Privacy Policy
Privacy Policy
This Privacy Policy explains how NootropicsIndex collects, uses, stores, shares and protects personal data when you use our website, search tools, product comparison pages, vendor listings, articles, account features, stacks, links and related services (collectively, the "Website").
This Privacy Policy is intended to be clear and transparent. It is not a contract. It explains how we handle personal data and what rights may apply to you.
1. Who we are
The Website is operated by Webjin, a sole proprietorship registered in the Netherlands with the Dutch Chamber of Commerce under registration number 68495439.
- Trading name / website name: NootropicsIndex
- Operator: Webjin
- Chamber of Commerce number: 68495439
- VAT identification number: NL001934207B24
- Email: [email protected]
For the purposes of the General Data Protection Regulation ("GDPR"), Webjin is the controller of personal data processed through the Website, unless stated otherwise.
In this Privacy Policy, "NootropicsIndex", "Webjin", "we", "us" and "our" refer to the operator of the Website.
2. Scope of this Privacy Policy
This Privacy Policy applies to personal data processed through the Website.
The Website may include:
- product and vendor search functionality;
- product comparison pages;
- vendor listings;
- articles and informational content;
- user accounts;
- user-created stacks;
- comments, ratings, reviews, notes or similar user content;
- currency and region settings;
- affiliate links, sponsored links and referral links;
- contact forms, email communications and other support channels.
This Privacy Policy does not apply to third-party websites, vendors, manufacturers, stores, payment processors, affiliate networks or other external websites that you access through links on the Website. Those third parties process personal data under their own privacy policies.
3. Important health and privacy notice
NootropicsIndex is an informational search and comparison website. We are not a healthcare provider, pharmacy, physician, pharmacist, medical service or emergency service.
The Website is not designed to collect medical records, medical diagnoses, treatment information or other detailed health information. You should not submit sensitive health information, medical records, prescription information, test results or other confidential medical information through the Website.
However, because the Website concerns nootropics, supplements, herbs, related products and user-created stacks, some information you provide or generate may reveal interests related to health, wellness, cognitive performance or supplement use. Depending on the context, this may be sensitive personal data.
If you voluntarily include health-related information in public content, such as a stack, review, comment, note or profile, you understand that such information may become publicly visible and may be indexed by search engines or accessed by other users.
4. Personal data we collect
We collect personal data in the ways described below.
Account data
If you create an account, we may collect and process:
- email address;
- username or display name;
- password hash or authentication credentials;
- account settings;
- login history;
- account creation date;
- account status;
- preferences linked to your account.
We do not store your password in plain text.
Contact and communication data
If you contact us, we may process:
- your name, if provided;
- your email address;
- the content of your message;
- attachments or supporting information you send;
- technical metadata related to the communication;
- our responses to you.
We use this information to respond to your request, handle support, deal with legal or compliance matters and maintain business records.
User content
The Website may allow users to create, upload, submit, publish or share content, including:
- stacks;
- comments;
- reviews;
- ratings;
- notes;
- product suggestions;
- vendor suggestions;
- text, links or other materials.
User content may include personal data if you choose to include it. Public user content may be visible to other users, visitors and search engines.
You should not include sensitive personal data, medical records, confidential information or information about other people in user content.
Search, comparison and usage data
When you use the Website, we may process information about how you interact with the Website, such as:
- search queries;
- products viewed;
- vendors viewed;
- stacks viewed or created;
- filters used;
- sorting preferences;
- selected currency;
- selected region or shipping region;
- saved items;
- pages visited;
- links clicked;
- time spent on pages;
- referring pages;
- navigation paths through the Website.
This data helps us provide, maintain, secure and improve the Website.
Technical and log data
When you visit the Website, our servers, security tools, analytics tools or service providers may automatically collect technical data, including:
- IP address;
- browser type and version;
- device type;
- operating system;
- language settings;
- approximate location derived from IP address;
- date and time of access;
- pages visited;
- referring URL;
- error logs;
- security logs;
- cookie identifiers or similar identifiers;
- other diagnostic and performance data.
We use this information for security, fraud prevention, analytics, debugging, performance monitoring and service improvement.
Cookies and similar technologies
We may use cookies, pixels, local storage, tags, scripts, SDKs or similar technologies to operate and improve the Website.
These technologies may be used for:
- essential website functionality;
- account login and authentication;
- security and fraud prevention;
- remembering preferences, such as currency and region;
- analytics and performance measurement;
- affiliate tracking;
- measuring outbound vendor clicks;
- understanding how users interact with the Website;
- improving product and vendor search results.
Some cookies are necessary for the Website to function. Other cookies, such as analytics, affiliate tracking, advertising or similar tracking technologies, may require your consent depending on your location and the technology used.
