Legal

Privacy

Last updated: 28 September 2026

1. Who runs this site

virtualx.app is run by Filip Sardi, trading through Lansiraj d.o.o., Croatia. For any question about your data, email filip@filipsardi.com.

2. What this site collects

• The enquiry form. Your name and email, and anything else you choose to fill in: your field, where the AI would live, your audience, your timing, your material, your public work, the question your clients keep asking, and a messenger handle. It is stored in our database (Supabase, in the EU) so Filip can reply.
• A message to Filip. Each enquiry is also sent to Filip as a private Telegram message (Telegram Messenger Inc.), with the city and country your connection comes from, whether you used a phone or a computer, whether Meta can see the enquiry, how you arrived (an ad or a link, read from the page address) and the page you were on before. These visit details are not stored with your enquiry.
• Spam protection. To limit how many enquiries one connection can send, a one-way code made from your IP address is checked when you send the form. The address itself is not stored.
• Hosting. Vercel Inc. serves this site and keeps short-lived server logs.

3. The Meta pixel and the Conversions API

In the EU, the EEA, the UK and Switzerland they run only if you click Accept in the cookie bar. Everywhere else they run from your first page view unless you switch them off with Cookie settings, or your browser sends a Global Privacy Control signal, which we treat as a no. To know which applies, we look up the country your connection comes from (from your IP address, which we do not store).

When they run, Meta Platforms Ireland Ltd receives the pages you visit and your enquiry, with your IP address, your browser's user agent, Meta's cookies (_fbp, _fbc) and, when you send the form, your email address turned into a one-way code (SHA-256) on our server before it is sent. We use this to measure and improve our ads on Facebook and Instagram. How Meta uses data is in Meta's privacy policy. In Europe the legal basis is your consent (GDPR Art. 6(1)(a)).

Your choice is kept in a cookie called vx_consent for 180 days, and the country answer in vx_consent_region for 7 days. Saying no stops the pixel and deletes Meta's cookies. After a no, nothing is sent to Meta.

Cookie settings

4. Your rights

You can ask for a copy of what we hold about you, have it corrected or deleted, receive it in a portable format, or object to how it is used. Email filip@filipsardi.com. We answer within 30 days, usually within two. You can also complain to your data protection authority (in Croatia, AZOP).

5. How long we keep it

An enquiry is kept while we are in conversation about it. Ask and it is deleted within 30 days.

6. Changes

If this changes in a way that matters, this page and its date change with it.