1. Data controller

Data controller is Cristian N. Gaita. For requests or complaints, use the Contact page.

2. Data collected

We collect registration data, technical usage data and information required to provide the service.

3. Purpose of processing

Data is processed for authentication, account management, service delivery, usage limits, security and aggregate statistics.

4. Cookies

We use technical cookies for session and language. With your consent (or for security legitimate interest) we may use a technical device fingerprint for quotas and abuse prevention. AdsMesh ads, when enabled, load only after explicit consent.

5. Third parties

External providers: Stripe (payments), SMTP email, Google reCAPTCHA (anti-spam) and, if enabled with consent, AdsMesh for ads. Each processes data under its own policy.

6. Legal basis

Processing is based on service performance, consent where required, and legitimate interest for security and abuse prevention.

7. Retention

Account data is kept while the account is active. Photos follow plan retention rules. Technical logs are kept for limited periods.

8. Data subject rights

You may request access, rectification, erasure, restriction, objection and portability within GDPR limits.

9. Security

We apply appropriate technical and organisational safeguards, including password hashing, access controls and event monitoring.