Privacy policy
1. Data controller
Marcos Aguilera · [email protected]. The full identification details are available in the Spanish version of this policy (Política de privacidad).
2. What data we process and why
- Comments and suggestions: the name or nickname you enter and your text. Purpose: publishing them on the site. Legal basis: your consent when you send them (Art. 6(1)(a) GDPR). We do not ask for your email address.
- Votes: to allow only one vote per person, we store an encrypted, irreversible summary (hash) of your IP address combined with a secret key. We do not store your IP address, and this summary cannot be used to identify you. Your browser also remembers locally what you have voted for. Legal basis: legitimate interest in preventing fraudulent votes (Art. 6(1)(f) GDPR).
- Automatic moderation: the text of comments, suggestions and the options you type when voting is analysed by an artificial intelligence service (Anthropic) to detect offensive content or spam before publication. It is not used for any other purpose.
- Bot protection: we use Cloudflare Turnstile to check that whoever takes part is a person. It does not use advertising cookies or track you across sites.
- Technical browsing data: hosting providers process your IP address to serve the site and protect it from attacks. Legal basis: legitimate interest (Art. 6(1)(f) GDPR).
- Advertising: if ads are shown, Google may process browsing data according to the choice you make in the consent notice. See the cookie policy.
3. Recipients and providers
- Cloudflare, Inc. (hosting and cookie-free analytics).
- Supabase, Inc. (database for comments, votes and suggestions).
- Anthropic, PBC (automatic text moderation).
- Google Ireland Ltd. (AdSense advertising and YouTube videos, only if you enable them).
Some of these providers may process data outside the European Economic Area, with the safeguards provided for in the GDPR (EU-US Data Privacy Framework or standard contractual clauses).
4. Retention
Comments and suggestions are kept while they are published or until you ask for them to be deleted.
5. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected]. If you believe your request has not been handled properly, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
6. Minors
Children under 14 must not send comments or suggestions.