Privacy Policy

Last updated 08/24/2026

Thank you for using WhoReallyOwnsIt ("Company," "we," "us," "our"). If you have questions, email info@whoreallyownsit.com.

1. What information do we collect?

Information you give us. When you scan or enter a barcode, we receive the barcode number. If you send a correction, we store the barcode, the issue type, and what you wrote. We do not ask for your name, email, or payment details.

Information we collect automatically. IP address, browser type, the time of a lookup, and how the request reached the server. We use this for security, rate limiting, and keeping the site working.

We keep server logs and lookup records on our side. We do not use third-party analytics cookies.

Scan history is stored in your browser (local storage) so you can reopen recent results on this device. That data stays on your device unless you clear it.

2. How do we use your information?

• Look up products, brands, and company ownership from public databases
• Operate and maintain the website
• Detect and prevent fraud or misuse
• Comply with legal obligations

3. Our legal bases for processing (GDPR / UK-GDPR)

We process personal data under one or more of the following bases: (a) Consent, (b) Performance of a contract, (c) Legal obligation, (d) Legitimate interests (running the lookup service and stopping abuse).

4. When do we share your information?

We do not sell your personal information. We share it only with:

• Service providers that help us run the site (for example hosting)
• Public data sources used for lookups: Open Food Facts (barcode), Wikidata, and GLEIF (company names)

Each provider is expected to keep data confidential and use it only to provide their service.

5. Cookies and similar technologies

When you first visit, we show a banner about cookies. You can change this later with Cookie settings in the footer. Full details are in our Cookie Policy.

6. How long do we keep data?

Lookup logs (IP, barcode, time) are kept to limit abuse and see how the service is used. Cached product and company results are stored so repeat lookups are faster, then expire on a rolling schedule. Correction submissions are kept so we can review them. Scan history in your browser stays until you clear it.

7. How do we protect your data?

We use TLS when the site is served over HTTPS, least-privilege access on the server, and a captcha on correction submissions to block automated spam.

8. Your privacy rights

• GDPR: Access, rectify, erase, restrict, data portability, object
• CCPA/CPRA: Know, delete, correct, opt-out of "sale/share," limit sensitive data

Email info@whoreallyownsit.com to exercise any right.

9. Do-Not-Track signals

We do not currently respond to browser "DNT" signals because no industry standard exists.

10. Your California privacy rights

California residents may request a list of third parties to whom we disclosed personal information for direct-marketing purposes in the preceding calendar year. We do not disclose personal information for third-party direct marketing. Send requests to the address below.

11. Updates to this policy

We may update this notice. The "Last updated" date reflects the latest revision. Material changes will be posted on this page.

12. How to contact us

Data Protection Officer: Mike
Email: info@whoreallyownsit.com