Legal
Privacy Policy
Last updated: August 14, 2026
The short version
This site collects as close to nothing as a website can. There are no user accounts, no cookies, no analytics scripts, no advertising, no tracking pixels, and no third-party embeds. The web server is configured without access logging. If you subscribe to the newsletter, your email address goes to Substack, not to this site.
1. Who is responsible
The controller for this site is Alex Vidovich, independent researcher (“I”). Contact: support@alexvidovich.com.
2. What this site does not collect
- No accounts or logins — the site has none.
- No cookies — the site sets none, first- or third-party.
- No analytics or advertising scripts — none are loaded.
- No forms — nothing you type on this site is transmitted to me. The subscribe box only opens Substack’s own signup page with your address pre-filled; the address is sent to Substack, not to this site.
3. What is processed technically
Like any web server, the hosting infrastructure momentarily processes your IP address and request headers in order to deliver pages over HTTPS. The web server on this site is configured without access logs, so this data is not written to disk by the site. Transient operational records (for example, service error messages) may briefly contain technical metadata and are rotated automatically. The server is hosted by DigitalOcean, LLC in the United States; DigitalOcean’s own infrastructure processing is described in their privacy policy.
Legal basis, where one is required: legitimate interest in operating and securing the site (Art. 6(1)(f) GDPR).
4. Newsletter (Substack)
Subscriptions are handled entirely by Substack, Inc. If you subscribe, Substack becomes the controller of your email address and any engagement data it collects; its privacy policy applies. You can unsubscribe at any time via the link in any email.
5. External platforms
The site links to SSRN, Substack, Medium, and X. Following those links takes you to services with their own privacy practices, which I do not control. This site embeds no content from them.
6. Your rights
Under the GDPR you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with a supervisory authority (in Slovenia: Informacijski pooblaščenec). Given that this site stores no personal data about visitors, most requests will have nothing to act on — but you can always write to support@alexvidovich.com and I will answer.
7. Children
The site is not directed at children and knowingly collects no data from them.
8. Changes
Any changes to this policy will be posted on this page with an updated date above.