Who is responsible
Quién Regala is operated by Ausias Bañuls, tax identification number 20945991Y, at Calle Sant vicent Ferrer, 75, 46702 Gandia, Valencia, Spain. Contact: [email protected].
Your exchanges are stored in your browser
Names, optional email addresses, preferences, exclusions, notes and results are stored in IndexedDB on the browser and device you use. Exchanges are not synchronised between devices and their results are not stored in a remote database. If you request an email, the selected addresses and instructions are transmitted to our mail function and SMTP provider for delivery. Your language preference is saved in local storage.
Information received by other services
The website is served through Appwrite installed on a Contabo server and uses Cloudflare to distribute and protect traffic. These services receive technical information such as IP addresses and request details. Fonts are loaded from Google Fonts, so the browser also makes requests to Google. The contracted server location, access log retention and applicable external service safeguards still need confirmation. This policy does not claim that all technical information is stored in Germany or deleted after seven days.
Email, payments and advertising
Entering an email address only saves it in your local exchange. Messages are sent only when the organiser requests them. Each person receives their own letter, without CC or the group list. Delivery uses an Appwrite function and IONOS SMTP, which processes the addresses and content needed to send the message. SMTP acceptance does not guarantee inbox delivery. Cloudflare Turnstile and counters with HMAC identifiers protect against abuse. These rows contain no plain email addresses, names or letters. Quota and duplicate records are cleaned daily after 48 hours, with an operational retention of up to approximately 72 hours. The mail provider may retain messages and logs under its service; function log retention does not determine that retention. Voluntary contributions use external SumUp payment links. Opening a link takes you to SumUp’s payment page, where SumUp processes the information needed for the transaction. Quién Regala does not collect card details or add participant information to those links. The operator may receive transaction information provided by SumUp to manage the payment and fulfil legal obligations. First-party usage statistics are collected through an Appwrite function: page category and language; and, when an exchange is completed, participant count, mode and clue, mission and Second life options. Names, emails, notes, recipients, exchange dates and URL parameters are not sent. A random page-load identifier or a hash of the exchange identifier prevents duplicates; no visitor identifier, cookies or additional browser storage are used for this measurement. Records include a technical timestamp and are kept for historical statistics. The infrastructure may process the IP needed to handle the connection, but we do not add it to these tables. Do Not Track and Global Privacy Control signals are respected when available. Figures are approximate: measurement is discarded without retries when offline or an error occurs. There is no personalised advertising.
Deleting and keeping your information
You can delete an exchange in the application or clear this site’s browser data. Local information remains until you delete it or your browser removes it. Clearing browser data does not delete JSON backups, PDFs or images you have downloaded or shared; manage these separately.
Backups and shared letters
JSON backups contain exchange information and results and are not encrypted. Letter PDFs and images are generated on your device. Sharing a letter or file is your action: check the recipient and share only the necessary information. Anyone with access to your browser can view your exchanges; confirming a name is not password protection.
Families, classrooms and workplaces
Only enter necessary information and tell participants how you will use and share it. In classrooms, a responsible adult should supervise the activity and avoid entering students’ email addresses or sensitive information when unnecessary.
Your rights and contact
Where applicable, you may exercise rights of access, rectification, erasure, objection, restriction and portability. You can send requests to [email protected]. You may also lodge a complaint with the Spanish Data Protection Agency or your competent supervisory authority. For exchanges stored solely on your device, the operator has no remote copy to access or delete.