Demo de KumoYami — solo lecturaComprar
LogoKumoYami Demo

Privacy policy

1. Data controller

  • Owner: Acme Demo S.L. (empresa ficticia)
  • NIF/CIF: B00000000
  • Address: Calle de Ejemplo 1, 28000 Madrid, España
  • Email: legal@example.com
  • Phone: +34 600 000 000
  • Registration: Registro Mercantil de Ejemplo, tomo 0, folio 0, hoja M-000000
  • Website: KumoYami Demo (https://demo.kumoyami.com)

2. What data we process, why and for how long

  • Browsing, statistics and security. When you visit the website, the server receives your IP address and technical data about your browser (browser, operating system and type of device). They are used to serve the website, prevent abuse (for example, limiting password attempts) and compute the website's own usage statistics, without third-party analytics services. For statistics, a record of each visitor is kept with the IP address without its last part (without the last number in IPv4, only the network in IPv6, so it does not identify the specific device), a summary of their browser (browser, operating system and type of device, never the full text it sends), the approximate country when the website's network provider reports it, the date of their first and last visit and their activity on the website (pages viewed, downloads, plays and data transferred). This record is kept for 90 days after the last visit and then deleted automatically; it is not shared with third parties or used for advertising. Legal basis: the owner's legitimate interest in providing the service securely and knowing how it is used (article 6.1.f GDPR). You can object to this processing as explained in the section on your rights.
  • Activity log. To protect the website and its files, prevent abuse (for example, repeated attempts to guess passwords), solve incidents and know how the service is used, the website keeps a log of sign-ins and passwords tried on the panel, protected folders and links (whether they were right or not; never the password typed), downloads, video and audio plays, visits to shared links, files received in mailboxes and file requests and sign-ins and changes through the network drive (WebDAV). For each event it keeps the date, the type and its result, the path of the file or folder, the IP address without its last part (without the last number in IPv4, only the network in IPv6, so it does not identify the specific device), the approximate country when the website's network provider reports it and a summary of the browser (browser, operating system and type of device). Passwords typed, the contents of files and the full text sent by the browser are never kept. Sign-ins, passwords tried and changes are kept for 90 days, and the other events (downloads, video and audio plays, visits to shared links and files received in mailboxes and file requests) for 30 days; then they are deleted automatically. The log is kept on the website's own server: only the owner looks at it, from their panel, and it is not disclosed to third parties unless required by law. Legal basis: the owner's legitimate interest in the security of the website and in knowing how the service is used (article 6.1.f GDPR). You can ask for a copy of the events of your IP address or for their deletion, or object to this log, by writing to legal@example.com with the IP address you used and the approximate dates. As the address is kept without its last part, it may not be possible to attribute the events to you with certainty (article 11 GDPR).
  • Protected folders. If you enter the password of a folder, the access permission is kept in your own browser; the website does not keep the password you type.
  • Files you send us. If you upload files to a mailbox or a file request, or send your selection from an album, we process those files and the data you include (such as your name or a comment) to receive and handle them. Legal basis: your request and your consent (article 6.1.a and 6.1.b GDPR). They are kept until handled or until you ask for their deletion.
  • Contact. If you write to legal@example.com, we use the data in your message to reply. Legal basis: legitimate interest in answering your request. It is kept as long as needed for that.

No automated decisions or profiling take place, and data is not used for advertising.

3. Recipients

We do not sell or disclose personal data, unless required by law. These providers take part in providing the service, processing data on behalf of the owner or as independent controllers:

  • The hosting provider of the website's server.
  • The storage providers where the files are kept (for example, Microsoft OneDrive, Google Drive or a private server).

4. International transfers

Some providers (such as Patreon or the storage providers) may process data outside the European Economic Area, in particular in the United States. Those transfers rely on the EU-US Data Privacy Framework or on the standard contractual clauses approved by the European Commission.

5. Your rights

You can access, correct and delete your data, object to or restrict its processing, ask for its portability and withdraw any consent you have given at any time. To do so, write to legal@example.com stating which right you exercise and how to identify you.

If you believe your rights have not been respected, you can file a complaint with the Spanish Data Protection Agency (www.aepd.es).

6. Children

Children under 14 must not provide personal data without the consent of their parents or guardians (article 7 of the Spanish LOPDGDD).

7. Security and changes

The website uses encrypted connections (HTTPS), stores passwords encrypted and limits access attempts. This policy may be updated to reflect changes in the law or in the service; the version in force is always the one published here.

Last updated: 11 October 2026.