Privacy Policy
Updated · ONLYAPPS d.o.o.
On this page
Note
In short. You can use onlyapps.org without an account. We receive personal data only when you write to us or subscribe to the newsletter, analytics runs only after you accept cookies, and we never sell your data.
Who we are
ONLYAPPS d.o.o. ("ONLYAPPS", "we", "us") is a software company registered in the Republic of Serbia. We are the controller of the personal data described in this policy.
| Company | ONLYAPPS d.o.o. |
| Registration number | 21858277 |
| Address | Futoška 1A, 21000 Novi Sad, Serbia |
| Privacy contact | privacy@onlyapps.org |
This policy covers the website onlyapps.org and its language versions. Each of our apps has its own privacy policy, linked from the app page and its store listing.
What we collect and why
| When | What data | Why | Legal basis |
|---|---|---|---|
| You send a support request | Name, email, topic, message and the files you attach | To answer your request | Your request (pre-contractual steps) and our legitimate interest in supporting users |
| You subscribe to the newsletter | Email, language, dates of subscription and confirmation | To email you about new posts | Your consent, confirmed by email (double opt-in) |
| You accept analytics cookies | Pages viewed, device and browser type, approximate location, cookie identifiers | To understand how the site is used and improve it | Your consent |
| Any visit | IP address, time of request, browser user agent | To keep the site secure and working, prevent abuse and fix errors | Our legitimate interest |
We do not ask for more than we need, we do not build advertising profiles, and we do not sell or rent personal data.
Support requests
Messages from the contact form are delivered to our team by email; we do not keep a separate ticket database. Attachments (up to 20 MB) are stored on our server only until the email is sent and are deleted automatically, at the latest after 48 hours. We keep the correspondence for as long as it is needed to resolve your request and handle follow-up questions.
Newsletter
- You subscribe only by confirming the link we send to your inbox. Unconfirmed requests are deleted after 7 days.
- Every email has a one-click unsubscribe link. After you unsubscribe, your address is deleted within 30 days.
- We keep only a one-way hash of an unsubscribed address, so that we never write to it again by mistake.
- Your IP address is not stored in readable form — only as a hash that changes daily, used to prevent abuse.
Cookies and analytics
The site works without analytics. On your first visit we ask for consent; until you accept, no analytics scripts are loaded.
| Cookie or tool | Purpose | Duration |
|---|---|---|
| oa_consent | Remembers your choice in the cookie banner | 12 months |
| Google Analytics 4 (Google) | Visit statistics, only with your consent | Set by Google, up to 2 years |
| Yandex Metrica (Yandex) | Visit statistics, only with your consent | Set by Yandex, up to 1 year |
You can change your choice at any time by clearing cookies for onlyapps.org — the banner will appear again. Google Analytics runs in Consent Mode v2, with analytics storage denied by default.
Who processes data for us
- Hosting provider — our servers, where the website, its database and backups run.
- Our own mail server — delivers support requests and newsletter emails.
- Google and Yandex — website analytics, only if you consent. These providers may process data outside Serbia under their own safeguards.
We may disclose data to public authorities only when the law requires it.
How long we keep data
We keep personal data only as long as necessary for the purpose it was collected for, as described above. Database backups are kept for 14 days and then overwritten. Server logs are rotated regularly and kept for a short period.
Your rights
Under the Serbian Law on Personal Data Protection and, where it applies, the EU General Data Protection Regulation (GDPR), you have the right to:
- access the personal data we hold about you and get a copy;
- correct inaccurate data;
- have your data deleted;
- restrict or object to processing;
- receive your data in a portable format;
- withdraw consent at any time, without affecting earlier processing.
To use any of these rights, write to privacy@onlyapps.org or choose the "Data deletion request" topic on our contact page. We reply within 30 days. You can also lodge a complaint with the Commissioner for Information of Public Importance and Personal Data Protection of the Republic of Serbia (poverenik.rs) or with the supervisory authority in your country.
Security
The site is served only over HTTPS, access to our systems is limited to the team and protected by strong authentication, and personal data is kept to a minimum. No method of transmission or storage is completely secure, but we work to protect your data and will notify you and the authorities of a breach where the law requires it.
Children
The website is not directed at children under 15, and we do not knowingly collect their personal data. If you believe a child has sent us personal data, contact us and we will delete it.
Changes to this policy
We may update this policy when our services or the law change. The current version and its effective date are shown at the top of this page, and earlier versions remain available in the document history.
Contact
Questions about this policy: privacy@onlyapps.org · ONLYAPPS d.o.o., Futoška 1A, 21000 Novi Sad, Serbia.