What we handle, and what we do not.

Beside Cue is made by Irchiinnuss, which is responsible for your data; the full company details are at the end. For anything in this notice, write to us.

The website

The website has no accounts, no advertising and no analytics cookies.

Interest list. If you leave your email address, we send you one confirmation email, and the address is not on the list until you click the link in it. The link works for 48 hours. Until you click it we store nothing ourselves; the address exists only in that email, its link, and Resend's log of the email, which Resend deletes after 30 days. When you confirm, we store the address, the time you gave consent, the time you confirmed, which form you used, the version of this notice you agreed to, and an ID for the confirmation. Confirmed addresses stay on the list until the launch mail and one follow-up, and at most 90 days after the last launch mail, unless you asked to keep hearing from us. Every email to the list carries an unsubscribe link. Legal basis: your consent (Article 6(1)(a) GDPR).

Bot protection. The form uses Cloudflare Turnstile, which checks signals such as your IP address and browser details to tell people from scripts; it does not read what you type. When you send the form, we pass Cloudflare the result of that check with your IP address, so it can confirm it. Cloudflare handles this as our processor, and for improving its bot detection under its own Turnstile Privacy Addendum. We do not see these signals. Legal basis: our legitimate interest in keeping the list free of spam (Article 6(1)(f) GDPR).

Rate limiting and logs. Cloudflare, which hosts the site, keeps standard server logs (IP address, time, requested page) to keep the site up and to stop abuse. To stop the form being flooded, we count sign-up attempts for one minute per IP address and per submitted address. Both are turned into one-way keys first, so the counters never hold either in readable form. Cloudflare, Inc. (USA) may process this data outside the EU, under the EU standard contractual clauses in its data processing addendum. Legal basis: our legitimate interest in running a secure website (Article 6(1)(f) GDPR).

Visit statistics. To see how many people the site reaches, the pages load Cloudflare Web Analytics. It sets no cookie, stores nothing on your device and does not follow you from site to site. The page that confirms your address does not load it. Each page view tells Cloudflare the page's address, the page you came from, your browser, operating system and device type, and how fast the page loaded, and Cloudflare works out a country from your IP address. We see totals only, such as page views by day, page and country, never a record of one visitor. Cloudflare, Inc. (USA) handles this as our processor, under the same data processing addendum. Legal basis: our legitimate interest in knowing whether the site reaches people (Article 6(1)(f) GDPR).

Email delivery. Emails are sent by Resend, Inc. (USA), acting as our processor under a data processing agreement with EU standard contractual clauses. Resend keeps a log of every email it sends, including the confirmation, for 30 days. Addresses that bounce or report an email as spam go on Resend's suppression list, so they are not emailed again.

The app

Everything you enter in Beside Cue (the pulls you pick, your cues, your reflections, reminder times, settings) is stored on your device only. There is no account and no server of ours that receives it. Deleting the app deletes it.

Purchases. If you buy Beside Cue Deluxe, Apple or Google process the payment under their own terms. Our purchase service, RevenueCat, Inc. (USA), receives an anonymous app identifier and the purchase receipt so the app can unlock what you paid for and so we can see aggregate purchase statistics. That identifier is random and is not linked to your name, email or device identifier. Legal basis: performance of the purchase (Article 6(1)(b) GDPR) and our legitimate interest in knowing how many people buy (Article 6(1)(f) GDPR).

Notifications. Reminders are scheduled locally on the device. No notification service of ours is involved.

Microphone. The optional B-side games you play by singing listen through the microphone to follow your voice. The sound is analysed on your device as you sing and is never recorded or uploaded; the app keeps only numbers, such as your vocal range and best scores. The app asks before it uses the microphone, and you can turn that off in your phone's settings.

No tracking. The app contains no advertising SDK, no tracking across apps or websites, and no analytics that identifies you.

Children

The app is rated 4+ in the stores and is not directed at children. We do not knowingly collect personal data from anyone. If you believe a child has given us an email address, write to us and we delete it.

Your rights

You can ask for access to your data, correction, deletion, restriction, portability, or object to processing based on legitimate interest. You can withdraw consent at any time; the unsubscribe link does this for the interest list. Write to us. You can also complain to the Croatian data protection authority, Agencija za zaštitu osobnih podataka (azop.hr), or the authority in your country.

Retention, in one table

Changes

When this notice changes, the date at the top changes with it. Material changes to the interest list are announced by email.

Who is responsible