PLN EUR USD

MilitariaRadar Privacy Policy

This is an English translation provided for information only. The Polish version is the only legally binding version. Polish original

Version of 4 November 2026.

Draft — requires review by a lawyer before the public launch. Fields in square brackets must be completed before publication.

1. In brief

  • You can search for listings without an account and without providing any data at all.
  • We do not use advertising or analytics cookies and we do not profile visitors.
  • When you click “Go to shop”, we record only anonymous information about the click-through: which listing, which shop and when. In doing so, we do not record your IP address or any identifier of the person.
  • We use only strictly necessary cookies: a session cookie, a cookie securing forms and a cookie storing the selected currency.
  • We load fonts and graphics from our own server — the website does not connect to Google or any other external services.
  • Once we launch accounts, we will process your e-mail address and account settings solely in order to maintain your account and send the notifications you have requested.
  • We do not sell data and we do not pass users’ personal data to shops.

2. Data controller

The controller of personal data is Łukasz Orzechowski, a natural person not conducting business activity (the “Controller”, “we”).

In matters concerning personal data, you can write to kontakt@militariaradar.pl. The Controller has not appointed a data protection officer.

This Privacy Policy applies to the MilitariaRadar service available at https://militariaradar.pl (and also at https://militariaradar.com) (the “Service”). Capitalised terms have the meanings given to them in the Terms of Service of the Service.

3. Browsing the Service without an account

Server logs. Like any website, the Service runs on a server that automatically records information about connections: the IP address, the date and time, the address of the page opened, the response code, the address of the referring page and information about the browser and operating system. The logs are kept by the hosting provider on our behalf.

  • Purpose: ensuring the operation and security of the Service, and detecting abuse and errors.
  • Legal basis: our legitimate interest (Article 6(1)(f) GDPR).
  • Retention period: [OKRES PRZECHOWYWANIA LOGÓW — do potwierdzenia u dostawcy hostingu].

Session. To make the website work properly and to protect it against request forgery, your browser receives a session cookie. On the server side, we store a session file containing its identifier and the technical data needed for the website to work (without your IP address and without information about your browser).

  • Purpose: maintaining the session and securing forms.
  • Legal basis: our legitimate interest (Article 6(1)(f) GDPR).
  • Retention period: the session expires after 2 hours of inactivity; records of expired sessions are deleted as part of periodic clean-up, no later than after [7] days.

Click-throughs to shops. When you click “Go to shop”, we record the listing and shop identifiers, the time of the click-through, the type of page from which the click-through was made and a flag indicating whether the click-through was made by an automated agent (e.g. a search engine crawler). In doing so, we do not record your IP address, browser identifier or account data. Such a record does not make it possible to identify a person and is not personal data. It is used for aggregate statistics for us and for shops.

Currency selection. We remember the currency you have selected (PLN, EUR or USD) in a cookie in your browser. We do not link this information to you as a person.

Going to the shop’s website. The link to a shop contains a parameter informing the shop that you came from the Service (utm_source=militariaradar). Once you go to the shop’s website, your data is processed by the shop as a separate controller, in accordance with its own privacy policy.

4. Fonts

The fonts used in the Service (Barlow, Barlow Condensed, JetBrains Mono — free SIL Open Font License) are stored on our server. Loading them does not result in any data being transferred to third parties.

5. Contact, reports and complaints

When you write to us by e-mail, report content (e.g. an infringement of rights, a replica or an error in a listing), or submit a complaint or an appeal, we process the data provided in the message: usually your first name and surname or name, e-mail address, the content of the message and any attachments.

  • Purpose and legal basis: replying to your message — our legitimate interest (Article 6(1)(f) GDPR); handling a complaint concerning the Services — performance of a contract (Article 6(1)(b) GDPR); handling a report of illegal content and an appeal — a legal obligation under the Digital Services Act (Article 6(1)(c) GDPR) to the extent that the Act applies, and otherwise our legitimate interest; establishing, pursuing and defending claims — our legitimate interest (Article 6(1)(f) GDPR).
  • Retention period: ordinary correspondence — up to 12 months after the matter is closed; reports, complaints and appeals — up to 3 years after the matter is closed and, if a dispute is pending, until it is finally resolved.
  • Providing data is voluntary, but without an e-mail address we cannot reply to you or inform you of our decision. A report of illegal content should include the details of the person submitting it, subject to the exceptions provided for by law.

If a report concerns a shop’s listing, we may pass information about the report and its grounds to that shop, but we do not disclose the reporting person’s data without their consent, unless the law requires us to do so.

6. Account and e-mail notifications (once accounts are launched)

This section will apply once we make account registration available in the Service.

When maintaining your account, we process: your e-mail address, display name (if you provide one), your password in the form of an encrypted hash (we do not know your password), the selected currency, the list of watched listings with your notes, saved searches, settings and the history of notifications sent, the date of acceptance of the Terms of Service and login dates.

  • Purpose and legal basis: maintaining the account and sending the notifications you have requested (new listings, changes in prices and statuses) — performance of a contract (Article 6(1)(b) GDPR); securing the account and preventing abuse — our legitimate interest (Article 6(1)(f) GDPR).
  • Retention period: until the account is deleted. We delete unconfirmed accounts after 30 days. We may delete accounts that have not been used for 24 months after giving prior notice. After an account is deleted, data may remain in backups for up to [30] days.
  • Providing an e-mail address is a condition of creating an account.
  • Each notification contains a link to switch it off. Notifications are not advertising. We will send a newsletter or other commercial information only if you give separate consent to this (Article 6(1)(a) GDPR), which you may withdraw at any time.

