Privacy

1. Data controller

The owner identified above is responsible for the processing described in this policy.

2. Information entered in generators

Text, names, prices, phone numbers, images, SSIDs, WiFi passwords, descriptions and URLs are processed locally in your browser’s memory. CartelExprés does not send this content to the server, store it in a database or keep the generated signs.

We do not retain downloaded PDF or PNG files. They remain on your device in the location you choose. Sharing or printing them makes their contents visible to the recipients.

Your browser may keep information through its own session restoration or autofill features, outside CartelExprés’s control. The application does not store forms in localStorage or create an account or sign history. You choose the language through page links; the choice is not stored in cookies, localStorage or on a server, and there is no automatic language redirect.

3. QR codes

QR codes are generated locally and can contain a phone number, URL or WiFi credentials. Check their contents and decide who should see them: anyone with access to the code can read the information it contains.

When you open a QR link to WhatsApp, Google reviews or another service, that third party receives the request and applies its own privacy policy. Creating the QR does not send its contents to those services. The tool does not visit URLs you enter.

4. Hosting, delivery and security with Cloudflare

CartelExprés uses Cloudflare for hosting and content distribution, DNS, HTTPS, CDN, security, protection against attacks and technical analytics.

As part of normal HTTP requests, Cloudflare may process the IP address, date and time, requested URL, User-Agent, HTTP headers and other technical information needed to deliver and protect the website. This is separate from form content, which is not included in the application’s requests.

The purposes are providing the service, detecting abuse, protecting infrastructure, diagnosing incidents and improving performance. Where these data are personal, the legal basis is the legitimate interest in operating and protecting the service, balanced against visitors’ rights. You may object under the conditions provided by law.

5. Cloudflare Web Analytics

CartelExprés uses Cloudflare Web Analytics, active on the public website, to measure page views, visited paths, approximate country, browser, operating system, device type and performance, including Core Web Vitals. Form content, images and QR contents are not sent.

According to Cloudflare’s documentation, Web Analytics does not use individual tracking cookies or localStorage to identify users, does not track people individually across websites and does not personally identify visitors. Country is a technical estimate, not a precise location.

Internal generator events contain only an action name and tool identifier. They have no external transport. Cloudflare Web Analytics does not receive custom download events or typed field values.

See the Cloudflare Web Analytics documentation and its information about privacy and absence of tracking identifiers.

6. Email enquiries

If you email pablogc1991@gmail.com, your email address, message and any voluntarily supplied information are processed to answer your enquiry. Do not send WiFi passwords, identity documents or other unnecessary data.

The legal basis is handling your own request: Article 6(1)(b) GDPR where it concerns a contractual relationship or pre-contractual steps you requested; for other service-related communications, the legitimate interest in responding under Article 6(1)(f). Enquiries are not used to send advertising.

7. Retention

Sign contents are not retained in our systems. Email enquiries are kept for as long as needed to respond and then for the applicable limitation periods for possible liabilities, restricting their use to that purpose where appropriate.

Technical data are retained according to their purpose and the provider’s configuration and terms, avoiding retention beyond what is necessary. Cloudflare documents seven days for unsampled beacon data and access to Web Analytics metrics for the previous six months. Delivery and security logs are a separate processing activity subject to the policies of the relevant service.

8. Recipients

We do not sell personal data. Cloudflare provides the technological services described. The contact email uses Google’s Gmail to receive and answer messages; that service is involved when you choose to write to us, not when you fill in a sign.

Data may also be disclosed to authorities or bodies where legally required. Services opened through a link or QR process requests under their own terms.

9. International infrastructure

Cloudflare may provide services from international infrastructure. Its documentation and data processing agreements provide for international transfer mechanisms, including standard contractual clauses where applicable. The scope depends on the service and relevant agreements.

See Cloudflare’s data processing agreement. Google’s email service may also use international infrastructure under its privacy policy. The application does not transmit your sign files to these providers.

10. Your rights

You may request access, rectification, erasure, objection, restriction of processing and portability where applicable by emailing pablogc1991@gmail.com. State the right you wish to exercise and the information needed to locate the processing. Additional identification information will only be requested where necessary and proportionate.

Requests are generally handled within one month; any extension permitted by law will be explained. You may also lodge a complaint with the Spanish Data Protection Agency (AEPD).

11. Advertising and future changes

CartelExprés currently does not use Google AdSense or other advertising platforms. No advertising is displayed.

If advertising services are introduced, this policy will be updated before activation and the relevant information and consent mechanisms will be applied.

Further information

Read the cookie policy for cookies and similar technologies. Material changes to these activities will be reflected here with an updated date.