Minimal data. Clear choice.

Controller and public-site scope

The data controller is Mariusz Mikolajski. Privacy requests can be sent to contacto@trawaromero.com.

The public site does not require an account and does not ask for your name, email address, phone number, postal address, payment details, diagnosis, medical record, prescription number, PESEL or precise location. Do not enter private medical or identifying information in a public search field.

Optional first-party analytics

Analytics is off until you select “Accept analytics”. Consent is the basis for this processing. Its purpose is to understand overall use of the site and improve it. If you consent, the site records aggregate page-view counts, an approximate country, a broad device category (mobile, tablet or desktop) and active visible-page duration. The IP address available for the request is used only to look up an approximate country in a local copy of the DB-IP Lite database and is not saved in analytics records.

Analytics does not receive or retain page addresses, referrers, search or strain terms, precise location, raw IP addresses or a persistent visitor identifier. A random token exists only in this page's memory and server memory for up to 30 minutes so duration updates can be joined to the initial view.

Browser storage and analytics retention

Analytics does not set cookies, and the site does not use an account-session, guest-quota or visitor-counter cookie. The consent choice, notice version and choice time are stored in localStorage for up to six months. No analytics token or visitor identifier is stored in the browser. Aggregate analytics records are retained for up to 90 days. This 90-day period applies to analytics records, not contact email. The browser may also retain display preferences, a saved pharmacy plan, favourites, a temporary comparison selection and cached site files; you can inspect or clear these through browser settings.

Contact email

If you voluntarily email Trawa Romero, the owner processes the message to respond and manage your request. Where appropriate, the basis is the legitimate interest in answering requests and managing correspondence. The OVH mailbox stores the sender's name or address, subject and correspondence.

The private owner panel loads only metadata for the latest 50 messages into temporary server memory. It does not download email bodies or images and does not perform automatic AI analysis or send automatic replies. Mailbox correspondence is kept for as long as needed to resolve the request and meet applicable obligations; the owner controls its deletion. Do not email health documents, a PESEL number or other unnecessary sensitive information.

Hosting, country data and external links

OVH provides hosting infrastructure and may process the technical request and security data necessary to deliver and protect the service under its applicable terms. Approximate country lookup uses DB-IP Lite, licensed under CC BY 4.0; the lookup runs locally on the server.

Public authorities, pharmacies, source websites and social platforms linked from Trawa Romero are independent destinations with their own notices. The price checker loads OpenStreetMap tiles from tile.openstreetmap.org, which receives the IP address and technical request information needed to deliver them. Directions open Google Maps, Apple Maps or OpenStreetMap only after you select a link. We do not request device location.

Your choices and rights

You can reject analytics and still use the public site. Use the permanent “Privacy preferences” button to review your choice or withdraw consent at any time. Withdrawal stops new analytics and deletes any current in-memory token; it does not affect the lawfulness of processing completed before withdrawal.

Where applicable, you may request access, correction, deletion or restriction, object to processing, or lodge a complaint with Poland's Personal Data Protection Office (UODO). Because analytics is deliberately non-identifying, it may not be possible to connect an aggregate record to you.