Skip to content

Privacy Policy

October 8, 2026

This Policy explains the current processing of personal data across Cezar Creative™ and the framework for services introduced later. Product-specific notices supplement it where a product actually has different processing.

1. Controller and current services

Cezar Creative™ is a brand of NOLE, obrt za montažu stolarije, građevinske radove, trgovinu i usluge, vl. Srećko Cezar, Svetog Ivana 2, 10373 Ivanja Reka, Croatia, OIB 02043880301. Product, support and privacy contact: support@cezarcreative.com. The named business is the controller for personal data it independently collects and uses for the website and enquiries.

The website presents applications, browser tools, software. Availability is stated for each product. Announced products are not an active offer to sell. Purchases through the website are not currently enabled; website accounts, online licence activation and subscriptions are not offered. Separately distributed applications have their own notices.

2. Online Tools and your content

Cezar Logo Vectorizer processes selected raster images and generated SVG and PDF files in your browser. Its WebAssembly engine is downloaded from this website. The selected image is not uploaded for vectorization, and the tool does not store the image or result in persistent browser storage. Exports are saved only when you choose to download them. Ordinary browser caching may retain the engine resources.

Cezar PDF Tools and Cezar Image Tools process selected files in your browser. Cezar Quote Maker generates quotes and PDFs locally; Cezar QR Code Generator generates codes locally. Unit conversions and profit-margin calculations also run locally. These tools do not upload your input files, images, quote details or calculation inputs to us or a processing service. Supporting code, fonts and PDF resources are downloaded from this website.

Cezar Background Remover also processes images and manual mask edits in your browser. Its model and processing resources are downloaded from this website. The image is not uploaded for background removal, and the tool does not save images or edits in persistent browser storage. Ordinary browser caching may retain the downloaded processing resources.

Exports are saved through your browser. Cezar Quote Maker can pass quote text to a destination you choose through your device’s sharing feature. Copying a conversion result uses your clipboard when requested. These actions are under your control. Sending content separately by email or a contact form is different from local tool processing.

3. Contact and support

Our forms send your name, email address, subject, message, page language and form source to our server. The server forwards the enquiry and submission time through the configured email service. The forms have no file attachment field. Email enquiries contain the information you choose to send. We use these data to respond, provide support and discuss projects. Avoid sending unnecessary sensitive information or other people’s data without authority.

4. Hosting and anti-abuse checks

Delivering the website involves processing connection data, including an IP address and requested resources, by the hosting infrastructure. Our contact endpoint uses an IP-derived SHA-256 filename and request timestamps for rate limiting. Its ten-minute counting window is not a guaranteed deletion period for the underlying server files. Hosting log and mailbox retention are not defined by the website code.

Contact and project forms load Cloudflare Turnstile from challenges.cloudflare.com. Our server sends the verification token and, when available and valid, the visitor’s IP address to Cloudflare’s Siteverify API; the request also contains our server-side verification secret. It does not include the form’s name, email or message. Cloudflare describes additional browser and connection signals, including User-Agent, TLS fingerprint, site key and origin, for bot detection and improvement of that protection. This is security processing, not Cezar Creative™ advertising or audience analytics.

5. Cookies and browser storage

The hosting response sets a cookie named PH_HPXY_CHECK with HttpOnly, Secure and SameSite=Strict attributes. It is supplied by the hosting infrastructure; we do not specify an unverified internal mechanism or fixed lifetime. No advertising or analytics use of this cookie was found in the audit.

Cezar Quote Maker uses localStorage for automatic draft saving, saved quotes, issuer details, numbering, the active saved quote and the last tax rate. These records can include personal and business information you enter. The profit-margin calculator stores currency and tax preferences in localStorage. This enables the tools’ continuing workflow and does not send those records to us. Clear the website’s browser data to remove them; use the tool’s individual deletion controls where provided. Local data have no application-defined expiry and can be lost if browser storage is cleared or unavailable.

