Chisan
Privacy and advertising
Last updated: 15 October 2026
This notice explains what information Chisan and its providers process when you browse the catalog, use an account or visit a page that may show advertising.
Browsing the catalog
You can browse the public catalog without an account. Chisan does not send your device’s location to its servers. If you ask the browser to use your location, it is processed only on your device to suggest a catalog area.
The public website offers Spanish by default, English, Catalan, Galician and Basque. The optional cookie chisan_locale remembers your language choice for one year. Each public URL keeps its own language. Essential infrastructure may also process IP addresses and request, device and security information in ordinary server logs to provide and protect the website.
Privacy-conscious visit measurement
Chisan uses Vercel Web Analytics on public pages to understand aggregate visits and improve the catalog. This measurement uses no analytics cookies. Chisan strips query parameters before sending a page view and does not load Analytics on sign-in, registration, account, administration or API routes. See the Web Analytics privacy documentation .
Chisan also records aggregate daily visits to public producer profiles in its own database. Each new opening counts as a visit; this measurement does not identify unique people or store IP addresses, browser identifiers, referring pages or account IDs. It adds no cookies or browser storage. A random identifier per opening prevents duplicate deliveries; delivery records older than yesterday are removed on the next collection or statistics query. Daily totals are retained as the producer’s history. Only a verified producer owner with active premium access can see these figures. Signed-in producer team visits, recognized automated traffic and preloads are excluded. Collection respects Do Not Track and Global Privacy Control.
Catalog through connected assistants
If you use the discovery plugin or a connection to the public catalog, the assistant sends Chisan the query terms and filters. A radius search includes the specified centre’s coordinates; this may be a town centre rather than your location. These queries require no Chisan account and do not include the full conversation or your credentials. Chisan returns only public catalog information. The assistant provider manages the conversation under its own privacy policy; Chisan’s infrastructure may process ordinary technical request data to provide and protect the service.
Accounts and contributions
If you choose to save a producer before signing in, the functional chisan_pantry_entry cookie remembers that choice and its source page for up to 30 minutes. It is deleted when the save completes. It only continues your action and does not change your pantry’s visibility.
When account features are enabled, Clerk handles authentication. Chisan stores the account profile, follows, ownership requests and change proposals needed to provide these features and maintain an audit history. If you create a public producer map, the profile also stores your chosen catalog area and municipality. Only producers you explicitly select are published. The public CSV catalog stays separate from account data.
Email notices
Chisan sends email notices from chisan.app addresses through Resend, its email delivery provider: the result of your ownership request, the publication of changes and corrections you proposed, professional enquiry messages and the QR labels you request. If someone asks to manage a listing and chooses to verify it with its published email, we send a code to that address. A professional enquiry to a producer nobody manages yet can also notify that public address. Notices include only what is needed to understand them and a link to Chisan; they contain no private message text and no open or click tracking. Chisan records when each notice was sent without storing the address in that record; Resend keeps delivery data for a limited period to provide its service.
Instagram verification
If you choose to verify an ownership request with Instagram, Meta asks for permission to read your professional business or creator profile. Chisan checks its identifier and username and, when you submit the request, saves these details, the date and the match with the listing’s Instagram as private evidence for review. Access is used only during the check; we retain no access tokens and import no posts, photos or messages. This evidence establishes control of the social profile; producer ownership is reviewed separately.
You can remove this evidence from your account requests, using the option to remove Instagram verification. If you withdraw Chisan’s access or request data deletion through Meta, we also remove the stored evidence. Your Chisan account and previously reviewed producer permissions remain; use our contact page for other privacy requests.
Producer assistant on WhatsApp
If you use the assistant, Meta delivers your messages through WhatsApp Business Platform. Chisan links your number to your account and checks your permission to manage the producer. Texts, product details you are preparing and photos you send are processed with OpenAI to prepare a private proposal. Chisan’s team reviews it before publication; the conversation and original photo are not published automatically.
Chisan removes the original text and photo references from its inbox after processing each message. Images are processed without their original metadata. The recovery task deletes pending messages and delivery records older than seven days. Linking expires after thirty days and you can disconnect it in your account; submitted proposals keep their review history. These periods describe Chisan’s storage, not Meta’s or OpenAI’s retention. You can request access, correction or deletion through our contact page.
Article thumbnails
In ‘In the media’, your browser may load an article thumbnail directly from the newspaper or its image provider. That server receives your IP address and the technical data needed to deliver the image. Loading is deferred and does not send the Chisan page address as a referrer. We do not load the article, its scripts or its players; pressing the link opens the publisher’s website.
Embedded videos
Some expanded profiles may show a public YouTube video. When you open the profile, Chisan loads its official thumbnail from YouTube, which may receive your IP address and other browser data needed to deliver the image. The player loads only when you press play and uses YouTube’s privacy-enhanced mode. You can also open the video directly on YouTube using the link beside the player.
You can add a profile photo; if you sign in with Google, its image may be used initially. We store a reduced copy without original metadata, which you can replace or remove. You can save producers and mark whether you have tried their products or visited. These are personal statements; QR codes and location do not verify visits. We show producers only aggregate figures from active accounts. My pantry is private by default. In settings you can share it by link or make it public, and separately choose whether to include tried and visited marks and your notes.
Programmatic advertising
Chisan may temporarily use Google AdSense on certain public province pages. Programmatic advertising is not shown on the homepage, producer profiles, account or administration pages, error pages or this notice. Advertising never determines a producer’s inclusion, verification, ordering or description in the catalog.
When advertising is active, Google and its authorized advertising partners may use cookies, IP addresses, device identifiers and similar technologies to deliver, measure and protect ads. Where required, Chisan asks your preferences through Google’s certified consent platform before these uses. Without consent, Google may show only limited ads or no ads.
- Read how Google uses information from sites using its services in its partner sites notice .
- Review or change ad personalization in Google Ad Settings .
- You can reopen the privacy options in Google’s consent message on any Chisan page where advertising is enabled.
Your choices and requests
You can delete the language cookie in your browser, refuse optional advertising purposes or ask about access, correction or deletion of account data where applicable. Use the Chisan contact page to choose the right channel, and do not send sensitive personal information through social media.
Changes
Chisan will update this notice when its providers or data uses change substantially. The date above identifies the published version.