Privacy Policy

1. Overview and Open Initiative

podaci.dev is an open, non-profit civic initiative providing free, standardized, and machine-readable access to official public registries of the Republic of Croatia for AI agents and developers. We respect your privacy. We do not collect personal data for marketing, profiling, or commercial purposes.

2. Server Access Logs (IP Addresses & Network Traffic)

Whenever you access the website or send queries to our MCP endpoints (e.g. tvrtke.podaci.dev/mcp), our servers and network infrastructure automatically record standard technical connection details:

• IP address of the requesting client
• Date, time, and timezone of the request
• HTTP method (GET, POST), requested URL, and MCP protocol method
• HTTP response status code
• Bytes transferred
• Client User-Agent header (browser or agent version string)

3. Purpose and Legal Basis

Processing of IP addresses and server access logs is grounded in legitimate interests (Article 6(1)(f) of the General Data Protection Regulation - GDPR) in order to:

• Ensure infrastructure stability, availability, and reliable operation
• Protect against cyberattacks, DDoS abuse, automated request overload, and aggressive scraping
• Diagnose technical errors and investigate system malfunctions

4. Data Retention

Server access logs are automatically rotated and deleted within 30 days. Logs may be retained longer solely if required for the formal investigation of security incidents or abusive traffic.

5. Cookies & Google Analytics

This website uses strictly necessary local storage and Google Analytics (gtag.js: G-4451VK157Q) for anonymized traffic measurement:

• Local Storage: remembers your theme preference (light / dark) and dismissal of the cookie notice.
• Google Analytics: cookies (_ga) used to view basic aggregated visit statistics (pages viewed, browser and device type) to improve the service.
• Visitors can disable analytics tracking via browser settings or the official add-on: tools.google.com/dlpage/gaoptout.

6. Your Rights Under GDPR

Under the GDPR, you have the right to request access, rectification, or erasure of personal data to the extent applicable by law. For any questions, inquiries, or privacy requests, please contact: [email protected] (or [email protected]).