The website uses sessionStorage (with browser history state as a fallback) to prevent repeated reloads during deployment recovery. Ordinary browser caching stores website resources. No application IndexedDB database, Cache Storage cache or service worker is used. Turnstile’s security signals are described above; pre-clearance is not established by the available configuration or observed browsing. Optional Google Analytics is described separately below.

6. Purposes and legal bases

Where the GDPR applies, responding to a request for a project or service can be a step towards a contract or performance of a contract. General enquiries, website delivery and proportionate abuse prevention rely on legitimate interests in communicating and operating a secure service, balanced against your rights. Processing required by law relies on that legal obligation. If we request consent for a particular future purpose, you may withdraw it without affecting earlier lawful processing. These bases do not imply that we receive content processed only on your device.

7. Recipients and international processing

Hosting and email services handle data needed to deliver the website and our communications. Cloudflare provides Turnstile: it describes acting as a processor for protection of our website and as a controller for improvement of its bot detection. See the linked Turnstile Privacy Addendum for its processing and international safeguards. Necessary disclosures may also be made to authorities or advisers where legally justified. We do not sell personal data.

Cloudflare’s global service can involve processing outside the EEA. Applicable transfer safeguards, such as adequacy decisions or standard contractual clauses where required, must cover international processing. Contact us for information about safeguards relevant to your data. We do not claim that all service data remain in the EU. External links, including application stores, lead to services governed by their own notices.

8. Retention and security

We retain enquiries and support records only while needed to handle the matter, meet applicable recordkeeping duties or establish, exercise or defend legal claims. The purpose, relationship, applicable duties and unresolved disputes determine retention; no universal fixed period is promised. Browser-held tool data follow the storage behaviour described above.

HTTPS, input validation, anti-abuse checks and encrypted SMTP transport protect the implemented flows. No system is risk-free. Secure your device, avoid retaining confidential quotes on shared browser profiles and keep independent copies of important originals and exports. Local tool storage is not a backup service.

9. Your rights and children

Where applicable, you may request access, rectification, erasure, restriction and portability, and object to processing based on legitimate interests. These rights have legal conditions and exceptions. Contact support@cezarcreative.com; proportionate identity verification may be needed. You may complain to a competent supervisory authority, including Croatia’s AZOP. We cannot retrieve or delete tool content held only in your browser; you control that storage.

The website is not directed at children. Minors should use services with appropriate parental or guardian involvement and applicable legal capacity. If you believe a child sent personal data to us improperly, contact us so we can assess and address it.

10. Purchases, sales channels and trial data

For a purchase processed through Lemon Squeezy, Sold through Link, LLC (formerly Lemon Squeezy LLC) acts as Merchant of Record under the transaction terms shown at checkout. It handles payment, tax, fraud prevention and transaction documents under its own privacy notice. We may receive customer contact, order, delivery and licence information needed for performance of the contract, support, complaints and legal recordkeeping. We do not receive full payment-card details or use purchase data for marketing without an appropriate legal basis. Lemon Squeezy may process data outside the EEA; applicable transfer safeguards are required. Google Play transactions follow Google’s notices, not Lemon Squeezy’s.

Any actual trial must explain its processing, account or connection requirements before activation. No hidden device identification is introduced by these terms. A link to an external checkout does not embed that provider’s scripts on this website; embedding a checkout or adding non-essential tracking requires a new privacy assessment.

11. Updates and authoritative version

We update this Policy when services or processing change and show the revision date. Material changes will be communicated as appropriate; an update does not replace consent where required. All language versions translate one English legal master. If a translation materially differs, the English version prevails unless applicable law requires otherwise. Privacy questions: support@cezarcreative.com.

12. Optional Google Analytics and your choice

The website offers a Google Analytics consent banner to help us understand visits and improve the website. Google’s analytics script is requested only after you choose Accept or when your browser holds a previously accepted choice. Without that choice, or after Decline, our integration does not load the script. The legal basis for this optional measurement is consent; using the tools does not require accepting it.

