Legal
Privacy & Cookie Policy
Last updated: 13 November 2026. This policy explains how personal data is processed on this website under the EU General Data Protection Regulation (GDPR) and the Croatian Act on the Implementation of the GDPR, and how we use cookies under the ePrivacy rules (Croatian Electronic Communications Act).
1. Controller
Creatore Creativo d.o.o., Matice hrvatske 15, 21000 Split, Croatia, OIB 19826102817, email [email protected].
2. Overview
| Purpose | Data | Legal basis (GDPR) | Retention |
|---|---|---|---|
| Delivering the website (server logs) | IP address, date/time, page, browser, referrer | Art. 6(1)(f) — legitimate interest in secure, stable operation | 14 days, then deleted |
| Storing your cookie choice | Consent status, date, version (in your browser's local storage) | Art. 6(1)(c) and (f) — proof of consent | 12 months |
| Website analytics (Google Analytics 4) | Pseudonymous identifiers, pages viewed, device and approximate location, events | Art. 6(1)(a) — your consent | 14 months in GA4 |
| Ad measurement (Meta Pixel) | Pseudonymous identifiers, pages viewed, events such as “ViewContent” and “InitiateCheckout”, browser data | Art. 6(1)(a) — your consent | Cookies up to 90 days; Meta per its policy |
| Purchase and payment (Lemon Squeezy) | Name, email, billing country, payment data, order data | Art. 6(1)(b) — contract; Art. 6(1)(c) — tax law | As required by tax law (in Croatia generally 11 years for accounting records) |
| Email enquiries and support | Name, email, message | Art. 6(1)(b) or (f) | Until resolved, then 2 years |
We do not use automated decision-making or profiling with legal effects.
3. Hosting
This website is hosted by Cloudflare, Inc., 101 Townsend St, San Francisco, CA 94107, USA, which processes server log data on our behalf under a data processing agreement (Art. 28 GDPR). Cloudflare is certified under the EU-US Data Privacy Framework. Fonts are hosted on our own server; no data is sent to Google Fonts.
4. Purchases through Lemon Squeezy
When you click “Get the ebook”, the checkout of Sold through Link, LLC (formerly Lemon Squeezy LLC) opens in a window on top of this page (the Lemon Squeezy script “lemon.js” is loaded only at that moment, not before you click). Lemon Squeezy is our online reseller and Merchant of Record. Lemon Squeezy processes your purchase and payment data as an independent controller under its own privacy policy (lemonsqueezy.com/privacy). We receive the order data needed to deliver the Ebook and support you (name, email, country, order details) — not your full card details.
5. Google Analytics 4 (only with consent)
If you consent to analytics, we use Google Analytics 4, provided by Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland. GA4 uses cookies to analyse how the site is used. IP addresses are not stored in GA4. Data may be transferred to Google LLC in the USA; Google LLC is certified under the EU-U.S. Data Privacy Framework (adequacy decision of 10 July 2023), and Google's standard contractual clauses also apply. We use Google Consent Mode: without your consent, Google Analytics is not loaded at all. More: policies.google.com/privacy.
6. Meta Pixel (only with consent)
If you consent to marketing, we use the Meta Pixel of Meta Platforms Ireland Ltd., 4 Grand Canal Square, Dublin 2, Ireland, to measure the effectiveness of our Facebook and Instagram ads and to show ads to people who have visited this site. For the collection and transmission of data via the Pixel we and Meta are joint controllers (Art. 26 GDPR; CJEU C-40/17 “Fashion ID”) under Meta's Controller Addendum (facebook.com/legal/controller_addendum); Meta is responsible for further processing. Data may be transferred to Meta Platforms, Inc. in the USA, which is certified under the EU-U.S. Data Privacy Framework. More: facebook.com/privacy/policy.
7. Cookies and similar technologies
We only store or read information on your device without consent where this is strictly necessary. Analytics and marketing tools are loaded only after you opt in. You can change or withdraw your consent at any time — with effect for the future — via .
| Name | Provider | Purpose | Category | Duration |
|---|---|---|---|---|
| 72h_consent (local storage) | This website | Remembers your consent choice | Strictly necessary | 12 months |
| _ga | Distinguishes visitors | Analytics (consent) | 2 years | |
| _ga_<ID> | Keeps session state | Analytics (consent) | 2 years | |
| _fbp | Meta | Identifies browsers for ad measurement | Marketing (consent) | 90 days |
| _fbc | Meta | Stores the click ID from a Meta ad | Marketing (consent) | 90 days |
The Lemon Squeezy checkout runs on Lemon Squeezy's own domain and may set cookies necessary for payment and fraud prevention; see its privacy policy.
8. Recipients
Hosting provider (processor), Lemon Squeezy (independent controller), Google and Meta (only with consent, as described above), our accountant and tax authorities where legally required. We do not sell personal data.
9. Your rights
You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction (Art. 18), data portability (Art. 20) and to object to processing based on legitimate interests (Art. 21). You may withdraw consent at any time (Art. 7(3)) without affecting the lawfulness of processing before withdrawal. Write to [email protected].
You also have the right to lodge a complaint with a supervisory authority, in Croatia: Agencija za zaštitu osobnih podataka (AZOP), Selska cesta 136, 10000 Zagreb, azop.hr — or with the authority in your EU country of residence.
10. Children
This website is not directed at children under 16. We do not knowingly collect their data.
11. Changes
We update this policy when our processing changes. The current version is always available on this page.