Privacy policy

Data controller

Rubén Llamazares Menéndez (private individual), who runs LA HEREJÍA. Contact: laherejiaes@gmail.com.

Data we process

• Account: email, password (hashed; we never see it) and username.
• Profile (optional): display name, bio, profile picture, language, favourite teams and players.
• Activity: posts, uploaded images, replies, likes, followers, poll votes, predictions and points.
• Technical data: IP address and access logs needed to keep the service secure.

Purposes and legal basis

• Managing your account and community participation — performance of the terms of use you accept when registering (Art. 6.1.b GDPR).
• Security, abuse prevention and moderation — legitimate interest (Art. 6.1.f GDPR).
• Loading embedded third-party content (videos, social media) — your consent (Art. 6.1.a GDPR).

We do not sell your data, run no advertising and use it for nothing else.

Public data

Your username, display name, bio, picture, posts, favourites, followers and points are public on the site. Your email is never shown.

Providers involved

• Supabase Inc. — database, sign-in, account emails and image storage. Data is hosted on servers in the European Union.
• Vercel Inc. — website hosting.

Both act as data processors. Where access from outside the EU may occur (e.g. technical support), it relies on the European Commission's Standard Contractual Clauses or the EU-US Data Privacy Framework.

Retention

While your account exists. If you delete it, we erase your data within 30 days.

Minimum age

You must be at least 14 years old to register.

Your rights

You can delete your account and all your data at any time from My account → Delete account. For your other rights (access, rectification, objection, restriction and portability) write to laherejiaes@gmail.com. If you feel your request was not handled properly, you can complain to the Spanish Data Protection Agency (www.aepd.es) or your local authority.