Privacy Policy

Who is responsible for your data

The data controller is Vallydia, operated from Spain by its founder. The operating company, Vallydia SL, is in the process of registration; full controller details — registered name, address, and registration number — will be published here once that completes.

For any privacy matter, contact jacob@vallydia.com.

Evidence-change notifications

If you ask us to notify you when the evidence for a specific ingredient changes, we process your email address, the ingredient you subscribed to, the date and exact wording of the consent you gave, the page you subscribed from, your subscription status, and the technical tokens we use to confirm your subscription and to let you unsubscribe in one click.

We use this only to email you about evidence changes for the ingredient you chose. We do not use it for marketing, we do not profile you, and we do not share it. The legal basis is your consent, which you can withdraw at any time — every email carries a one-click unsubscribe link, and you can also contact us. This data is stored in our own EU-hosted database.

Skin-profile quiz

If you complete our skincare quiz and give us your email, we store your email address together with a small number of coarse, derived values: a short cosmetic interest label (for example "barrier care"), a broad literacy band, an overall quiz score, and which quiz you took. We do not store the individual answers themselves — they are used on your device to show your result and to work out those values, and are then discarded. We also keep the date and exact wording of the consent you gave, the page you came from, your subscription status, and the technical tokens used to confirm your subscription and to let you unsubscribe in one click.

If you reached the quiz from one of our own links or a campaign, we also record basic first-party campaign tags (such as the source and campaign name from the link, and the website you arrived from) so we can measure how well our own outreach works. These are marketing tags about how you arrived, not a profile of you; they are recorded first-party only and never shared. The quiz itself sends nothing to any advertising platform: if you have accepted the optional "Advertising" cookies, a content-free signal is sent that contains no email, no answers and no score — see our Cookie Policy.

All four of those values are deliberately coarse. The label is a broad cosmetic content category (for example "barrier care" or "evidence-minded") — a general indication of the kind of content you were exploring, never any of your individual answers. The band and the score are equally blunt, and they are written in non-diagnostic language on purpose: a quiz result suggesting your barrier needs attention is stored as "support", never as "damaged", because none of this is a health assessment or a diagnosis. We store these with your subscription so the follow-up content we send matches what you were reading rather than being generic. They are used first-party only to choose which of our own emails to send you — they are never shared with anyone, and none of them is ever sent to Meta, Google, or any advertising platform as an audience or a tracking signal.

We use this only to send you evidence-based updates tailored to your answers — so what we send fits your skin rather than being everything. We do not use it for advertising, we do not profile you for third parties, and we do not share it. The legal basis is your consent, which you can withdraw at any time via the one-click unsubscribe link in any email or by contacting us. This data is stored in our own EU-hosted database, and if you ask us to erase your data we delete your quiz profile too.

Photo ingredient scan

If you use the ingredient scanner on our homepage, you choose to send a single photo of a product label. We ask for your explicit agreement before the first upload. The photo is passed to our ingredient-reading provider, which extracts the printed ingredient names, and is then discarded — we never store the photo. We use it only to tell you which ingredients on that label we hold a reference entry for; we do not assess your product and we do not grade it. The scanner works in two modes, and they are kept separate:

1) Anonymous, by default. To decide which ingredients the register should cover next, we keep an anonymised record of each scan: the ingredient names the model read from the label, which of our reference entries they matched, and how the scan turned out. This record contains no image and no identifier of any kind — no name, email, account, IP address, or session — so it cannot be traced to you or joined to your other scans; a printed ingredient list is public information and stays non-personal precisely because it is never linked to a person. Legal basis: your consent (Art. 6(1)(a) GDPR), given before each first use; you can simply not use the feature.

2) Subscription, only if you ask for it. Under the result there is an optional field to email the result to yourself. If you enter your email and tick the box, we store your email address together with the register actives found on that label — and we add to that list each time you scan again — so we can email you the result and updates about the ingredients you scan. This is a separate record from the anonymous one above; the anonymous scans are never linked to your address, then or later. We pass your email, language, those actives, and any campaign tags to our email provider (Brevo) to send the message and manage the list — never the photo, and never a product grade. Legal basis: your consent (Art. 6(1)(a) GDPR). You can unsubscribe in one click from any email, and you can ask us to erase your data at jacob@vallydia.com, which deletes your scan subscription and the linked ingredient list — including any earlier scans stitched to it (below). We keep it while your subscription is active.

3) Remembering scans between visits — only if you accepted advertising cookies. If, and only if, you have accepted the advertising cookie category, we set a cookie (atelier_scan_id) that holds a random, meaningless id and no data of any kind, kept for up to a year. Its sole purpose is to gather the register actives from scans you make on different visits, so that if you later subscribe, the ingredients you scanned before subscribing can be added to your list. Nothing is tied to your identity unless and until you subscribe; if you never accept advertising cookies, this cookie is never set and no such stitching happens, and we never link previously anonymous scans to anyone retroactively. Legal basis: your consent (the advertising cookie category). You can clear it by deleting cookies or withdrawing advertising consent in Cookie settings, and asking us to erase your data removes these stitched scans along with your subscription.

Legal basis for each use

Evidence-change notifications — your consent (Art. 6(1)(a) GDPR). You give it explicitly when you subscribe, and you can withdraw it at any time.

