Privacy policy

We collect as little as we can, only to run Obiblion, and we never sell it. Controller: Sergio Gualda — sergio (at) sgualda.com.

Early-access waitlist

• What: your email, optional first name, the planet(s) you chose and, if you picked one, a parcel reference; the date and wording of your consent; how you arrived (landing page, referring site, campaign tags) and a one-way hash of your IP address to stop abuse.
• Why and legal basis: to tell you when sales open and honour your early-access price — based on your consent (GDPR art. 6.1.a), which you can withdraw at any time from any of our emails. Abuse prevention relies on our legitimate interest (art. 6.1.f).
• How long: until you leave the list, or 12 months after sales open if you don't use the offer — whichever comes first.

Buyers and gift recipients

• Buyers: email, the name you choose to show, your orders and parcels — to deliver what you bought, sign you in by email link and keep the records the law requires (art. 6.1.b and 6.1.c). Card details are handled by our payment provider; we never see them.
• Gift recipients: the name and email the sender gives us, used only to deliver that gift and let the recipient claim it (the sender's contract; our legitimate interest in delivering it). We send them nothing else unless they sign up themselves.
• Public pages: the name and dedication you write on a parcel page are public by design. You can edit or remove them at any time.

Who processes data for us

• Resend — sending email.
• Vercel — hosting and cookieless, aggregate analytics.
• Our database provider — storage.
• Stripe — payments, once sales open.

Some are based in the United States; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses.

Cookies

We use only what the site needs to work: a sign-in cookie if you have an account, and your browser's session storage for things like the last planet you looked at. No advertising or tracking cookies.

Your rights

You can access, correct, delete, restrict or port your data, object to its use, and withdraw consent — write to sergio (at) sgualda.com. You can also complain to your data protection authority (in Spain, the AEPD, aepd.es).