Privacy

Who is responsible

The controller is Nikola Živković PR Agencija za programerske usluge Novi Sad, in Novi Sad, Serbia, which provides Subact ID. The legal notice has the full details.

Analytics

The site counts page views and measures how long pages take to load, using Vercel's own Web Analytics and Speed Insights. Both are served from this domain rather than from anybody else's, so reading a page still makes no request to a third party, and no webfont is fetched.

Between them they record which page was opened, the link or search that led to it, a location no finer than a country, the kind of device and browser, and how quickly the page became usable. That is the whole list. It is read as totals — whether a page is found and whether it is slow — and it is never used to build a profile of you, and never sold, rented or shared.

There is still no tag manager, no session recorder, no advertising pixel and nothing that follows you to another site. If any of that changes, it will be named here before it ships.

The legal basis is our legitimate interest in knowing whether the site works and is found. The figures stay in Vercel's analytics for as long as Vercel keeps them there, and are only ever read as totals.

The waitlist

If you give us an email address, it goes to Resend, the provider we send email through, and it is stored there rather than in a database of our own. It is used to send one message when v0.1 is released. Every message we send carries an unsubscribe link, and unsubscribing or asking us to delete the address removes it.

The form takes the address and nothing else. It is never logged, never shown in an error message, and never sold, rented or shared.

The legal basis is your consent, given by submitting the form. You can withdraw it at any time, by unsubscribing or by writing to us, and withdrawing does not make what was done before it unlawful. The address is kept until you unsubscribe or ask for it to be deleted, and in any case is deleted no later than twelve months after the v0.1 release email is sent.

Server logs

The site is hosted on Vercel, which keeps ordinary request logs — the page asked for, the time, and the network details any web server sees. We do not add anything to them, and we do not use them to build a profile of anyone.

The legal basis is our legitimate interest in keeping the site running and safe. The logs are kept only for the short period Vercel keeps them.

Your browser's own memory

Choosing a light or dark colour scheme stores that choice in your browser, on your device. It never leaves it. Nothing here sets a cookie: that one preference is kept in local storage, and the measurement described above is cookieless.

Where it goes

Two providers process this data for us: Vercel, which hosts the site and runs the analytics, and Resend, which holds the waitlist and sends the email. Both are based in the United States, so the data is transferred out of Serbia and the EU. It is transferred under the safeguards they offer, such as standard contractual clauses and, where a provider takes part in it, the EU–US Data Privacy Framework. We pass it to nobody else.

Your rights

You can ask for a copy of what we hold about you, have it corrected or deleted, object to or restrict how it is used, receive it in a portable form, and withdraw consent you have given. Write to the address below; it costs nothing.

You can also complain to the Commissioner for Information of Public Importance and Personal Data Protection, Serbia's supervisory authority, at poverenik.rs, or to the supervisory authority where you live if that is in the EU.

Asking

To have a waitlist address removed, or to ask what we hold, write to support@subactid.com, the same address the security page gives. The answer will be short, because the list is.