Where required by law, we will request your consent before placing non-essential cookies or similar tracking technologies. You can manage cookies through your browser settings and, where available, through the Website's cookie banner or cookie settings.
We also operate first-party, self-hosted analytics to understand page views, searches, filters, sort choices, product comparison actions, outbound content clicks, affiliate link performance, client-side errors and rate-limit diagnostics. These analytics may use a pseudonymous visitor ID and session ID stored by NootropicsIndex only. Our server stores hashed versions of those IDs, not the raw ID values. When a visitor ID is unavailable, some statistics may use an estimated visitor key derived from IP address and user agent.
Affiliate and outbound link data
The Website may contain affiliate links, sponsored links, referral links and other monetised links to third-party vendors or affiliate networks.
When you click an affiliate or vendor link, we, the vendor or an affiliate network may process data such as:
- the page from which you clicked;
- the destination vendor;
- the date and time of the click;
- IP address;
- browser and device information;
- affiliate ID;
- click ID;
- referral URL;
- cookie identifiers;
- transaction status or commission information if a purchase is attributed to our link.
NootropicsIndex does not process your payment card information or shipping information when you purchase from a third-party vendor.
A vendor or affiliate network may send us limited conversion or commission data, such as whether a qualifying purchase occurred, the order value, commission amount, product category, transaction status, refund status or click identifier. This information is usually limited and may not directly identify you to us.
Newsletter and marketing data
If you subscribe to newsletters, alerts or marketing communications, we may process:
- email address;
- name, if provided;
- subscription status;
- consent records;
- email open and click data, where enabled;
- unsubscribe preferences.
You can unsubscribe from marketing emails using the unsubscribe link in the email or by contacting us at [email protected].
Data from third parties
We may receive limited data from third parties, including:
- affiliate networks;
- analytics providers;
- security providers;
- email service providers;
- hosting providers;
- vendors;
- public sources;
- anti-spam or fraud prevention tools.
This may include technical data, click data, conversion data, aggregated analytics, abuse reports, security alerts or publicly available vendor/product information.
5. Personal data we do not intend to collect
We do not intend to collect:
- medical records;
- diagnosis or treatment information;
- prescription information;
- detailed health histories;
- government identification numbers;
- financial account numbers;
- payment card details;
- precise geolocation;
- biometric data;
- personal data of children.
You should not submit this type of information through the Website.
If you submit sensitive information voluntarily, we may delete, restrict or moderate it where appropriate.
6. How we use personal data
We may use personal data for the following purposes:
- to provide and operate the Website;
- to create and manage user accounts;
- to authenticate users;
- to provide search and comparison functionality;
- to display products, vendors, prices, links and stacks;
- to remember preferences such as currency and region;
- to publish and manage user content;
- to respond to contact requests and support messages;
- to send account, security, administrative or legal notices;
- to send newsletters or marketing communications where permitted;
- to analyse and improve the Website;
- to monitor performance and fix errors;
- to prevent fraud, spam, abuse and security incidents;
- to measure affiliate link performance;
- to track qualifying affiliate referrals and commissions;
- to comply with legal obligations;
- to enforce our Terms and Conditions;
- to protect our rights, users, vendors and third parties;
- to handle complaints, disputes and legal claims.
We do not use personal data to provide medical advice, diagnosis, treatment or healthcare services.
7. Legal bases for processing under GDPR
Where GDPR applies, we process personal data using one or more of the following legal bases.
Performance of a contract
We process personal data where necessary to provide the Website and account features requested by you, including:
- account creation and login;
- account management;
- saved preferences;
- user-created stacks;
- user content features;
- support related to your account or use of the Website.
Legitimate interests
We process personal data where necessary for our legitimate interests, provided those interests are not overridden by your rights and freedoms.
Our legitimate interests include:
- operating and improving the Website;
- maintaining website security;
- preventing fraud, spam and abuse;
- debugging and fixing errors;
- understanding aggregated website usage;
- maintaining business records;
- measuring performance of non-intrusive analytics;
- protecting our legal rights;
- managing affiliate relationships;
- ensuring compliance with affiliate programme requirements;
- preventing manipulation of rankings, links, traffic or commissions.
Consent
We rely on consent where required by law, including for:
- non-essential cookies;
- tracking technologies;
- certain analytics technologies;
- email marketing;
- processing voluntarily submitted sensitive data where explicit consent is required;
- certain affiliate tracking technologies where consent is required.
You can withdraw consent at any time. Withdrawal of consent does not affect processing that occurred before consent was withdrawn.
Legal obligation
We may process personal data where necessary to comply with legal obligations, including:
- tax and accounting obligations;
- data protection obligations;
- consumer protection obligations;
- regulatory requests;
- lawful requests from authorities;
- recordkeeping obligations;
- obligations relating to illegal content notices or user complaints.
