sushiTraffic source statistics
For traffic statistics, the site stores a random visit identifier in a cookie for up to 30 days. We record the source, campaign label, time and channel and associate them with the order. Full referring page URLs are not stored in statistics. Historical sources are not reconstructed; unknown sources are labeled in reports.
Website account
Accounts store your name, email, a protected password hash, delivery details and order history. Keep your recovery code secret; it is used to restore access. Order conversations are available to staff in the admin area and may be forwarded to the staff Telegram group. Once Resend is connected, email will be used for order confirmations.
Data controller
The controller is Oblako doo Novi Sad, Veselina Masleše 38, Novi Sad, Serbia. Personal data contact: sushimesr@gmail.com.
Data and purposes
Ordering uses your Telegram ID, name, phone, selected language, items and total, fulfilment method, address and comments. Support questions and replies are stored. These data are needed to fulfil orders and communicate with you, with necessary records also used for legal obligations. Technical logs support security and troubleshooting under legitimate interests. Avoid unnecessary personal data in comments.
Recipients
Authorized restaurant staff receive order details, including through a work Telegram group; couriers receive the details needed for delivery. The app uses Telegram and Sites/OpenAI and Cloudflare infrastructure. Menu images load from Tilda. When you use address search, your query is sent to Google Maps Platform. You can enter the address manually without using search. These services may process technical data and data outside Serbia; data protection requirements apply to transfers. Their own processing is also described in their privacy policies.
Storage and preferences
Language, cart and repeat-order details are stored on your device. With Telegram, your profile and order history are also stored on the server. Clearing browser data removes local copies, not server records. Data are retained as needed for orders, support, statutory records and legal claims, then deleted or anonymized when those grounds cease. Marketing messages are not enabled; accepting purchase terms is not marketing consent.
Your rights
You may request access, correction, deletion, restriction, portability or object to processing where applicable. Email sushimesr@gmail.com; identity verification may be necessary to protect your data. Deletion may be limited by legal record-keeping duties. You may complain to Serbia’s Commissioner for Information of Public Importance and Personal Data Protection.