Privacy policy

Data we use

Browsing does not require an account. The infrastructure receives connection information such as IP address and requested URLs. Local test accounts store an alias, protected password, session and zero-price test order. Uploaded private files belong to the owner’s separate local administration tool.

Interface preferences stay in your browser. Search filters use the URL; this site does not save a separate search history. Reading bookmarks and highlights last for the reader session. Test forms do not ask for bank details, identity documents or date of birth.

Purposes and legal grounds

The intended purposes are providing requested features, responding to messages and securing the service. Optional external services require a separate choice. The final processing register must confirm the appropriate service, pre-contractual or legitimate-interest grounds and retention for each operation before public accounts are enabled. Acceptance of this notice is not blanket consent for unrelated processing.

Providers and transfers

Cloudflare supplies the intended hosting infrastructure. Spotify and itch.io are blocked until enabled; their players can contact additional providers and use analytics or storage. Their processing and international transfers need review before public release. Local test files are not a public R2 bucket.

Retention and deletion

Test sessions expire after eight hours. Expiry is not the same as deleting account records. You can delete your local test account in Privacy and data, including its active sessions and test orders. Independent backups and infrastructure logs are not erased by that button; their retention and deletion procedure remain a release requirement. Browser choices expire after 180 days; other saved preferences remain until cleared.

Your rights

Use the contact below to request access, correction, deletion, restriction, portability or objection where applicable. Include the relevant service and alias; do not send a password or identity document in your first message. Identity checks must be proportionate. You may complain to the Spanish data protection authority, AEPD. The public process must meet applicable response deadlines.

Children’s data

Public child account registration is not offered. Local account tests are for the owner and invited adult testers. Before any child-facing registration, define a lawful and proportionate guardian-consent and age process. A checkbox or self-declared birth date is not age verification.