Privacy
Privacy policy
Last updated: 22 October 2026
This notice explains which personal data Open Tag d.o.o. processes when you visit fulcro.opentag.hr, sign up for Fulcro or use a Fulcro instance, why, who receives it and what rights you have. If anything is unclear, write to us.
Who is responsible
The data controller is Open Tag d.o.o., Augustina Vivode 22, HR-52470 Umag, Croatia, VAT ID HR45335309316. Contact: info@opentag.hr.
What data we process, and why
- Sign-up. Company name, instance address, country, VAT number (optional), your name, email and language. We need them to create your instance, send you the link to choose your password and invoice you. Legal basis: performance of the contract.
- Payment. Your card is entered on Revolut's page and never reaches our servers. From Revolut we receive the outcome of the payment and the identifiers of the subscription and of the orders. Legal basis: performance of the contract.
- VAT number check. If you enter an EU VAT number, we send it with the country to VIES, the European Commission's service, which replies whether it is valid and, for some countries, the registered name and address. We keep the result. Legal basis: legitimate interest in issuing correct invoices and preventing misuse.
- Where you came from. If you reach the site from an advertising campaign or from another site, your browser stores the campaign parameters (utm, click identifiers of Meta, Google or TikTok) or the referring site for 30 days, and they are attached to your sign-up. We use them only to measure which campaigns bring customers; they are not shared with the advertising platforms. Legal basis: legitimate interest.
- Server logs. The web server records IP address, date and time, page requested and browser type, and keeps them for 14 days for security and troubleshooting. Legal basis: legitimate interest.
- Email. We send you the emails the service needs (invitation, password reset, invoices, notices about your subscription) from our own server. No newsletters unless you ask for them.
- Invoices and accounting. Name, address, VAT number and amounts are kept for as long as tax law requires, up to 11 years. Legal basis: legal obligation.
Who receives the data
- Hetzner Online GmbH (Germany): our servers are in its data centre in Nuremberg. All data stays in the European Union.
- Revolut Bank UAB (Lithuania): processes payments and card data as an independent controller, under its own privacy notice.
- European Commission (VIES): receives the country and the VAT number for the check.
- Google LLC (Google Fonts): the site loads its fonts from Google's servers, which see your IP address.
No other third parties: no advertising pixels and no analytics services on this site. If we add any, this page is updated first and, where required, you will be asked for consent.
Data inside your Fulcro instance
Products, orders, customers and everything you enter in your instance are yours: you are the controller and Open Tag d.o.o. is the processor, acting only on your instructions to provide the service. The data is stored in the European Union, is never used for our own purposes and is deleted within 30 days after the instance is closed, except what the law requires us to keep. A data processing agreement under article 28 GDPR is available on request.
Cookies and browser storage
This site sets no cookies, neither its own nor from third parties. It keeps a few technical preferences in the browser's local storage; none of it is sent to third parties:
| Name | Purpose | Duration |
|---|---|---|
| fulcro-lang | The language you chose from the menu | Until you delete it |
| fulcro-theme | Light or dark theme | Until you delete it |
| fulcro-periodo | Monthly or yearly choice on the pricing page | Until you delete it |
| fulcro-attribution | Campaign or site you came from, attached to your sign-up | 30 days |
| fulcro-signup | Sign-up details shown on the thank-you page | Until the tab is closed |
| fulcro-token | Your login session in the app | Until you log out |
Fulcro instances (your-name.fulcro.opentag.hr) work the same way: no cookies; the login session and the theme are kept in local storage.
Your rights
You can ask us at any time to access your data, to correct or delete it, to restrict its processing or to receive it in a portable format, and you can object to processing based on legitimate interest. Write to info@opentag.hr: we answer within 30 days. You can also lodge a complaint with the Croatian Personal Data Protection Agency (AZOP) or with the supervisory authority of your country.
Changes
If this notice changes, the new version is published here with its date; for substantial changes we notify customers by email.