Privacy policy

1. Data controller

The controller of personal data collected through the TabletopAgenda website is:

• Company name: Imperio Noxus S.L.
• Tax ID (CIF): B27535376
• Address: Calle Poema Sinfónico 37, Bajo H, 28044 Madrid, España
• Contact email: [email protected]

2. Data we collect and purpose

We currently collect the following personal data:

• Email address, voluntarily provided when subscribing to our newsletter.
• Preferred language (Spanish or English), inferred from the interface used at signup.
• Limited technical data: an anonymous hash of the IP address, browser user agent, and country code provided by Cloudflare. We use this only to prevent form abuse and understand aggregate traffic origin, never to individually identify the user.

The purpose of processing is to send you communications about the launch and evolution of the project. We do not use your data for third-party advertising and do not share it with outside parties, except under legal obligation.

3. Legal basis

The legal basis for processing is your explicit consent when voluntarily filling out the subscription form (Article 6.1.a of Regulation (EU) 2016/679, GDPR).

4. Retention period

We retain your data while your subscription is active and until you request its deletion. Once you unsubscribe, your data is kept blocked for the periods required by law before final deletion.

5. Data processors

To provide the service we rely on the following providers acting as data processors:

• Cloudflare, Inc.: hosting of the website and database (Cloudflare Pages and D1) on EU-based infrastructure.

6. Your rights

You can exercise your rights of access, rectification, deletion, objection, restriction and portability at any time by writing to [email protected]. You also have the right to lodge a complaint with the Spanish Data Protection Agency (www.aepd.es) if you consider that the processing does not comply with current regulations.

7. Cookies

The Site only uses strictly necessary and user-preference cookies, both exempt from prior consent under article 22.2 of Spanish LSSI-CE and the GDPR ePrivacy guidelines:

• NEXT_LOCALE: functional, stores the language the user explicitly picked in the switcher so it persists across visits. Duration: 1 year.
• ttagenda_session: technical authentication cookie that keeps a registered user signed in. HttpOnly,Secure, SameSite=Lax. Duration: 30 days or until sign-out.

No advertising or third-party tracking cookies are used. For usage statistics we rely on Umami, a self-hosted, cookieless web analytics tool that does not track users across sites or store anything on their device. We also keep our own aggregate counters (for example, the number of views of an event or a shop) that likewise use no cookies and identify no one. That is why no cookie banner is shown: none of the cookies in use requires prior consent under current legislation.