Legal claims
We may process personal data where necessary to establish, exercise or defend legal claims.
8. Sensitive personal data
We do not ask you to provide sensitive personal data.
However, user-created stacks, comments, reviews, notes or support messages may reveal health-related interests or other sensitive information if you choose to include such information.
If you voluntarily provide sensitive personal data:
- we may process it to provide the feature or respond to your request;
- we may process it based on your explicit consent where required;
- public user content may be treated as information you have chosen to make public;
- we may restrict, delete or moderate sensitive content where appropriate;
- you may contact us to request deletion or restriction, subject to legal and technical limitations.
Do not include sensitive personal data in public content unless you understand and accept the privacy risks.
9. Public user content
Some parts of the Website may be public.
If you publish a stack, comment, review, rating, note or similar content publicly, the following may be visible:
- your username or display name;
- the content you submit;
- the date of publication or update;
- associated products, vendors or nootropics;
- links or other information you include.
Public content may be viewed by other users, visitors, vendors, search engines and third-party crawlers. Even if you later delete or edit public content, copies may remain in backups, caches, search engine indexes, screenshots or third-party archives.
Do not publish personal data or sensitive information that you do not want to be public.
11. Sharing personal data
We may share personal data with the following categories of recipients.
Hosting and infrastructure providers
We use hosting, server, database, storage, content delivery, performance and infrastructure providers to operate the Website.
Analytics and performance providers
We may use analytics and performance tools to understand how the Website is used, identify errors and improve the Website.
Security, anti-spam and fraud prevention providers
We may use third-party tools to detect spam, abuse, malicious traffic, unauthorised access, bot activity, fraud or security incidents.
Affiliate networks and vendors
When you click an affiliate link or vendor link, relevant click and referral data may be shared with affiliate networks, vendors or tracking providers.
Third-party vendors and affiliate networks act under their own privacy policies when you interact with their websites, purchase products or provide information to them.
Email and communication providers
We may use email service providers, newsletter tools or communication platforms to send account emails, support responses, newsletters or administrative messages.
Professional advisers
We may share personal data with accountants, lawyers, consultants, insurers or other professional advisers where necessary for business, compliance, legal or accounting purposes.
Authorities and legal parties
We may disclose personal data where required or permitted by law, including to courts, regulators, law enforcement authorities or other parties involved in legal proceedings.
Business transfers
If Webjin or NootropicsIndex is involved in a merger, acquisition, restructuring, sale of assets, transfer of business or similar transaction, personal data may be transferred as part of that transaction, subject to applicable law.
12. Third-party websites and vendors
The Website contains links to third-party websites, including vendors, manufacturers, stores, payment processors, affiliate networks and other external resources.
When you click a third-party link, you leave the Website. The third party may collect personal data from you, including information about your visit, purchase, payment, delivery address, account, device and interactions.
We do not control third-party privacy practices and are not responsible for how third parties process personal data. You should read the privacy policy of the relevant third party before providing personal data or making a purchase.
13. International transfers
We are based in the Netherlands, but some service providers, affiliate networks, vendors or technology providers may process personal data outside the European Economic Area, including in the United States or other countries.
Where required by law, we use appropriate safeguards for international transfers, such as:
- adequacy decisions;
- Standard Contractual Clauses;
- contractual safeguards;
- technical and organisational measures;
- other legally recognised transfer mechanisms.
No method of international data transfer is risk-free. We aim to use providers and safeguards appropriate to the nature of the processing.
14. Data retention
We retain personal data only for as long as reasonably necessary for the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law.
Retention periods depend on the type of data, the purpose of processing, legal requirements, security needs and whether the data is needed for disputes or legal claims.
In general:
- account data is retained while your account is active;
- account data may be retained for a reasonable period after account deletion where needed for security, legal, backup or dispute purposes;
- public user content may remain available until deleted, removed or moderated;
- support and contact messages may be retained for as long as needed to handle the request and maintain business records;
- technical logs are retained for security, debugging and operational purposes for a limited period;
- cookie consent records may be retained to demonstrate compliance;
- affiliate click and commission records may be retained for reporting, fraud prevention, accounting and legal purposes;
- data required for legal, tax or accounting purposes may be retained for the period required by applicable law.
Where possible, we may anonymise or aggregate data so that it no longer identifies you.
15. Security
We use reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.
These measures may include:
- access controls;
- password hashing;
- encryption in transit where appropriate;
- secure hosting;
- logging and monitoring;
- backups;
- spam and abuse prevention;
- limited access to personal data;
- security updates;
- incident response procedures.
No website, server, database or transmission method is completely secure. We cannot guarantee absolute security.
If you believe your account or personal data has been compromised, contact us at [email protected].
