Overview
This Privacy Policy describes how Cronos Foto SRL (“Veridis”, “we”, “us”) processes personal data in connection with the veridis.dev website, its product documentation, and the Veridis News Desk support form.
veridis.dev is an informational and technical support website for software products developed under the Veridis brand. The site does not operate user accounts, billing systems, or paid checkout.
Data controller
The controller responsible for data processing on this website is:
- Company: Cronos Foto SRL
- Brand: Veridis
- Tax ID / CIF: 36835428
- Trade Register: J29/2157/2016
- General inquiries: hello@veridis.ro
- Technical support: support@veridis.dev
Information we process
1. Technical request information
Our hosting and content-delivery infrastructure may process standard technical request information necessary to deliver and secure the site. This processing occurs at the network and edge layer to transmit requested pages, maintain service stability, and mitigate automated attacks.
2. Support form inquiries
When you submit a request through the Veridis News Desk Support page, we collect the information you provide:
- Required fields: Request type (bug report, help request, or feature request), name, email address, subject, and message.
- Optional environment details: Website URL, News Desk version, WordPress version, and PHP version.
Sensitive data exclusion: We explicitly ask users not to submit passwords, API keys, access tokens, customer personal records, or other sensitive information in support requests. The support form includes a mandatory confirmation checkbox where submitters acknowledge that the message does not contain credentials or sensitive records.
3. Optional analytics and cookies
With your consent, the site uses Google Analytics 4 to collect aggregated information about how documentation and product pages are navigated. For full details on the cookies used and consent management, please see our Cookie policy.
Purposes and legal bases for processing
We process personal data for the following purposes under Regulation (EU) 2016/679 (General Data Protection Regulation):
- Website delivery and security: Processing technical request data and temporary anti-replay verification records to serve web pages securely and protect site availability (Legal basis: GDPR Art. 6(1)(f) — legitimate interests in operating, securing, and protecting veridis.dev).
- User-initiated technical support: Receiving, evaluating, and responding to support requests, bug reports, and software feedback submitted through the support form (Legal basis: GDPR Art. 6(1)(f) — legitimate interests in responding to support requests and maintaining necessary support correspondence).
- Optional Google Analytics: Analyzing general visitor traffic and documentation usage through Google Analytics 4 (Legal basis: GDPR Art. 6(1)(a) — consent).
Recipients and service providers
We share data with third-party service providers only to the extent necessary to operate the site and provide support:
- Cloudflare, Inc.: Provides content delivery, edge hosting, DNS routing, serverless Worker execution, and temporary anti-replay nonce storage.
- Resend, Inc.: Transactional email delivery service used to forward submitted support requests to our support inbox.
- Google LLC: Provides optional web analytics (Google Analytics 4), enabled only when the visitor explicitly grants consent.
Data storage and retention
- Support form messages: Messages submitted through the support form, along with submitter names and email addresses, are not stored in our Cloudflare D1 database. Validated submissions are dispatched via Resend directly to our support team mailbox.
- Database nonces: The Cloudflare D1 database stores only short-lived cryptographic nonce hashes (
contact_noncestable) to prevent token reuse and replay attacks. Expired nonces are deleted automatically. - Support correspondence: Support emails received in our inbox are retained for the duration of the support inquiry and up to 12 months after the last substantive communication, unless a longer period is necessary to comply with a legal obligation or address a specific legal claim or dispute.
- Consent preferences: The
cc_cookierecords your category preferences locally for up to 180 days. - Analytics cookies: When accepted, Google Analytics cookies (
_ga,_ga_*) persist for up to 2 years unless cleared earlier or revoked through preferences.
International data transfers
Some of our third-party infrastructure and service providers may process data in countries outside the European Economic Area (EEA). Where such processing occurs, transfers are carried out subject to applicable legal safeguards recognized under European data protection law.
Your rights
Under applicable EU data protection law, you have rights regarding your personal data, subject to statutory conditions:
- Access: You may request confirmation of whether we process personal data concerning you and obtain access to that data.
- Rectification: You may request correction of inaccurate personal data.
- Erasure and restriction: You may request the deletion of your personal data or restriction of its processing, subject to statutory retention requirements.
- Objection: You have the right to object to processing based on legitimate interests.
- Withdrawal of consent: Where processing is based on consent (such as optional analytics), you may withdraw your consent at any time via Cookie preferences in the site footer. Withdrawal does not affect the lawfulness of processing carried out prior to withdrawal.
To exercise your rights or make inquiries regarding data contained in support correspondence, contact us at hello@veridis.ro or support@veridis.dev.
Supervisory authority
You have the right to lodge a complaint with a competent data protection supervisory authority. In Romania, the supervisory authority is:
- Authority: Autoritatea Națională de Supraveghere a Prelucrării Datelor cu Caracter Personal (ANSPDCP)
- Website: dataprotection.ro
Changes to this notice
We may update this Privacy Policy from time to time to reflect operational or regulatory changes. The date of the latest update is displayed at the top of this page.