Privacy policy
What data the site touches, why, how long it keeps it and what you can ask for. The text describes what the code actually does — it is not a copied template.
In short
The site works without accounts and without advertising tracking. The only personal data we process are the IP address, kept briefly in the server log, and — if you subscribe yourself — your email address. The only cookie is the one remembering the language you chose.
The server log
Every request to the server is noted with the IP address, the path requested, the response code and the moment. It serves two purposes: stopping abuse (the rate limiter counts requests per IP) and finding faults when something breaks.
- Legal basis
- the legitimate interest in keeping the service working and secure (Art. 6(1)(f) GDPR).
- Retention
- the logs rotate; the rate limiter's counter lives in memory for 60 seconds and deletes itself.
Subscribing to prices
If you use the form in the footer, we keep the email address, the country chosen, the language, the moment and the IP address from which you ticked the consent box, plus two random keys: one for confirmation, one for unsubscribing.
- Confirmation is mandatory. You receive nothing until you confirm from the message sent to your address. Without that, anyone could subscribe anyone.
- The moment of consent is kept because the regulation requires us to be able to demonstrate consent (Art. 7(1)).
- One-click unsubscribe, from any message, with no account and no password. The row stays marked as unsubscribed, so that someone else cannot immediately re-subscribe you; on explicit request we delete it entirely.
- Legal basis
- your consent (Art. 6(1)(a)), which you may withdraw at any time.
- Retention
- until you unsubscribe. An unconfirmed address never receives anything.
What your browser keeps, not us
Your favourite countries and the alerts you set are saved in your browser's local storage (localStorage). They never reach the server, we do not see them and we cannot read them. They are deleted when you clear the site's data in your browser.
Who we do NOT send data to
The site loads no fonts, maps or social-network buttons that report your visit. The content security policy blocks external resources technically, not merely by good will. The social icons in the footer are locally drawn; they become active only when you click them.
When traffic analytics is switched on, the only third party is Google Analytics, which receives the page visited and an anonymous session identifier. We neither sell nor rent data to anyone.
Advertising
The advertising slots are switched off. Should they ever be switched on, that network becomes a recipient of data, and this page is updated BEFORE, not after — with the network's name and with what exactly it receives.
Your rights
You have the right to request access to your data, its rectification, erasure, restriction of processing, portability, and to object to processing. For the subscription, withdrawing consent is the unsubscribe link in any message. You may lodge a complaint with the Romanian National Supervisory Authority for Personal Data Processing (dataprotection.ro).
Minors
The site is not addressed to children and asks for no data from them. The price newsletter is intended for people over 16.
Changes
When the policy changes, the change appears here, and previous versions remain in the code's public history — this page is generated from it.
A translation for the reader's convenience. In case of any discrepancy, the Romanian version is the one that counts.