16. Your privacy rights
Depending on your location and applicable law, you may have the right to:
- request access to your personal data;
- request correction of inaccurate or incomplete personal data;
- request deletion of your personal data;
- request restriction of processing;
- object to processing based on legitimate interests;
- object to direct marketing;
- request data portability;
- withdraw consent at any time;
- lodge a complaint with a supervisory authority;
- request information about how your personal data is processed.
To exercise your rights, contact us at: [email protected]
We may need to verify your identity before responding. We will respond within the time required by applicable law.
Your rights may be subject to legal limits. For example, we may retain certain data where necessary for legal obligations, security, fraud prevention, dispute resolution or legal claims.
17. GDPR rights for users in the EU, EEA and UK
If you are located in the European Union, European Economic Area or United Kingdom, you may have the following rights under applicable data protection law:
- right of access;
- right to rectification;
- right to erasure;
- right to restriction of processing;
- right to data portability;
- right to object;
- right to withdraw consent;
- right to lodge a complaint with a supervisory authority.
If you are in the Netherlands, you may contact the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens. You may also contact your local data protection authority if you live in another EU or EEA country.
We encourage you to contact us first so we can try to resolve your request directly.
18. California and U.S. state privacy rights
Certain U.S. state privacy laws, including California privacy law, may provide additional rights to residents of those states.
Where such laws apply, you may have the right to:
- know what categories of personal information we collect;
- know the purposes for which we use personal information;
- know the categories of sources from which personal information is collected;
- know the categories of third parties with whom personal information is shared;
- access personal information;
- correct inaccurate personal information;
- delete personal information;
- opt out of sale or sharing of personal information where applicable;
- limit the use or disclosure of sensitive personal information where applicable;
- not be discriminated against for exercising privacy rights.
We do not sell personal information for money.
Some analytics, affiliate tracking, advertising or similar technologies may be considered "sharing" or targeted advertising under certain U.S. privacy laws. Where required, we will provide a way to opt out.
You may contact us at [email protected] to exercise applicable U.S. privacy rights.
19. Global Privacy Control and similar signals
Where legally required and technically feasible, we will honour recognised browser-based opt-out preference signals, such as Global Privacy Control, for applicable opt-out rights.
Because technical standards and legal requirements vary, these signals may not apply to all processing activities or all jurisdictions.
20. Marketing communications
We send marketing emails only where permitted by law.
If you subscribe to a newsletter or other marketing communication, we may use your email address to send relevant updates, articles, product comparison information, vendor-related information or other Website-related content.
You can unsubscribe at any time by using the unsubscribe link in the email or by contacting us at [email protected].
We may still send non-marketing messages, such as account, security, legal or administrative notices.
21. Automated decision-making and profiling
We do not use personal data to make decisions that produce legal or similarly significant effects about you through solely automated processing.
The Website may use automated systems, algorithms or technical rules to:
- rank search results;
- sort products or vendors;
- detect spam or abuse;
- personalise results based on settings such as currency or region;
- measure website performance;
- analyse aggregated usage patterns.
These processes are used to operate and improve the Website. They are not intended to make legal, medical, financial or similarly significant decisions about you.
22. Children's privacy
The Website is not intended for children or anyone under the age of 18.
We do not knowingly collect personal data from anyone under 18. If you believe that a person under 18 has provided personal data to us, contact us at [email protected] and we will take appropriate action.
23. Account deletion and user content removal
You may request deletion of your account by contacting us at: [email protected]
Account deletion may not immediately remove all data from backups, logs, legal records or third-party caches.
If you have published public user content, such as stacks, comments, reviews or notes, we may delete, anonymise or retain that content depending on the nature of the content, technical feasibility, legal requirements and the integrity of public discussions or Website functionality.
Search engines or third parties may continue to display cached or copied versions of content after it has been removed from the Website.
24. Data accuracy
You are responsible for ensuring that personal data you provide is accurate and up to date.
If you believe personal data we hold about you is inaccurate or incomplete, contact us at [email protected].
25. Do Not Track
Some browsers offer "Do Not Track" signals. There is no uniform industry standard for responding to such signals.
We do not currently respond to all Do Not Track signals. Where legally required, we may respond to recognised opt-out preference signals, such as Global Privacy Control.
26. Changes to this Privacy Policy
We may update this Privacy Policy from time to time.
The updated version will be posted on this page with a revised "Last updated" date. If changes are material and you have an account or have provided contact details, we may take reasonable steps to notify you.
Your continued use of the Website after the updated Privacy Policy is posted means that you acknowledge the updated Privacy Policy.
27. Contact
For questions, requests or complaints about this Privacy Policy or how we process personal data, contact:
NootropicsIndex / Webjin
Email: [email protected]
Chamber of Commerce number: 68495439
VAT identification number: NL001934207B24