Privacy policy

Data controller

• —Obsidiaan Tech S.L., tax ID B09735028
• —C/ Las Palomas 4, 18697 La Herradura, Granada, Spain
• —hola@primafonte.org

Starting point

Primafonte has no registration, no accounts, no forms and no cookies. You are asked for nothing in order to use the scanner, and no profile about you exists.

The only personal data processed is described below.

IP address

Purpose: enforcing the usage limits that stop a single person from exhausting the service, set at five scans per hour per IP address.

Legal basis: legitimate interest, article 6.1.f GDPR, in keeping the service available and protecting it from abuse.

Retention: the IP address is not stored. What is kept is a value derived from it through a keyed hash, from which the original address cannot be recovered, and that value is deleted automatically within a maximum of one hour from the last request.

It is not associated with the scans you run or with their results.

Analysed address and scan result

Purpose: showing you the report and avoiding repeating a recent analysis of the same site.

Legal basis: legitimate interest in providing the requested service and in not overloading the sites analysed.

Retention: twenty-four hours, after which the result is deleted automatically. The address and the report are not linked to your IP address or to any other identifier.

Where the analysed site is a personal one, its address may constitute personal data of its owner. That is why reports are not published, not indexed and not listed in the sitemap.

Email, if you write to us

Purpose: answering your enquiry and, where applicable, managing the commercial relationship.

Legal basis: pre-contractual measures or performance of a contract, article 6.1.b GDPR.

Retention: for the duration of the relationship and thereafter for the applicable statutory limitation periods.

Analytics

The site uses Vercel Web Analytics, which sets no cookies and stores no identifiers in your browser.

It provides aggregate data on page views and referrers. It does not allow individual people to be identified or tracked across sites.

Recipients and international transfers

• —Vercel Inc. (United States): site hosting and analytics.
• —Upstash Inc. (United States): temporary storage of the scan cache and the rate-limit counters.
• —Both act as data processors. Transfers to the United States rely on the Standard Contractual Clauses approved by the European Commission, article 46.2.c GDPR.
• —No data is disclosed to third parties beyond the above. Nothing is sold or used for advertising.

Your rights

You may exercise your rights of access, rectification, erasure, restriction, objection and portability by writing to hola@primafonte.org or to the postal address above.

Because the service keeps no identifiers tied to you, in most cases it will not be possible to locate any data about you. That is an intended consequence of the design, not a refusal to act on your request.

If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency at www.aepd.es.

Security

• —All traffic is encrypted over HTTPS and the site forces the secure connection.
• —A strict content security policy with a per-request nonce blocks the execution of unsigned scripts.
• —There are no cookies, no local storage and no persistent identifiers.
• —The IP address is only ever handled as a keyed hash; it is never written in clear.

Minors

The service is aimed at professionals and is not intended for children under fourteen. No data about minors is knowingly collected.

Changes to this policy

Any change will be published on this page, with its update date.