privacy policy

Last updated 14 October 2026. This policy covers the website comotoca.com. Each app has its own policy, published at comotoca.com/<app>/privacy when the app ships.

who is responsible

The data controller is Comotoca, Sociedad Limitada, Valencia, Spain. For anything about your data, write to hello@comotoca.com. The company's full details are in the legal notice.

what we collect, and why

This website has no accounts, no forms, no cookies, no analytics and no third-party scripts or fonts. Everything it loads comes from comotoca.com. Two things do get recorded:

• Server logs. When you open a page, the web server records your IP address, the time, the address requested, the referring page if any, and your browser's user-agent string. We use this to keep the site running and secure (legal basis: our legitimate interest, GDPR article 6.1.f). Logs are kept for up to 30 days and then deleted.
• Email. If you write to hello@comotoca.com, we keep your address and your message for as long as we need to answer you and to keep a record of the exchange (legal basis: taking steps at your request, article 6.1.b, and our legitimate interest in keeping correspondence, article 6.1.f).

We do not sell, rent or share this data with anyone, and we do not use it for advertising or profiling.

who processes it

Our hosting provider stores the server logs on a server in Frankfurt, Germany, and our email provider stores the messages, each acting on our instructions under a data-processing agreement. If a provider processes data outside the European Economic Area, we rely on the safeguards the GDPR requires, such as an adequacy decision or standard contractual clauses.

your rights

Under the GDPR and Spain's Organic Law 3/2018 (LOPDGDD) you can ask us to access, correct, delete or restrict the data we hold about you, to receive it in a portable form, and you can object to our processing of it. Write to hello@comotoca.com and we will answer within a month. If you are not satisfied, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos, at aepd.es.

changes

If this policy changes, the new version appears here with a new date. We will not quietly expand what we collect.