Privacy policy

Controller

Joel Padilla Rodriguez · Contact: chadquestapp@gmail.com

Summary

This site has no forms, user accounts, analytics or advertising, and does not set cookies. The only personal-data processing is as follows:

• Hosting server (Cloudflare, Inc. — Cloudflare Pages): like any web server, it may log IP address, date and requested page to serve the site and for security. Legal basis: legitimate interest (Art. 6(1)(f) GDPR). Retention: as set by Cloudflare under its privacy policy; the owner keeps no separate server logs.
• Price data providers: on the usual path this site fetches quotes on the server (/api/spot, ~5 minute cache) and your browser only talks to this domain, so api.gold-api.com and api.frankfurter.dev do not receive your IP. If the proxy does not respond, the browser may connect directly to those APIs as a fallback; in that case they do receive your IP and technical browser data. We send them no other data. Their privacy policies are those of those services.
• Email: if you write to chadquestapp@gmail.com, we process your address and the message content only to reply. Legal basis: your request and our legitimate interest in answering it. We keep it as long as needed to handle it. The mailbox is a Gmail account provided by Google.
• Browser local storage: we store on your device the last price obtained, with no personal data and without sending it to any server (see Cookie policy — link rewritten per language at build).

International transfers

Hosting, price or email providers may be outside the European Economic Area. Cloudflare, Inc. and Google are based in the United States; transfers rely on their certification under the EU–US Data Privacy Framework and/or the European Commission’s standard contractual clauses. The price APIs are only contacted directly by your browser if our server proxy fails (see above).

Your rights

You may exercise rights of access, rectification, erasure, objection, restriction and portability by writing to chadquestapp@gmail.com. You may also lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).