Privacy Policy

Data controller

The controller is AI STUDIOS MARKETING S.L., Tax ID B21665849, with address at Calle Raimon 4, 46220 Picassent, Valencia, Spain.

Data we process

Technical logs may contain IP address, user agent, requested URL, timestamp, referrer and security events. Necessary session and age-confirmation cookies support access and form protection.

A report may contain the page URL, your message and an optional email address. Keyed technical identifiers derived from network data are used briefly to limit abusive submissions.

Likes, dislikes, ratings represented by those reactions, and tracked shares may be persisted for anonymous visitors only after explicit preference-storage consent. The server then stores the selected content identifiers and preference state against an internal anonymous actor identifier, without attaching the raw IP address or user-agent text to the interaction record. Favourites are accepted only from users signed in with Google. Completed-share statistics are retained as daily aggregate counts, with short-lived retry receipts where needed. Aggregate counters are public to every visitor.

Google sign-in uses OpenID Connect. The site stores your Google subject only as a keyed hash, together with your verified email address, display name, optional profile-image URL, preferred language, account dates and hashed login-session secrets. Google access, refresh and identity tokens are not retained.

Google Analytics

Google Analytics is used with measurement ID G-5EZMZ4VLRQ to understand visits and improve the catalogue. It may process the page visited, referrer, approximate location, browser and device information, timestamps and related analytics identifiers. The site does not enable Google advertising features through this tag.

Purposes and legal bases

Data is used to operate and secure the service, remember age confirmation, measure use, improve the catalogue, respond to requests, investigate complaints, defend rights and comply with legal obligations. Depending on the activity, processing is based on legitimate interests, performance of a requested service, consent or legal obligation.

Anonymous interaction storage is used only after the visitor explicitly consents and chooses a like, dislike, rating or tracked share. Favourite storage is used only when a signed-in user chooses it. These features support the requested action, abuse prevention and aggregate service statistics; they are not used for advertising, individual behavioural profiling or personalised recommendations. Aggregate reactions, favourites and shares may be shown publicly and may order the same popularity and rating lists for every visitor.

Recipients and service providers

Hosting, infrastructure and security providers may process limited data on the operator’s behalf. Google may process audience-measurement data as the Google Analytics provider. Data may also be disclosed where required by a competent authority or necessary to establish, exercise or defend legal claims.

International processing

Infrastructure providers may operate internationally. Where personal data is transferred outside the European Economic Area, an applicable adequacy decision or other lawful safeguards must be used.

Retention

Data is kept only for the time reasonably necessary for the purpose collected, complaint handling, security, legal obligations and the establishment or defence of claims. Device-only reaction choices may remain until you remove them or clear site data; they do not change the public aggregate counters.

An anonymous interaction profile and its cookie are created or renewed only after explicit preference-storage consent. The profile becomes eligible for scheduled deletion after 180 days without interaction and can be erased through the privacy controls; a minimal keyed suppression record, containing no preferences and no account link, expires after 180 days solely to stop an old cookie from recreating the erased profile. Keyed rate-limit data and share retry receipts become eligible for deletion after 48 hours. Daily aggregate interaction statistics, which contain no actor identifier, become eligible after 400 days. Cleanup runs on a schedule in bounded batches, so an operational failure or backlog can delay final physical removal beyond those eligibility periods. Registered-account data remains until account deletion or another stated retention rule applies.

Your rights

Where applicable, you may request access, correction, deletion, restriction, objection or portability, and withdraw consent without affecting prior lawful processing. Use the contact form and provide only the information needed to identify the request.

You may lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.

Minors

The service is not directed to minors and must not be used by anyone below the applicable age of majority. Do not submit identity documents through the general report form.

Changes

This policy may be updated when the service, providers or legal requirements change. The date above identifies the current version.