Privacy policy

The controller of your data is Missing information: POR COMPLETAR (nombre o razón social del titular), tax ID Missing information: POR COMPLETAR (NIF), address Missing information: POR COMPLETAR (domicilio). You can write to Missing information: POR COMPLETAR (email de contacto) about anything related to privacy.

We have not appointed a data protection officer because we are not required to.

When you browse and listen

To deliver pages and audio, our hosting provider processes technical connection data such as your IP address, browser and the page requested. We do not store your IP address in our database. Player progress and your language are saved on your own device (see the cookie policy).

Legal basis: our legitimate interest in providing the website you visit securely (Art. 6(1)(f) GDPR).

If you have an account

• Your email and sign-in data: sign-up date, confirmation and last sign-ins. You sign in with a 8-digit code or a link we email you.
• Your browser's time zone and language, saved the first time you sign in: we use them to give you your daily free episode when your day starts and to show SagasFM in your language.
• Your public name and an automatically generated avatar.
• Your daily free episodes and their history, the episodes you have unlocked, your listening progress and My list.

Legal basis: performance of the contract you accept with the terms of use (Art. 6(1)(b) GDPR).

If you subscribe

We store the customer and subscription identifiers Stripe gives us, the status of the subscription, the renewal date and, if you cancel, the date it ends. Stripe processes your email, your card or other payment method, your country and your payment history to charge you, issue receipts and prevent fraud. Card details never reach us.

Legal basis: performance of the subscription contract (Art. 6(1)(b) GDPR) and compliance with our tax and accounting obligations (Art. 6(1)(c) GDPR).

If you write comments

We explain this in detail in Comments.

Listening statistics

We always record, without identifying you, which episode is played, whether it starts, progresses or finishes, the position in the audio, the website language and the approximate country. Without identifiers this data is anonymous.

Only if you accept analytics do we add a random identifier for your device, your account if you are signed in, your approximate region and city, the page you came from and your browser. Legal basis: your consent (Art. 6(1)(a) GDPR and Art. 22(2) of the Spanish LSSI), which you can withdraw at any time.

We also count the answers to the cookie notice anonymously: the option chosen, language, country and day, with no identifier.

Security and abuse prevention

To stop automated abuse (too many plays, audio downloads, sign-in attempts or comments) we limit the rate of requests. For listening statistics and the daily audio limit we use an encrypted fingerprint of the IP address or of your account that changes every day, never the IP itself, and delete it within 48 hours. Our provider's sign-in service limits sign-in attempts per IP address. Legal basis: legitimate interest in protecting the service and its users (Art. 6(1)(f) GDPR).

Emails

We only send you the emails needed to sign in and essential notices about the service or your account. We do not send advertising without your consent.

You can write text comments on any season you can listen to. They are optional.

What data they include

• The text of the comment and its date.
• The season and the episode you write it from.
• Your account, your public name and your avatar, shown next to the comment.

What for and on what basis

We publish your comment for the other listeners with an account of that season. The legal basis is the performance of the contract you accept with the terms of use (Art. 6(1)(b) GDPR). Moderating them is our legitimate interest in keeping the service safe and respectful (Art. 6(1)(f) GDPR): the team may hide those that break the rules.

Who can see them

Anyone with an account who opens that season, together with your public name and avatar. Without an account only the number of comments is shown.

How to remove them

You can delete any comment at any time from the episode; it disappears immediately. Your comments are included in your data download and are deleted with your account.

We work with these providers, who process data on our behalf under contract:

The artificial intelligence providers we use to create the series (scripts, voices, music and images) do not receive any listener data.

Other listeners see your public name, your avatar and your comments. We do not sell personal data or pass it on to third parties, unless the law requires it.

Some providers are located in the United States or may access data from there. These transfers rely on the EU-U.S. Data Privacy Framework where the provider is certified and, in any case, on the standard contractual clauses approved by the European Commission. You can ask us for more information at Missing information: POR COMPLETAR (email de contacto).

If a law requires us to keep some data for longer, we will keep it blocked for that purpose only.

You can access, rectify and erase your data, object to its processing, request its restriction and portability, and withdraw your consent at any time.

You can do many of these things yourself:

• Download your data as JSON, including your comments: Profile › Privacy.
• Delete your account and everything linked to it, including your comments (your subscription, if any, is cancelled): Profile › Privacy.
• Cancel your subscription, change your payment method or see your payments: Profile › Subscription.
• Delete a comment: from the episode.
• Change your public name: Profile.
• Change your cookie choice: Privacy preferences.

For anything else, write to Missing information: POR COMPLETAR (email de contacto) from your account's email. We reply within one month at most.

No automated decision has legal effects on you.

If you think we have not handled your data properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or to the authority where you live.

You must be at least 14 years old to create an account and comment. If we find out an account belongs to someone under that age, we will delete it.

All connections are encrypted (HTTPS). You sign in with one-time codes instead of passwords. Episode audio is kept in private storage and served through temporary links. Each person can only read their own data, and team access is limited to what is needed to moderate and run the service.

If we change this policy in an important way, we will announce it on the website and, if you have an account, by email or inside SagasFM.