Privacy policy | datons.com

Jesús López Saborido, reachable at jesus.lopez@datons.com, is the data controller for personal data collected through datons.com.

What data we collect

User account — email address and name provided by Google or Microsoft when you sign in via OAuth. We do not store third-party passwords.
Contact form — first name, last name, email, phone (optional), and message.
Newsletter — email address and language preference.
Web analytics — pages visited, session duration, and navigation events, only if you accept analytics cookies. Processed by Amplitude.
Cookies — a consent cookie (datons_consent) and authentication session cookies managed by Supabase.

Why we collect it

Contract performance (Art. 6.1.b GDPR) — create your account, manage subscriptions, respond to enquiries.
Legitimate interest (Art. 6.1.f GDPR) — improve the site through aggregate analytics and prevent abuse.
Consent (Art. 6.1.a GDPR) — analytics cookies and marketing communications, which you can withdraw at any time.

Who we share data with

We do not sell personal data. We use the following data processors:

Supabase (authentication and database) — Frankfurt, EU.
Vercel (hosting) — global CDN network.
Amplitude (analytics) — only with your cookie consent.
Cloudflare (CDN, Turnstile CAPTCHA) — global CDN network.
Google / Microsoft — only during the OAuth sign-in flow; they do not share additional data with us.

Data retention

Account data is kept for as long as your account is active. Contact and newsletter data is kept until you request deletion or unsubscribe. Analytics data is aggregated and anonymized after 90 days.

Your rights

Under the GDPR you may exercise your rights of access, rectification, erasure, portability, restriction, and objection by writing to jesus.lopez@datons.com. We will respond within 30 days. You may also lodge a complaint with the Spanish Data Protection Authority (AEPD).

Changes to this policy

We will publish any changes on this page and update the revision date. For material changes we will send a notice by email to registered users.