Privacy policy
Last updated 19 September 2026.
The controller of your personal data is Pau Castellvi Buqueras (tax ID 39938373T), Carrer Sant Antoni 8, 43340 Montbrió del Camp, Tarragona, Spain. Contact: [email protected].
What we collect and why
| Data | Purpose | Legal basis |
|---|---|---|
| Email, password (stored only as a salted hash), Google account email if you sign in with Google | Your account and sign-in emails | Contract |
| Profile: name, handle, photo, bio, category, country, links | Showing you publicly in the ranking | Contract |
| Payments: amount, date, status, messages sent with support | Ranking, payouts, refunds, accounting | Contract and legal obligation |
| Follows and hearts | Showing counts and your Following list | Contract |
| IP address | Limiting failed log-ins and abuse, counting profile views once; kept only in memory | Legitimate interest (security) |
Your profile, position, totals, follows and hearts counts are public by design. Card details go straight to Stripe and never reach us.
Who processes it for us
- Stripe: payments and payouts to backed people.
- Railway: hosting of the site and its database.
- Cloudflare: network delivery and protection.
- Resend (EU region): sending sign-in emails.
- DataFast: visit statistics (pages, referrer, country, device), without cookies.
- Google: sign-in, only if you choose it; fonts loaded from Google Fonts, which receives your IP address.
Some of these providers are in the United States. Transfers rely on the EU–US Data Privacy Framework or the European Commission’s standard contractual clauses.
How long
Account and profile data: while the account exists. Payment records: 6 years after the payment, as Spanish accounting law requires. Sign-in links expire after 15 minutes and email-confirmation links after 24 hours.
Your rights
You can ask for access, correction, deletion, restriction, portability or objection by writing to [email protected]. You can edit most of your data yourself on your account page. If you think your rights were not respected, you can complain to the Spanish Data Protection Agency (aepd.es).