Skip to main content
Shinyx
Account

Privacy policy

How Shinyx processes your personal data under the General Data Protection Regulation (GDPR) and Spanish Organic Law 3/2018 (LOPDGDD).

Draft: this text is pending final wording and legal review.

Pending content

  • Identity and contact details of the data controller.
  • Data we process: your email and display name, collection cards, wishlist and trade list, the language you choose, and IP addresses in sign-in and request logs.
  • Purposes of processing: providing the service, keeping the session and letting you share your trade list.
  • Legal basis for each purpose (performance of the requested service, legitimate interest or consent).
  • Recipients and processors: Supabase (database in the EU), Cloudflare (hosting) and the email provider that sends your sign-in code.
  • International transfers and their safeguards (EU-US Data Privacy Framework or standard contractual clauses).
  • Retention periods and deletion when the account is deleted, including how long Supabase and Cloudflare keep sign-in and request logs (email, IP address) afterwards.
  • Rights of access, rectification, erasure, objection, restriction and portability, and how to exercise them.
  • Right to lodge a complaint with the Spanish Data Protection Agency (AEPD).
  • Minimum age to use the service (14 in Spain).
  • No automated decision-making or profiling.

Last updated: pending