Privacy policy
Controller
The data controller is onmars, estudio independiente (identificación completa del titular en onmars.tech/legal) ([email protected]).
What we collect about you
If you just browse, none that identifies you: the only measurement is our own anonymous analytics (Umami, hosted on our own infrastructure) — no cookies or identifiers, it counts page visits without being able to know who you are. If you create an account, we store the minimum for it to work: your email, your display name, your public handle and the activity you choose to save (shelves, ratings, reviews, lists and who you follow). If you sign in with Google, Google only confirms your email and name to us; we never receive your password. The legal basis is the performance of the service you request by creating the account (art. 6.1.b GDPR); your data lives on infrastructure in the European Union, is not shared with third parties and is not used for advertising.
Technical logs
Like any website, the server keeps temporary technical logs (IP address, requested page) that are essential to serve pages and protect against abuse. They are kept for the minimum time and never cross-referenced. When the site hits a technical error, the failure details — with nothing that identifies you — are sent to Sentry, our error log hosted in the European Union, for the sole purpose of fixing it. The legal basis for both is our legitimate interest in keeping the site running and safe.
Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to [email protected]. You can also lodge a complaint with the Spanish Data Protection Agency (aepd.es). If you have an account, you can also delete it yourself from your account page: deletion is immediate and removes your profile and all your saved activity.