Legal · last updated 1 November 2026
Privacy notice
Draft for review by a Spanish lawyer before public launch. Operator details marked pending are not set yet.
This notice explains what personal data alldata.monster processes, why, and your rights under the GDPR and the Spanish LOPDGDD.
Controller
- Operator
- Tax ID (NIF)
- Address
- Contact
What we process
| Data | Why | Legal basis | Kept |
|---|---|---|---|
| Google account id, e-mail, name, picture (after you sign in) | Your account, passes, support | Contract (art. 6.1 b) | Until you delete the account; then 30 days |
| Session cookie (random token; we store only its hash) | Keep you signed in | Contract | 30 days or sign-out |
| Anonymous quota cookie (random id) and which matches it opened per day | Free daily allowance | Legitimate interest (art. 6.1 f): fair free tier | 35 days |
| Keyed hash of your IP address (not the IP itself) | Abuse limits and rate limits | Legitimate interest: security | 2 days |
| Orders and payment status: pass, price, crypto amount and currency, provider ids | Deliver passes, accounting, tax | Contract; legal obligation (art. 6.1 c) | As tax law requires (up to 6 years) |
| Favourites, saved views, theme (in your browser’s storage only) | Your preferences | Stays on your device | Until you clear it |
We do not use advertising or analytics trackers, do not sell data, and do not profile you. We never receive your wallet keys; NOWPayments sees the payment it processes.
Who else processes data
- Google: sign-in (you choose what to share on Google’s screen; we ask only for openid, e-mail and profile).
- NOWPayments: crypto payment processing, under its own privacy policy.
- Cloudflare and our hosting provider: delivering the site; they process connection data such as IP addresses.
Some of these providers are outside the EEA; transfers rely on the EU-US Data Privacy Framework or standard contractual clauses.
Your rights
Access, rectification, erasure, restriction, portability and objection: write to the contact above. You may complain to the Spanish data protection authority (AEPD, aepd.es). See also Cookies.