Privacy notice
Version 0.9 (public beta), effective 22 October 2026.
Who is responsible
The controller of your personal data is Adria Intellectual Property, Croatia. Contact for privacy questions: [email protected].
The short version
- To publish, you need an account so we know a real person is behind each entry. Your account details stay private.
- Published entries show "Anonymous" unless you choose to show your name or company.
- Drafts stay in your browser. We only receive what you submit.
- If you delete your account, we delete your personal data, but your published entries stay public as "Anonymous".
What we collect, and why
| Data | Why | Legal basis (GDPR) | How long |
|---|---|---|---|
| Name, email address, country; company name if you give it | To create and run your account, confirm you are a real person, and contact you about your submissions | Contract, Art. 6(1)(b) | While your account exists; deleted within 30 days after you close it |
| Login records (when you confirmed your email and last logged in) | To secure your account | Contract, Art. 6(1)(b); legitimate interests, Art. 6(1)(f) | While your account exists |
| IP address (counted, not stored with your account), the country your connection comes from, and the result of the Cloudflare Turnstile human check | To block automated sign-ups, enforce limits and prevent abuse | Legitimate interests, Art. 6(1)(f) | Rate-limit counters: up to 24 hours. Country of a submission: with the submission |
| Your submissions, including any not yet published or refused, and review notes | To review and publish them | Contract, Art. 6(1)(b) | Published: permanently (see below). Refused: 12 months, drawings deleted at once. Withdrawn: deleted at once |
| The link between your account and your published entries | To handle legal requests, confirm authorship if you need it, and act on reports of misuse | Legitimate interests, Art. 6(1)(f) | While your account exists |
| Emails we send you | Login links, confirmations, review results | Contract, Art. 6(1)(b) | As kept by our email provider, up to 12 months |
| Records we must keep by law, or to defend legal claims | To comply with the law and protect our rights | Legal obligation, Art. 6(1)(c); legitimate interests, Art. 6(1)(f) | As required by law, or until the claim is settled |
Accounts that are never confirmed by email are deleted after 7 days.
What is public
A published entry shows its text, drawings, dates, number and fingerprint. It shows your name or company name only if you chose that. You can change to "Anonymous" later from your account, but copies already made by others, including outside archives, may still show the old version. Please don't put personal information in the disclosure itself, such as names, addresses or photos of people.
What stays in your browser
Drafts, including drawings, are stored only on your device until you submit. We don't see them. Clearing your browser data deletes them, so download a copy if you want to keep one.
Who else handles your data
- Cloudflare, Inc.: hosting, database, security, the Turnstile human check, and the automated review of submissions (Cloudflare Workers AI, which receives the submission text but not your account details). Processor.
- Hostinger: website hosting and sending our emails. Processor.
- Independent timestamping services (FreeTSA, DigiCert, Sectigo) and the Internet Archive receive only the fingerprint of a published entry, or its public page, never your account details.
Some of these providers may process data outside the EU/EEA. Where they do, transfers rely on the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. We don't sell your data, and we don't use it for advertising.
Cookies
The registry uses one cookie, needed to keep you logged in (it expires after 30 days or when you log out), and the human check by Cloudflare Turnstile. They don't need your consent and aren't used for tracking or analytics.
Deleting your account
You can delete your account at any time from your account page, or by writing to us. This deletes at once your name, email address and other account data, your unpublished submissions, and the link between you and your entries. Your published entries stay public, shown as "Anonymous", because publication is permanent and others may rely on it. After deletion we can no longer confirm that you were the author, so download your certificates first if you may need them. Backups are overwritten within 30 days.
Your rights
You have the right to access your data, correct it, delete it, restrict its use, receive it in a portable format, and object to processing based on legitimate interests. To use these rights, write to [email protected]. We will reply within one month.
Deletion does not extend to the published content of an entry. That content is kept under the publishing terms you accepted, and for the public interest in a reliable record of what was published and when. Deletion does apply to your account data and to the link between you and your entries.
You can also complain to the Croatian data protection authority, Agencija za zaštitu osobnih podataka (AZOP), azop.hr, or to the authority in your own EU country.
Age
You must be at least 18 to create an account.
Changes
We will post updates here and email account holders about important changes.