Privacy policy
Last updated: October 13, 2026
Who is responsible
The data controller is Mateo Tamayo, Málaga, Spain. Contact: simplelogin-newsletter.exile221@simplelogin.com.
What data we collect
- Company name, amount and date of each payment. The company name is shown publicly on the site. We do not ask for your name, email or phone.
- Payment data. Card details, email and billing information are entered on Stripe's page and processed by Stripe. We never receive card details. Stripe shares with us only the payment identifier, amount and status.
- Technical logs. Our hosting provider keeps standard server logs (such as IP address and pages requested) for security, for a limited time.
Why we use it and legal basis
- To provide the service you pay for: show your tree and the leaderboard (performance of a contract).
- To handle payments, refunds and accounting obligations (contract and legal obligation).
- To keep the site secure and prevent abuse (legitimate interest).
Who we share it with
- Stripe (payment processing). See Stripe's privacy policy.
- Render (website hosting), which may store data in the United States under appropriate safeguards such as the EU Standard Contractual Clauses.
We do not sell data and do not use advertising or tracking services. Fonts are served from our own server, so no data is sent to third parties when you visit the site.
How long we keep it
Payment records are kept for as long as needed for accounting and tax obligations (generally up to 6 years under Spanish law). Company names remain on the leaderboard history of the edition.
Your rights
You can request access, rectification, erasure, restriction, objection or portability of your data by writing to simplelogin-newsletter.exile221@simplelogin.com. You can also file a complaint with the Spanish Data Protection Agency (www.aepd.es).