LEGAL

Privacy policy

Last updated: October 20, 2026

Who is responsible

David González Lomeña, Spain · david.glez.lomena@gmail.com

What we collect and why

• Nickname and the content you create (colors, drawings, figures, descriptions), shown publicly on the model and in the museum. Legal basis: providing the service you ask for.
• A random browser identifier stored in your browser's local storage, used to link your nickname, drafts and orders to you. It doesn't identify you personally.
• Payment information. Stripe processes your card. We only keep Stripe references (customer, payment and card IDs), what you bought and the amounts, to deliver your purchase, charge winning bids and meet accounting obligations.
• IP address, kept in memory to prevent abuse and in our hosting provider's technical logs for a short time. Legal basis: our legitimate interest in keeping the service secure.
• Email address, only if you joined the waiting list, to tell you once when we open. Legal basis: your consent, which you can withdraw at any time.

Content moderation

Before publishing nicknames, descriptions, drawings and figures, we send them to OpenAI's moderation services to block offensive content. Only the content is sent, not your payment data or email. Legal basis: our legitimate interest in keeping Minimundo safe for everyone.

Who processes data for us

• Render (hosting, servers in Frankfurt, EU).
• Stripe (payments). See Stripe's privacy policy.
• OpenAI (content moderation, United States). Data sent through its API isn't used to train its models and is kept for a limited time for abuse monitoring.

Transfers outside the EU are covered by the EU-US Data Privacy Framework or standard contractual clauses. We don't sell your data or use it for advertising.

Cookies and local storage

We don't use analytics or advertising cookies. Minimundo stores your browser identifier and nickname in local storage, and may set a strictly necessary cookie to give access during private previews. Stripe sets its own cookies on its checkout pages to process payments and prevent fraud.

How long we keep it

• Public content: while Minimundo exists, unless you ask us to remove it.
• Payment records: as long as Spanish tax and accounting law requires (generally up to 6 years).
• Waiting list emails: until we announce the opening or you ask us to delete them.

Your rights

You can ask to access, correct, delete, restrict or object to the processing of your data, or to receive a copy of it, by emailing us. Tell us your nickname so we can find your data. If you think we haven't handled your data properly, you can complain to the Spanish Data Protection Agency (aepd.es) or your local authority.