Privacy policy

Updated 10 November 2026

Controller

Owner

Eduardo García Brinkmann

Tax ID

46265166E

Address

Poeta Paredes 31, 14012 Córdoba, España

Contact

albiontools.europa@gmail.com

Data we process

• Account: email address, hashed password (never stored in plain text), registration and verification dates. With Discord: your Discord ID and email if verified by Discord. We do not store your username, avatar or Discord access token; the token is used once and revoked.
• Session: a technical cookie containing a random code. The database stores only its hash and expiry (30 days).
• Website use: token transactions, saved explorations and rewarded video records (provider, campaign and date).
• Cookieless statistics: daily page views, unique visitors and actions such as signups, logins, explorations and rewards. A keyed, irreversible hash of IP and browser avoids counting a visitor twice in a day. It is deleted at the end of the day, leaving totals only. Daily active accounts are counted similarly. We count referral sites and campaign labels, such as Google or Discord: only the site name, not the specific page or anything identifying you.
• Technical data: IP addresses are used in memory to limit abuse, not stored in our database apart from the daily statistical hash. The hosting provider may record them in technical logs.

Purposes and legal bases

• Providing accounts, tokens and tools, including Discord login: performance of the requested service (GDPR Article 6(1)(b)).
• Security and prevention of abuse and free-token fraud, including CAPTCHA: legitimate interests (Article 6(1)(f)).
• Usage statistics to improve the website and show audience totals to sponsors: legitimate interests (Article 6(1)(f)). Only aggregate totals are used and shown.
• Account emails, such as verification and password reset: performance of the service.

Retention

Account data is kept while you hold an account. Sessions expire after 30 days. Saved explorations are deleted after 90 days; token history is retained. Daily statistical hashes are deleted at the end of the day; aggregate totals contain no personal data. On account deletion, your data is deleted except where retention is required by law.

We make an encrypted daily database backup to protect accounts and tokens. It excludes sessions, email codes and daily statistical fingerprints. It is retained for 14 days on GitHub and up to 6 months on an external disk held by the Albion Tools team, solely for restoration. Deleted accounts disappear from backups when those backups expire.

Recipients

• Render: website hosting in Frankfurt, Germany.
• Neon: database hosting in Frankfurt, Germany.
• Cloudflare Turnstile: CAPTCHA on email registration and login. It processes IP, browser and technical signals to distinguish people from bots, not for advertising.
• Discord: only if you choose Discord login; it confirms your Discord ID and verified email address.
• GitHub: creates and stores encrypted daily backups for 14 days. The decryption key is not stored on GitHub.

Providers act on our behalf, except Discord for your Discord account, which determine their own processing. Some are US companies; transfers rely on the EU–US Data Privacy Framework or standard contractual clauses, as applicable. We do not sell your data or disclose it to others.

Sponsors receive no personal data from us: their ads are served from our server. They only learn about your visit if you follow their link to their website.

Your rights

Request access, rectification, erasure, objection, restriction or portability by contacting albiontools.europa@gmail.com. You may complain to the Spanish Data Protection Agency (aepd.es).

Minimum age

You must be at least 14 to create an account.