Orders and sales (once the shop is live) — performance of the sales contract (Art. 6(1)(b)) and, for invoicing and tax records, compliance with a legal obligation (Art. 6(1)(c)). We are not selling yet.

Anonymous usage signals — aggregate, non-identifying counts, together with the anonymised list of ingredient names read by the homepage scanner, which we use to decide what the reference should cover. These are not linked to your identity or to each other.

Scanner subscription (optional) — your consent (Art. 6(1)(a) GDPR), given with the checkbox under a scan result; it covers emailing you that result and updates about the ingredients you scan. Withdraw any time via the one-click unsubscribe in any email, or by contacting us.

First-party measurement of our own pages — our legitimate interest (Art. 6(1)(f)). To see how many people open a quiz, start it, and reach the end, we count those steps ourselves. To avoid counting the same visit several times, those particular counts are tagged with the anonymous session id already stored in the essential atelier_sid cookie — so they are pseudonymous rather than fully anonymous. They are never linked to your email or your quiz answers, they stay first-party, and they are never sent to an advertising platform. This measurement is part of running the site and works whether or not you accept analytics cookies.

Correspondence — our legitimate interest (Art. 6(1)(f)) in answering the enquiries you send us.

Processors

We rely on a small number of service providers that process data on our behalf, each under a data-processing agreement:

Vercel (website hosting), Neon (our database, hosted in the EU / Frankfurt), Stripe (payments and tax — once the shop is live), Resend (transactional email only — subscription confirmations and evidence notices), Brevo (Sendinblue SAS, France — marketing email to quiz and scanner subscribers; for quiz subscribers it receives your email address, language, the coarse interest label, which quiz you took, and campaign tags — never your answers, score, or any skin data; for scanner subscribers it receives your email address, language, the register actives found on labels you scanned, and campaign tags — never the photo or a product grade), Google Ireland Ltd (Google Analytics 4 / Google Ads — see the Cookies section below for what loads when), Meta Platforms Ireland Limited (advertising-effectiveness measurement via the Meta Pixel and the server-side Meta Conversions API; on a quiz or scan subscription it receives a one-way SHA-256 hash of your email plus technical identifiers such as your IP address and browser type, so it can measure and deduplicate the conversion, and it never receives your answers, score, skin data, or your raw email), Anthropic (reads the label photo you submit to the ingredient scanner to extract the ingredient names; the photo is processed once and not stored — see "Photo ingredient scan" above), and a fulfilment provider / 3PL (once the shop is live). We do not add providers we are not actually using.

Cookies

We keep cookies to a minimum. Essential cookies are always on; analytics and advertising cookies are off by default, and rejecting is as easy as accepting. You can change or withdraw your choice at any time from the link in the footer.

With your consent to the off-by-default "Analytics" group, we load Google Analytics 4 (Google Ireland Ltd) for aggregated, IP-anonymised measurement of page views (path and title only). With your consent to the off-by-default "Advertising" group, we load the Meta Pixel and the Google Ads remarketing tag to measure advertising and build audiences. These browser tags never receive your quiz answers, score, or any skin or health data — only a page view and a content-free "lead" signal (the browser Meta Pixel does not receive your email either; the separate server-side measurement described just below sends a hashed email, and nothing else about you) — Google Consent Mode keeps everything denied and cookieless until you choose, and you can withdraw consent at any time. Some data may be processed in the US under the EU–US Data Privacy Framework and Standard Contractual Clauses. Full detail is in our Cookie Policy.

One detail worth stating plainly, because it is easy to get wrong: the Google tag itself is loaded on page view so that Consent Mode can hold everything in a denied, cookieless state. This means Google receives your IP address and browser type before you choose, but sets no cookies and records no analytics until you accept. The Meta Pixel is not loaded at all unless you accept Advertising.

Server-side advertising attribution (Meta Conversions API): when you tick the consent box under a quiz or scan result, we also send that one conversion to Meta from our own server, in addition to the browser Meta Pixel. This server-side signal carries a one-way SHA-256 hash of your email address plus technical identifiers (your IP address and browser type) so Meta can match the conversion and deduplicate it against the browser signal; it never carries your quiz answers, score, skin data, or your raw email. Its only purpose is measuring how well our advertising performs. The legal basis is your consent (the box on the form), Meta Platforms Ireland Limited acts as the recipient for this measurement, and you can withdraw consent at any time by contacting us. This is a separate channel from the anonymous, aggregate usage counts we keep in our own database, which are never linked to your email.

Your rights

Under the GDPR you have the right to access your data, to have it corrected or erased, to restrict or object to its processing, and to data portability. Where we rely on your consent — as we do for evidence-change notifications — you have the right to withdraw that consent at any time.

For subscriptions, withdrawing consent is as simple as the one-click unsubscribe link in any email, or contacting us at jacob@vallydia.com.

If you believe we have mishandled your data, you can complain to the Spanish supervisory authority: Agencia Española de Protección de Datos (AEPD), www.aepd.es.

Retention

Subscriptions — kept while active. When you unsubscribe, the record is marked unsubscribed and minimised.

Order and tax records (once the shop is live) — kept for the period Spanish tax and accounting law requires (exact period to be confirmed with our advisers).

Everything else — kept no longer than necessary for the purpose it was collected.