Legal
Privacy Policy
In short: we collect what we need to give you the library, and nothing to sell. No ads, no tracking pixels, no analytics cookies. The only cookies that are not ours are TikTok’s, and only if you choose to play a video. You can see, download and delete everything we hold about you from Settings.
1. Who is responsible for your data
CAE & PRESSMEDIA, S.L. (CIF B86136090), C/ Diego de León, 47, 28006 Madrid, Spain, which runs FindFormats, is the “data controller”. For anything about your data, email contact@inspectio.io.
2. What we collect, why, and on what basis
| What | Details | Why | Legal basis |
|---|---|---|---|
| Your account | Email address, how you sign in, when you joined. Passwords are held by our sign-in provider in scrambled form; we never see them. | To give you access | Contract |
| Your purchase | The email you bought with, whether the purchase is active or refunded, and Stripe’s reference numbers. We never see your card number. | To grant access, handle refunds, and keep the records tax law requires | Contract; legal obligation |
| Your answers and settings | Whether you have an app, how you want to promote it, your default filters, theme and email choices. | To set the library up for you | Contract |
| What you open and copy | Which formats you open and which prompts you copy, with the time. | To learn which formats people actually use, so the library improves | Legitimate interest |
| Ratings and feedback | Your likes, dislikes, reasons and anything you write to us. | To decide what to add and fix | Legitimate interest |
| Privacy choices | Your choice about TikTok videos and email, with when and under which version of this policy. | To respect your choices, and show that we do | Legal obligation |
| Devices you are signed in on | The type of browser and when each session started and was last used. | Security, and so you can sign other devices out | Contract; legitimate interest |
| Landing-page signup | Your email, if you gave it on our home page, and whether you agreed to marketing emails. | To send what you asked for, and marketing only if you said yes | Consent |
“Legitimate interest” means we use it to run and improve FindFormats in ways you would expect, and you can object (section 7). We do not store your IP address in a readable form. Our providers keep short technical logs, which can include IP addresses, under their own retention periods.
3. What we never do
- Sell or rent your data, or share it for advertising.
- Use advertising or analytics cookies, or tracking pixels.
- Build a profile of you beyond what section 2 describes.
- Use how much you used FindFormats to refuse a refund.
4. Who processes it for us
| Provider | What for | Where |
|---|---|---|
| Supabase | Database and sign-in. Stores everything above | European Union (Frankfurt, Germany) |
| Stripe | Payments, receipts and refunds | Stripe Payments Europe, Ltd. (Ireland); may transfer to the United States |
| Vercel | Hosts the website | United States, with a global network |
| Resend | Sends sign-in links and account emails | United States |
| TikTok | Only if you play a video: TikTok’s player loads from TikTok and sets TikTok’s cookies | TikTok Technology Limited (Ireland); may transfer outside the EU |
| Only if you choose “Continue with Google” | Google Ireland Limited; may transfer to the United States |
When you paste a FindFormats prompt into ChatGPT, Claude or Gemini, that is between you and that service. We send them nothing.
5. Transfers outside the EU
Where a provider processes data outside the European Union, the transfer relies on the European Commission’s Standard Contractual Clauses and, where the provider is certified, the EU–US Data Privacy Framework. Ask us at contact@inspectio.io for details of a particular transfer.
6. Cookies
This is the complete list.
| Cookie | What it does | How long |
|---|---|---|
| Sign-in cookies (sb-…-auth-token) | Set by FindFormats. Keep you signed in. Strictly necessary. | Until you sign out, or the session ends |
| ff-theme (in your browser’s storage) | Set by FindFormats. Remembers light or dark mode, if you choose one. | Until you clear it |
| ff-laptop-nudge (in your browser’s storage) | Set by FindFormats on a phone. Remembers that you closed the “bigger screen” note, so it does not come back. | Until you clear it |
| Stripe’s cookies | Set by Stripe on its own checkout page, to prevent fraud during payment. | Stripe’s policy |
| TikTok’s cookies | Set by TikTok — only after you press play on a video, or choose “Always load”. | TikTok’s policy |
That is why there is no cookie banner: until you play a video there is nothing to ask about. TikTok videos are off until you press play. You can choose to always load them, never load them, or be asked each time — under any video (“Video settings”) or in Settings → Privacy choices. Every choice is recorded with the date and the version of this policy, and when this policy changes, we ask again. Nothing in FindFormats stops working if you say no.
7. Your rights, and how to use them
- See what we hold — Settings → Your data shows all of it.
- Take a copy — Settings → Your data → Download my data, as a file any program can read.
- Correct it — change your email in Settings, or ask us.
- Delete it — Settings → Danger zone (section 8 says exactly what happens).
- Object, or withdraw consent — Privacy choices and the email switches in Settings, at any time; or email us.
- Restrict how we use it — email us.
We answer requests within one month. If you are unhappy with how we handle your data, you can complain to the Spanish data protection authority, the Agencia Española de Protección de Datos (AEPD), at aepd.es, or to the authority where you live.
8. How long we keep it, and what deleting your account does
| Data | Kept |
|---|---|
| Account, answers, settings, purchases | While you have an account |
| What you open and copy | 24 months, then deleted automatically — or immediately if you delete your account |
| Ratings and feedback | While you have an account; kept without your name or email if you delete it |
| Payment record | As long as Spanish tax law requires; pseudonymised if you delete your account |
| Security and payment logs | 12 months. They contain no names or email addresses |
| Form rate-limit counters | 24 hours. They store only a scrambled form of the IP address or email, never the address itself |
Deleting your account removes your sign-in and every session, your answers and settings, what you opened and copied, your privacy choices, and any home-page signup under your email. We keep, with your name and email removed: your ratings and feedback, and the record of your payment that tax law requires. Please do not put personal details in free-text feedback. Your payment details stay with Stripe, which must keep them by law.
9. Security
Everything travels encrypted. Each account can read only its own data, enforced by the database itself rather than only by our code. Passwords are never seen by us. Deleting an account, or anything else that cannot be undone, asks you to sign in again first.
10. Children
FindFormats is not meant for anyone under 16, and we do not knowingly collect their data.
11. Changes to this policy
The version and date are at the top. If a change affects how we use your data, we will email you before it applies, and ask for your privacy choices again.
12. Contact
CAE & PRESSMEDIA, S.L. · CIF B86136090 · C/ Diego de León, 47, 28006 Madrid, Spain · contact@inspectio.io. The terms of your purchase are in the Terms.