After acceptance, Google receives browser connection data and can process visited page URLs, usage, device/browser and approximate location information using measurement identifiers and cookies such as _ga. This is separate from processing your tool files locally. Our tool code does not send selected files or calculation inputs to Analytics. Google’s processing can involve countries outside the EEA and is covered by its privacy information and applicable transfer safeguards.

The accepted or declined choice is stored in localStorage under cc-analytics-consent without an application-defined expiry. You can change it at any time using Analytics preferences on this Privacy page. Choose Decline to stop this website’s Google Analytics measurement and remove its measurement cookies; saved quotes and tool settings remain intact. Withdrawal does not affect earlier lawful processing. Cookie duration and Google-held data retention depend on browser limits and the Analytics property configuration; no unverified fixed period is promised. Contact support@cezarcreative.com for privacy requests or retention details.

Analytics preferences

You can change your choice here at any time. Declining stops this site’s Google Analytics measurement and removes its measurement cookies without deleting your saved quotes or tool settings.

You have not selected a preference.

13. Gold Snake — game privacy and player data

Gold Snake is a free Android game from Cezar Creative. Gameplay and local progress require neither an account nor a purchase. World Top 50, Google Play Games sign-in and rewarded ads are optional. This section describes this game; future games require their own accurate disclosures before publication.

The device stores language, sound and vibration settings, cached translations, crystals, unlocked snakes and best score. Optional World Top 50 processes the submitted player name and verified score; Google Play Games may store your Play Games identity and submitted score. A random private installation identifier and short-lived run records support score verification and abuse prevention. Name reports support moderation. Hosting may temporarily process IP addresses and technical logs for delivery and security. Run-verification records expire after seven days; local progress and translations remain until cleared or deleted. Google Play Games records are managed through your Google account settings.

Google Mobile Ads provides optional rewarded ads, and Google User Messaging Platform requests and stores advertising consent where required. Depending on region and choices, Google and partners may process device identifiers, approximate location inferred from IP, ad interactions and technical device information to deliver, measure and protect ads. Reopen advertising privacy choices in the game where this option is required. The game does not read contacts or access precise device location; this does not exclude IP-based approximate location processing by advertising providers. We do not sell personal data. See Google’s privacy policy: https://policies.google.com/privacy.

The game follows the device language, with reviewed English, Croatian and German. Other supported languages may use Google ML Kit translation on the device. Language models are downloaded from Google, and translated game text is cached locally. Automatic translations may contain errors and are labelled “Translated by Google”. Choosing Share result opens the device share sheet with score, level and the Google Play link; the game does not read contacts, recipients or the destination app.

Data travels over HTTPS. Service providers process the data needed for hosting, security, optional Play Games and advertising, and translation resources. Local storage supports requested gameplay; optional online features support fair competition and abuse prevention. Advertising consent is requested where required. The general rights and lawful-basis sections of this policy apply. Gold Snake is intended for users aged 13 and over and is not designed to collect information from children under 13.

Open “Privacy Policy & Community Rules” in Gold Snake and choose “DELETE MY PLAYER DATA” to request deletion of player data and clear local progress. Manage Google Play Games data separately in its settings. If you cannot open the game, email cezarcreative.studio@gmail.com for deletion of online Gold Snake data or requests for access, correction or other applicable rights. Verification from the same installation may be needed because the game uses a random installation identity instead of an account.

World Top 50 names must not contain hate, threats, sexual content, profanity, impersonation, personal information, spam or harassment. Submitting a name accepts these rules. Players can report and immediately hide a name. Repeated independent reports or developer review may replace a name with PLAYER or remove an entry. Reporting abuse and score manipulation may lead to removal. Material changes to accounts, payments or data uses require an updated policy.