Privacy and choices

Public pages and saved-address profiles

You can read public pages without creating a saved-address profile. When you open alerts or save an address in the application, the server creates an anonymous browser profile. The necessary cookie __Host-sarajevo_profile is Secure, HttpOnly and SameSite=Strict. It is not an advertising identifier. We store up to six locations, selected services, notification settings and alert history for the profile.

The city guide can link up to six devices through a private single-use code. Linked devices share addresses, followed notices, journeys and delivery times. Push subscriptions, email and calendars remain separate. A link code lasts ten minutes; a single-use recovery code lasts one year. Only code hashes are stored. Without a linked device or recovery code, deleting the profile cookie removes your access to the profile.

Reports, journeys and local preferences

An optional resident report contains the service, municipality, approximate area, observation time and a short description. Do not enter house numbers, names, telephone numbers or other personal details. The owner reviews reports before publication. Public reports do not expose profile identifiers and are not official confirmation. Reports expire after 12 hours and are retained for up to seven further days for review. Abuse flags are retained for eight days and usefulness responses for up to 90 days. Temporary hashes of profile and IP identifiers help prevent abuse. The private moderator cookie lasts 30 minutes.

Selected streets, routes, days and departure times are stored with the linked-device group. We do not track actual movement. A parking reminder stores your entered location and expiry on the current device profile and is removed one day after expiry. We do not process parking payments. Language, reading mode, theme, favourite services, display density, analytics choice and the last home-photo identifier stay in browser storage. The offline checklist also stays there and can be reset. The offline copy contains static contacts, guidance and assets, not private addresses or current notices.

Push, email and calendar

Enabling push sends the server the subscription endpoint and keys needed for encrypted delivery through your browser provider, such as Google, Mozilla or Apple. Disable it in site, browser or device settings. We retain delivery status and acceptance time; a push acknowledgement records browser processing, not whether you read the message. The single-use receipt expires after 24 hours. Read status is separate. A direct message link opens only for its owner or an actively linked device.

An email address is stored with verification and delivery status. A verification link is sent first; alerts are not sent before confirmation. The address is used for enabled alerts and test messages you request. Regular alerts include one-click unsubscribe, which deletes the address. Mail comes from noreply@redukcije.com. A calendar link contains a secret key and reveals announcements for your saved addresses to anyone holding it. Disable or replace it in settings; a replacement invalidates the old link.

Maps and optional analytics

Map tiles come from the OpenStreetMap Foundation, which receives your IP address and the map area requested by the browser. The device-location button uses your position only in the browser; we do not receive or store it. Street data is from OpenStreetMap contributors under the ODbL licence.

Cloudflare Web Analytics supplies aggregate visit counts without cookies or local storage and without tracking you across sites. Google Analytics loads only after you choose Allow analytics. Its first-party analytics cookies last up to 180 days. Advertising features and Google signals are disabled. Visit data excludes query parameters, fragments and referring-page paths. With the same permission, events can record successful address saving, push activation, email confirmation and entry into the application. These events contain only the action name and public page, not a saved address, house number, email, search text or profile identifier.

You can decline analytics without losing access. Open Analytics settings in the footer to withdraw permission and remove this site's analytics cookies. Your choice stays in the browser. Google processes the measurements for Visual Media Factory; its privacy policy explains its processing.

Advertising, security and contact

This site does not display advertising or load advertising scripts. We do not sell your data. The server and Cloudflare keep technical request records, including IP address, time and requested URL, for security, abuse prevention and request limits. Those records are not used for advertising.

Public service notices come from official websites and Facebook pages, including ViK, EPBiH, Toplane Sarajevo, Sarajevogas, RAD and BH Telecom. They concern public services, not your personal information. Check the original record before relying on it. Visual Media Factory operates this site. Send privacy questions to info@redukcije.com.