland), for Base plan payments.
  • Google, only if you choose to sign in with Google.
  • Telegram, only if you link your alerts to Telegram.
  • Meta (WhatsApp Business Platform; Meta Platforms Ireland Ltd., Ireland), only if you turn on WhatsApp alerts: it receives your number and the text of the messages.
  • Browser push services (Google, Mozilla, Apple, Microsoft), only if you turn on push notifications.
  • Anthropic (Anthropic, PBC, United States), only if you use "Search with a photo" or "Analyse this listing": it receives the photo, without metadata, to recognise the object, or the text and photos of the listing to analyse (none of your data).
  • eBay: we take part in the eBay Partner Network affiliate programme. If you click a link to eBay, eBay may set its own cookies and we may earn a commission.

When you open a listing or a search on a marketplace, you leave our site and that marketplace's privacy rules apply.

Transfers outside the European Economic Area

Stripe, Google and Telegram may process some data outside the European Economic Area (EEA). In these cases the transfer relies on an adequacy decision of the European Commission (for example the EU-US Data Privacy Framework, for US companies that have signed up to it) or on the standard contractual clauses approved by the Commission. [TO BE VERIFIED: transfers outside the EEA and safeguards for each provider]

WhatsApp alert messages and your number may also be processed by Meta in the United States. [TO BE CHECKED: safeguards for this transfer (EU-US Data Privacy Framework or standard contractual clauses)]

Photos sent with "Search with a photo" and listings sent with "Analyse this listing" are processed by Anthropic in the United States. [TO BE CHECKED: safeguards for this transfer (EU-US Data Privacy Framework or standard contractual clauses) and the related assessment]

How long we keep data

  • Use without an account (random code and IP hash): 2 days.
  • Account, favourites, searches and alerts: for as long as you keep your account. We delete them when you delete it.
  • Items in "My items" and the log of reminders sent: until you remove them or delete your account.
  • Sign-in sessions: until you sign out; they expire after 2 hours of inactivity and in any case after 24 hours (30 days if you choose “Remember me”).
  • Email verification and password reset codes: 24 hours and 1 hour.
  • WhatsApp number: for as long as it stays linked (1 day if you never verify it). WhatsApp verification code: a few minutes.
  • Listings already notified by an alert: 30 days. Notification queue: 90 days.
  • Contact form messages: up to 12 months.
  • Technical logs: 14 days.
  • Shared lists: until you delete them or delete your account. AI checks of listings: 24 hours (linked to the listing, not to you); daily limit counter: 24 hours.
  • Search results: a few minutes. Listing archive: up to 30 days.
  • Anonymous search statistics: 180 days. Deals of the day snapshots: 8 days.
  • Accounting records for payments (invoices and Stripe records): 10 years, as required by law.

Your rights

Under Articles 15 to 22 of the GDPR you have the right to request access to your data, rectification, erasure, restriction of processing and data portability, and to object to processing based on legitimate interest. You can withdraw any consent at any time.

Some requests you can handle yourself on your account page:

  • download your data as a JSON file;
  • delete your account: deletion is immediate and includes favourites, searches, sessions, alerts, push notification subscriptions and your Telegram and WhatsApp links. We keep only the payment records the law requires us to keep.

For any other request, write to info@rovista.it. We will reply within one month.

If you believe the processing of your data breaches the GDPR, you can lodge a complaint with the Italian data protection authority, the Garante per la protezione dei dati personali (www.garanteprivacy.it), or with the supervisory authority of the EU country where you live or work.

Minimum age

You must be at least 14 years old to create an account, as provided by Article 2-quinquies of the Italian Personal Data Protection Code. The Base paid plan is available to adults only.

Changes to this policy

When we update this policy we change the date at the top. If the changes are significant and you have an account, we will also let you know by email.