Privacy notice

ISTARSKI TARTUFI is an independent, non-commercial multilingual reference project about Istrian truffles. It has no accounts, advertising, sales, subscriptions, profiling or launch analytics.

The project is operated by a private individual. The public contact for data-protection, privacy and legal requests is istarskitartufi@proton.me. A residential address and private contact details are not published. The project decision of 24 August 2026 documents this limitation of public identification together with its residual legal risks and re-review triggers; no external written legal opinion exists.

Cloudflare, used for DNS, CDN and security, necessarily processes network and security request data, which may include IP address, URL, headers, time and device information. The operator does not maintain a visitor database or use this data for behavioural tracking. Messages sent to the public email address are processed only to answer, correct a record or handle a request.

Site operation and abuse prevention rely on legitimate interests, limited to what is necessary. Cloudflare’s exact roles and retention depend on enabled services and plan; the operator must verify the account settings and must not enable Logpush, Log Explorer, Bot Fight Mode or challenges without a separate review. Correspondence is kept only as long as needed to respond, document a correction or protect rights.

The normal public site uses no non-essential cookies, advertising tags, Google Analytics, Cloudflare Web Analytics or third-party browser scripts. A security challenge may conditionally set a Cloudflare technical cookie; it is not used for analytics.

You may request access, rectification, erasure, restriction or object where applicable. Write to istarskitartufi@proton.me. You may also contact the Croatian supervisory authority, AZOP. Do not send unnecessary identity documents.

This notice describes the launch state; it is not a claim that no data is processed and it is not legal advice. Any future analytics, commercialisation, form, account or third-party embed requires a new privacy review.