Only adults may create an account.

7. Data of shop representatives

We contact shops regarding consent to the presentation of their listings, correspond with them and handle withdrawals of consent. For this purpose, we process the contact details of persons representing shops: first name and surname, business e-mail address and telephone number, position and the content of correspondence.

  • Source of data: data provided by the shop or publicly available on the shop’s website (e.g. in the “Contact” or “Impressum” section) or in business registers.
  • Purpose and legal basis: establishing and maintaining cooperation, documenting consent and its scope, handling withdrawal of consent — our legitimate interest (Article 6(1)(f) GDPR).
  • Retention period: for the duration of cooperation and then for up to 3 years. If a shop does not wish to be contacted or withdraws its consent, we retain only the domain and the e-mail address in order to respect that decision.

8. Personal data in the content of listings

Our robot (MilitariaRadarBot) collects information about listings from shops’ websites, not about people. It does not collect data about people visiting the shops. However, an item description sometimes contains personal data, e.g. the name of a former owner in the description of the item’s provenance. Such data originates from the shop, and we publish at most an excerpt of the description of up to 300 characters. The legal basis is our legitimate interest in operating a search engine for collectors’ listings (Article 6(1)(f) GDPR). If your data appears in a listing presented in the Service, you can request its erasure or object by writing to kontakt@militariaradar.pl. We delete the data when the listing disappears from the Service.

9. Who we share data with

Data may be received only by entities that help us run the Service and act on our behalf, and by entities authorised by law:

  • hosting provider: dhosting.pl Sp. z o.o., ul. Pamiętna 14B/2, 02-972 Warszawa — maintenance of the server, database, logs and backups;
  • e-mail provider: dhosting.pl (the same provider as the Service’s hosting) — sending replies, account messages and notifications;
  • Google (Google Ireland Limited and Google LLC) — to the extent of downloading fonts as described in section 4;
  • [podmioty świadczące nam obsługę prawną, księgową lub informatyczną — jeżeli dotyczy];
  • courts, law enforcement authorities and other public authorities — where required by law.

We do not pass users’ personal data to shops. Shops receive only aggregate click-through statistics and information that the visitor came from the Service.

10. Transfers of data outside the European Economic Area

As a rule, we process data within the European Economic Area. [Jeżeli dostawca poczty e-mail przetwarza dane poza EOG — wskazać państwo i podstawę przekazania.]

11. Your rights

You have the right to:

  • access your data and obtain a copy of it (Article 15 GDPR);
  • rectification of your data (Article 16 GDPR);
  • erasure of your data (Article 17 GDPR);
  • restriction of processing (Article 18 GDPR);
  • portability of data processed on the basis of a contract or consent (Article 20 GDPR);
  • withdraw consent at any time, without affecting the lawfulness of processing carried out before its withdrawal — where processing is based on consent;
  • lodge a complaint with the President of the Personal Data Protection Office (ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl).

Right to object. You may at any time object to the processing of your data based on our legitimate interest (Article 6(1)(f) GDPR) on grounds relating to your particular situation (Article 21 GDPR). We will then stop processing that data unless we demonstrate compelling legitimate grounds for the processing which override your interests, or we need the data to establish, pursue or defend claims.

To exercise your rights, write to kontakt@militariaradar.pl. We will reply without undue delay and in any event within one month. We may ask for information needed to confirm your identity. When you browse the Service without an account, we usually do not hold data that would allow us to attribute records in logs or sessions to you.

12. Automated decision-making and profiling

We do not make decisions about you based solely on automated processing which would produce legal effects concerning you or similarly significantly affect you, and we do not profile you for marketing purposes. Matching listings to a saved search (notifications) takes place automatically, solely according to the criteria you have set yourself.

13. Cookies

Cookies are small text files saved by a website in your browser. The Service uses only cookies that are strictly necessary to provide the service you request. Pursuant to Article 399 of the Polish Electronic Communications Law of 12 July 2024 (ustawa z dnia 12 lipca 2024 r. Prawo komunikacji elektronicznej), such cookies do not require consent, and we inform you about them in this Privacy Policy.

  • militariaradar-session — session identifier, needed for the website and forms to work; expires after 2 hours of inactivity.
  • XSRF-TOKEN — protects forms against request forgery; expires together with the session.
  • waluta — remembers the selected currency (PLN, EUR or USD); set only once a currency has been selected, stored for up to 12 months or until you delete it.
  • podglad_sklepu — set only when a personal preview link that we have sent to a shop is opened; allows the shop’s representative to view the presentation of the shop’s listings before giving consent; stored for up to 30 days.

We do not use advertising, analytics or third-party cookies. Once you go to a shop’s website, that shop’s cookies and rules apply.

You can delete or block cookies at any time in your browser settings. Without them, the website will not remember the selected currency, and forms and logging in may not work.

14. Security

We apply technical and organisational measures appropriate to the risk, in particular an encrypted connection (HTTPS), storing passwords only in the form of hashes, restricting access to the administration panel and the database to authorised persons, and regular backups.

15. Changes to the Privacy Policy

We update this Privacy Policy when the law, the way the Service operates or our providers change. The current version is always available in the Service, with the version date at the top. We will also inform account holders of material changes by e-mail.