Privacy notice
Very little, kept briefly.
Legible has no accounts, no cookies, no analytics and no advertising trackers. This page explains the little it does process. Last updated 9 October 2026.
Who is responsible
The data controller is Digital Age, obrt za informatičke usluge, vl. Davorin Prislin, Kukoljina ulica 14, Zagreb, Croatia, OIB 41113852994. Contact: prodaja@digitalage.studio.
What we process and why
Store URL and optional product URL you scan
- Purpose
- To run the scan and build your report.
- Kept
- Kept in the report for 90 days, then deleted automatically.
- Legal basis
- Your request (Art. 6(1)(b) GDPR)
Report contents: scores, short excerpts of the scanned public pages, generated fixes, request log
- Purpose
- To show and share the report at its link, and export it.
- Kept
- 90 days.
- Legal basis
- Your request (Art. 6(1)(b))
Your IP address
- Purpose
- To limit how many scans one visitor can run, so the scanner cannot be abused.
- Kept
- Turned into a one-way hash before use; counters expire after at most 11 minutes. Never stored in reports.
- Legal basis
- Legitimate interest in security (Art. 6(1)(f))
Email and message, if you write to us
- Purpose
- To answer you, including opt-out and early-access requests.
- Kept
- As long as needed to handle the request and any follow-up, at most 3 years.
- Legal basis
- Legitimate interest (Art. 6(1)(f)) or steps before a contract (Art. 6(1)(b))
Theme preference (light or dark)
- Purpose
- To remember your choice.
- Kept
- Stored only in your browser (localStorage), never sent to us.
- Legal basis
- Not personal data processing by us
Reports and their links
Each report lives at a random, unlisted link and is marked not to be indexed by search engines. Anyone you share the link with can open it. Reports describe a store's public pages; they do not contain information about the person who ran the scan.
Want a report removed before 90 days are up, for example a scan of your own store run by someone else? Email us the link and we will delete it.
Who else is involved
Legible runs on Cloudflare (Workers, KV storage, DNS-over-HTTPS lookups of scanned hosts), which processes requests on our behalf under its data processing addendum. Cloudflare operates globally; transfers outside the EU rely on the EU-US Data Privacy Framework and standard contractual clauses.
Fonts are served from this site, not from a third party. The scanner contacts the store you ask it to scan, as described on the LegibleBot page. We do not sell or share data with anyone else.
Your rights
You can ask to access, correct or delete personal data we hold about you, to restrict or object to its processing, and to receive it in a portable format. Write to prodaja@digitalage.studio; we answer within one month.
You can also complain to the Croatian data protection authority, Agencija za zaštitu osobnih podataka (azop.hr), or to the authority where you live.
Changes
If Legible starts collecting anything new, such as accounts or analytics, this page will change first and the date at the top will show it.