PRIVACY.

01 Who processes your data

The data controller is [TU_NOMBRE_Y_APELLIDOS], contact email [TU_EMAIL_DE_CONTACTO].

This site carries out no economic activity, so it is not subject to Article 10 of Spanish Law 34/2002 (LSSI-CE). The controller's details are provided here under Article 13 of Regulation (EU) 2016/679 (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

02 What data is processed and why

a) Message box. If you write through /mensajes/, the message text, the date and, only if you choose to, the name or alias typed in the optional field are stored. No email address or account is requested.

• Purpose: reading and replying to suggestions, ideas or reports.
• Legal basis: your consent (Art. 6.1.a GDPR), given by ticking the box before submitting.
• Retention: as long as needed to deal with it and, at most, 12 months. It is then deleted automatically.

b) Security and abuse prevention. Every request exposes the IP address and technical headers to the server. In the message box the IP is used for at most 10 minutes in volatile memory to stop spam (5 messages per 10 minutes). It is never written to disk.

• Purpose: network and service security (Recital 49 GDPR).
• Legal basis: legitimate interest (Art. 6.1.f GDPR).

c) Collaborative canvas. The wall stores the coordinates, colour and time of each pixel so it can be drawn and strokes undone. It stores no IP addresses, identifiers or fingerprints: the database contains nothing that could reveal who painted what.

d) Tests and games. The questionnaires (CIVITAS//4D, the Gaudio Test, the psychopathy test) and chess games are computed and saved entirely in your browser. Your answers and results are never transmitted to or stored on any server.

e) Local preferences. Your browser stores the language, theme, games in progress and test results on your own device so you do not lose them on reload. That information never leaves your device and you can clear it from your browser settings.

03 Who else can see it

No data is sold or shared with third parties. The infrastructure is provided by Cloudflare, Inc. (hosting, D1 database, KV store and CDN), acting as a data processor under its standard Data Processing Addendum (DPA).

Cloudflare may process technical connection data on servers outside the European Economic Area, under the safeguards of the EU-US Data Privacy Framework and the Standard Contractual Clauses approved by the European Commission.

Cloudflare Web Analytics is also used to measure traffic in aggregate: it works without cookies and does not identify individuals.

04 Cookies and local storage

This site uses no advertising, analytics or tracking cookies, which is why you will not see a consent banner: there is nothing to consent to.

• Technical cookie gg_pase. It only appears if you enter the private area with the access key. It stores a signed pass with the access expiry, contains no personal data and exists solely so you are not asked for the key on every page. It is strictly necessary and exempt from consent (Art. 22.2 LSSI-CE).
• Local storage. The browser keeps preferences, games and test results on your device. These are not cookies, they never reach the server and you can delete them whenever you like.

05 Your rights

You may request access, rectification, erasure, restriction, objection and portability of the data you sent through the message box by writing to [TU_EMAIL_DE_CONTACTO]. If you did not provide a name, there is no way to locate your message: in that case we can only clear the whole mailbox, and we will do so if you ask.

You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).

06 Changes

If what is collected changes (for example, if donations are ever enabled), this page will be updated and the date above will change. The version published here is always the one in force.

In the event of any discrepancy between the Spanish and English versions, the Spanish version prevails.