Privacy policy

The controller of your personal data is identified at the end of the Legal notice, together with how to reach us.

Your name, because it is printed on your certificate. That is its only purpose.

Your email address, so we can send you your Human ID and your Access Key, and so you can recover access to your certificate if you lose them.

A payment reference from our payment provider, once payments are enabled, so that a single payment cannot register you twice.

We do not collect your address, your phone number, your date of birth, your location, your photograph or your social media accounts. We do not ask for them and we would not know what to do with them.

Your Access Key is stored only as a cryptographic hash. We cannot read it, recover it or tell it to you. If you lose it, we can issue a new one; we cannot look up the old one.

We process your name and email to provide what you registered for. In data protection terms, that is performance of a contract with you.

Your registration is intended to be permanent: that is the entire point of a register. We keep your name and email for as long as your registration exists, or until you ask us to delete it.

Payment records are kept for as long as tax and accounting law requires us to keep them.

Supabase, which provides the database, stored in the European Union.

Vercel, which hosts and serves the site.

Stripe, which will process payments, once payments are enabled. We never see or store your card details.

The provider that delivers your welcome email, once that is enabled.

Each of these acts on our instructions. We do not sell your data, and we do not share it for advertising.

Your Human ID is public. Anyone who has it can confirm that the registration exists and see the date it was made.

Your name and your email are never shown publicly. The public verification page deliberately withholds them, so that nobody can walk through the identifiers one by one and collect a list of who registered.

This site sets two cookies, both strictly necessary and neither used for tracking. One remembers that you proved you own a certificate, so that you can view it. The other briefly holds your new credentials so that the confirmation page can show them to you once.

There is no analytics, no advertising and no third-party tracking on this site, which is why there is no cookie banner.

You can ask us for a copy of your data, correct it, delete it, restrict how we use it, or object to our using it. Write to us at the address given in the Legal notice and we will answer.

Deleting your data means deleting your registration. Your certificate stops being verifiable, because there is nothing left to verify.

If you think we have handled your data badly, you can complain to the Agencia Española de Protección de Datos (www.aepd.es).