Politika privatnosti
Važi od 16. oktobra 2026.
1. Rukovalac podacima
Ivan Kršev, Ruma, Srbija („mi”). Za sva pitanja o podacima: support@chameleon.rs.
Prikupljamo samo ono što je potrebno da alati rade i da naplata bude ispravna. Ne prodajemo podatke i ne koristimo reklamne ni analitičke kolačiće.
2. Koje podatke obrađujemo
| Podatak | Zašto |
|---|
| Email i lozinka (lozinka se čuva samo u šifrovanom obliku) | Nalog i prijava. |
| Status pretplate i datum isteka; ID kupca i pretplate kod Creem-a | Da znamo da li imate pristup plaćenim alatima. |
| Nasumični identifikator uređaja i broj zahteva u kratkom periodu | Ograničenje na 3 uređaja po nalogu i zaštita od zloupotrebe. |
| Tehnički zapisi servera (IP adresa, vreme, greške) | Bezbednost i otklanjanje grešaka. |
Podatke o platnoj kartici obrađuje isključivo Creem; mi ih ne vidimo. Proračuni i projekti koje pravite u alatima ostaju u vašem browseru ili u fajlovima koje sami preuzmete, osim parametara koje alat šalje serveru da bi izračunao rezultat. Te parametre ne čuvamo.
3. Pravni osnov
- Ugovor: nalog, pretplata i rad alata.
- Legitimni interes: bezbednost, sprečavanje deljenja naloga i zloupotrebe.
- Zakonska obaveza: evidencija o plaćanjima (vodi je Creem).
- Obaveštenja: povremeno vam možemo poslati email o novim alatima. Iz toga se možete odjaviti jednim odgovorom na email.
4. Ko još obrađuje podatke
| Servis | Uloga |
|---|
| Supabase | Nalozi, baza podataka, serverske funkcije i slanje emailova za nalog (potvrda, reset lozinke). |
| Creem | Naplata, računi i porez. Kao prodavac (merchant of record) samostalno obrađuje podatke o kupovini prema svojoj politici privatnosti. |
| Hosting sajta apps.chameleon.rs | Isporuka stranica. |
| Google Fonts, jsDelivr | Isporuka fontova i biblioteke za prijavu; vide vašu IP adresu pri učitavanju. |
Neki od ovih servisa čuvaju podatke van Srbije (EU, SAD). Prenos se vrši uz zaštitne mere koje ti servisi primenjuju, kao što su standardne ugovorne klauzule.
5. Šta se čuva u vašem browseru
Koristimo lokalnu memoriju browsera (localStorage), ne kolačiće za praćenje: prijavu (sesiju), identifikator uređaja, izabrani jezik i stranicu na koju se vraćate posle registracije. Sve to možete obrisati odjavom ili brisanjem podataka sajta u browseru.
6. Koliko dugo čuvamo podatke
- Podatke o nalogu i pretplati: dok nalog postoji. Posle brisanja naloga brišemo ih u roku od 30 dana.
- Brojače zahteva: nekoliko minuta. Evidenciju uređaja: dok nalog postoji.
- Tehničke zapise: do 90 dana.
- Podatke o plaćanju čuva Creem onoliko koliko zakon nalaže.
7. Vaša prava
Prema Zakonu o zaštiti podataka o ličnosti Republike Srbije (i GDPR-u, ako ste u EU) imate pravo da tražite uvid u svoje podatke, ispravku, brisanje, ograničenje obrade i kopiju podataka, kao i da uložite prigovor. Pišite nam na support@chameleon.rs; odgovaramo u roku od 30 dana.
Pritužbu možete podneti i Povereniku za informacije od javnog značaja i zaštitu podataka o ličnosti (poverenik.rs).
8. Izmene
O bitnim izmenama ove politike obaveštavamo emailom ili na portalu.
Privacy Policy
Effective October 16, 2026.
1. Data controller
Ivan Kršev, Ruma, Serbia (“we”, “us”). For any data question: support@chameleon.rs.
We collect only what is needed to run the tools and handle billing correctly. We do not sell data and we do not use advertising or analytics cookies.
2. What we process
| Data | Why |
|---|
| Email and password (the password is stored only in hashed form) | Your account and sign-in. |
| Subscription status and expiry date; Creem customer and subscription IDs | To know whether you have access to paid tools. |
| A random device identifier and a short-term request count | The 3-device limit per account and abuse protection. |
| Technical server logs (IP address, time, errors) | Security and troubleshooting. |
Card details are handled only by Creem; we never see them. The calculations and projects you make stay in your browser or in files you download, except for the parameters a tool sends to the server to compute a result. We do not store those parameters.
3. Legal basis
- Contract: your account, subscription and the tools.
- Legitimate interest: security, preventing account sharing and abuse.
- Legal obligation: payment records (kept by Creem).
- Updates: we may occasionally email you about new tools. You can opt out by replying to any such email.
4. Who else processes data
| Service | Role |
|---|
| Supabase | Accounts, database, server functions and account emails (confirmation, password reset). |
| Creem | Payments, invoices and tax. As merchant of record it processes purchase data independently under its own privacy policy. |
| Hosting for apps.chameleon.rs | Serving the pages. |
| Google Fonts, jsDelivr | Serving fonts and the sign-in library; they see your IP address when these load. |
Some of these services store data outside Serbia (EU, USA). Transfers rely on the safeguards those services use, such as standard contractual clauses.
5. What is stored in your browser
We use the browser's local storage (localStorage), not tracking cookies: your sign-in session, a device identifier, your language choice and the page to return to after sign-up. You can clear all of it by signing out or clearing site data in your browser.
6. How long we keep data
- Account and subscription data: while your account exists. After you delete your account, we erase it within 30 days.
- Request counters: a few minutes. Device records: while your account exists.
- Technical logs: up to 90 days.
- Payment records are kept by Creem as long as the law requires.
7. Your rights
Under the Serbian Law on Personal Data Protection (and the GDPR, if you are in the EU) you can ask to access, correct, delete or export your data, restrict processing, or object to it. Email support@chameleon.rs; we reply within 30 days.
You can also complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protection (poverenik.rs) or to the data protection authority in your country.
8. Changes
We will announce material changes to this policy by email or in the portal.
